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", 0x1000, 0x7, 0x1}, {&(0x7f0000001540)="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", 0x1000, 0xcca9}, {&(0x7f0000000240)="fa1b49240386174b247f924f9d52af4669a7", 0x12, 0x4c, 0xaadf}, {&(0x7f0000000280)="d2726f9a14477b615232586bf33dcbf35f434752c471b04ddc2127cf5df878037f50bc8840b4f2b0f4bb6bb9047b3dde7bea2cc1c95b4ec823986c5ea0d15845b91a24239eaa3d62bbaaf71d8d93d69552de4b01dd5e5ea3140f87ac57e58ca4ab9131b6ac5a73d2d707a83de4534064809f2477e1f647d809e71536267453a9dd223846dc257dfe07313acbea028698f2f026430a0c7ed78a0b67a4b60dd2a362b0771933a7b57c6f9a7d9d832dec7dafa33c450a5cc911c4cf1bb2626eeeb71c866f355d83fb31b21cbf0a051f4249f828bd6fee1da25438114d01cec53ff154f7b4ebbce8bba929", 0xe9, 0x4, 0x3}, {&(0x7f0000000380)="618361113adae9a3fedb8bdf51dbf38f154b69eeba2a8217d72a5d2bfe2b75b3f4f4cbbd893bc756693f5befd303d4acbe11b022edefb11458fbec7bcbd8112f03501643c9abd6a76a7b1d62a5fda21ffa60e18dbdbe312604ea2820670a512dbefeec8ac012ef74b4356fb589a1ab6e3f11983425bea13f9da1da68ad5894e6b639ca7521c6a0051af33f38cb93a7c13777d3d95777533035dc9981e66e94833b3002d260c234823c84c6488aa7fbe658447e", 0xb3, 0x8, 0x9}, {&(0x7f0000002540)="aaeb8a8dfec9c9c79899301c56c02646961c8f47db8d09ef9ab7a420e3fd7d8350741a488997cb0fab2505e5fc08f815f50562de67ae8884c3da8adf380d4946b17cb74a15228c5c6082cc90c05b927bca3d89d4fd60b32c24ab5dc4f92ca21495fcef16a772ba856b037aecedd4e824124492635137bf815129fd83c7decf045739d9307181d0b780c30e7344107e52ef5c5482e366e01c5a1c1012772db5cf059c29733287190953d0f11bd3fb92d7a565743a603ebc187ee3b17f29cff8d1f470dfef5f75564c8dff3816a559b86ae0d59ba9e9be318c7fa48157d1bb22f855711c853ff772c4d5f4018d21529c0b91322e7892bd7d", 0xf7, 0xffffffff, 0x2}, {&(0x7f0000002640)="e792fc046119da01fe9f8edcad5645fe5fd5d071047ded7080d75f4abd7812d61fe5741f25c12cf8c9c020b6ca2d9a974691c806db96278b7eeff91f58ff12e1b6f1b9ef2979e85d829abec05fe5236dc785bc09fae3b0b90d6fffcfc1d59952e6c230cedf86194c7b15b3114af280eb47598f7a8f7022bd36e5fca693006234b889480c831fef3d741cd683f0132195d99ab86483abd01020138f7b0651dfb5941e40cac059f89cf2c908a95e1ae79262edb19c212afa", 0xb7, 0x0, 0x5}], 0x3f0000) connect$unix(r0, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xff, 0x1) [ 634.780988][T13787] binder: 13693:13787 ioctl c0306201 20000440 returned -22 11:52:25 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x2000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:25 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000384", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:26 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x2) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:52:26 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x48000000, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) 11:52:26 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000684", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:26 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x3000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:26 executing program 1: r0 = socket$unix(0x1, 0x2000000000001, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) connect$unix(r0, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 11:52:26 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000784", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 635.505317][T13929] binder: 13928:13929 unknown command 536871040 [ 635.527323][T13929] binder: 13928:13929 ioctl c0306201 20000440 returned -22 11:52:26 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x6000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 635.578004][T13947] binder: 13928:13947 unknown command 536871040 11:52:26 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:26 executing program 1: r0 = socket$unix(0x1, 0x2000000000001, 0x0) r1 = socket$unix(0x1, 0x805, 0x0) bind$unix(r1, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x40, 0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x9, 0x3800000000000, 0x81}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000000c0)={r3, @in6={{0xa, 0x4e22, 0x6, @mcast2, 0xffffffffffffffd3}}}, 0x84) connect$unix(r0, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) [ 635.618645][T13947] binder: 13928:13947 ioctl c0306201 20000440 returned -22 11:52:26 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x7000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x4c000000, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) [ 635.814746][T14060] binder: 14058:14060 unknown command 536871040 [ 635.840957][T14060] binder: 14058:14060 ioctl c0306201 20000440 returned -22 [ 635.872356][T14064] binder: 14058:14064 unknown command 536871040 [ 635.880601][T14064] binder: 14058:14064 ioctl c0306201 20000440 returned -22 11:52:27 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x8) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:52:27 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e005884", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:27 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:27 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) fsetxattr$security_smack_entry(r0, &(0x7f0000000080)='security.SMACK64IPOUT\x00', &(0x7f00000000c0)='\x00', 0x1, 0x2) r1 = socket$unix(0x1, 0x2000000000001, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e20}, 0xfffffffffffffed6) r3 = dup(r2) write$P9_RUNLINKAT(r3, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7) connect$unix(r1, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x10) 11:52:27 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x3f000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x60000000, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) 11:52:27 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 636.391453][T14071] binder: 14070:14071 unknown command 536871040 11:52:27 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x40000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 636.440153][T14071] binder: 14070:14071 ioctl c0306201 20000440 returned -22 11:52:27 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x2, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 636.482992][T14131] binder: 14070:14131 unknown command 536871040 [ 636.520061][T14131] binder: 14070:14131 ioctl c0306201 20000440 returned -22 11:52:27 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5800000000000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:27 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) r1 = socket$unix(0x1, 0x4, 0x0) bind$unix(r1, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x501000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000000c0), r3, 0x2}}, 0x18) 11:52:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x68000000, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) [ 636.678892][T14200] binder: 14197:14200 unknown command 536871040 [ 636.721042][T14200] binder: 14197:14200 ioctl c0306201 20000440 returned -22 [ 636.735124][T14202] binder: 14197:14202 unknown command 536871040 [ 636.753706][T14202] binder: 14197:14202 ioctl c0306201 20000440 returned -22 11:52:27 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x300) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:52:27 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x60000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:27 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x3, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:27 executing program 1: r0 = socket$unix(0x1, 0x2000000000001, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000540)={0x2, 0x0, 0x2080, {0x6002, 0x4, 0x2}, [], "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", "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"}) connect$unix(r0, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 11:52:27 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x6c000000, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) [ 637.235430][T14207] binder: 14206:14207 unknown command 536871040 11:52:28 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x8dffffff]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:28 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x6, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:28 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff00000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 637.277556][T14207] binder: 14206:14207 ioctl c0306201 20000440 returned -22 [ 637.313796][T14265] binder: 14206:14265 unknown command 536871040 [ 637.346964][T14265] binder: 14206:14265 ioctl c0306201 20000440 returned -22 11:52:28 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x7, 0x0) bind$unix(r1, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000280)=0x358c000000000, 0x4) getpeername$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, &(0x7f0000000240)=0x10) r3 = socket$inet6(0xa, 0x80000, 0x9) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000000)={0x100000000, {{0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xd5a1}}, {{0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, [], 0x1a}, 0x6}}}, 0x108) connect$unix(r0, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net\x00') setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000180)=0x7fff, 0x4) 11:52:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x74000000, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) 11:52:28 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 637.462165][T14333] binder: 14332:14333 unknown command 536871040 [ 637.500430][T14333] binder: 14332:14333 ioctl c0306201 20000440 returned -22 [ 637.539812][T14342] binder: 14332:14342 unknown command 536871040 [ 637.576297][T14342] binder: 14332:14342 ioctl c0306201 20000440 returned -22 11:52:28 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = getpid() getpriority(0x2, r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:52:28 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x7, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:28 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0xf5ffffff]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:28 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x7a000000, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) 11:52:28 executing program 1: r0 = socket$unix(0x1, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x200, 0x0) lstat(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) write$FUSE_ATTR(r2, &(0x7f0000000180)={0x78, 0xffffffffffffffda, 0x6, {0x0, 0x1f, 0x0, {0x1, 0x0, 0x9, 0x7f, 0x6, 0x6, 0x100, 0xfffffffffffffffb, 0x81, 0x3ff, 0x3, r3, r4, 0x6, 0x5}}}, 0x78) connect$unix(r0, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 11:52:28 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x58, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:28 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0xffffff8d]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:28 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:28 executing program 1: socket$unix(0x1, 0x2000000000001, 0x0) r0 = socket$unix(0x1, 0x3, 0x0) bind$unix(r0, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x4, 0x4000) [ 638.159075][T14455] binder: 14454:14455 unknown command 536871040 [ 638.177762][T14455] binder: 14454:14455 ioctl c0306201 20000440 returned -22 [ 638.247468][T14470] binder: 14454:14470 unknown command 536871040 [ 638.284651][T14470] binder: 14454:14470 ioctl c0306201 20000440 returned -22 11:52:29 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x300, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:29 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0xfffffff5]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:29 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x481, 0x0) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f00000000c0)={0x2, 0x2, 0x0, 0x1, 0x8, 0x100000001}) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000080)={0x0, {0x1f, 0x5}}) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x7, 0x3, 0x4, 0x9, 0x2, 0x1}, {0x8000000f, 0x0, 0x5, 0xa0, 0x81, 0x20, 0x2}]}) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f00000003c0)={'syz_tun\x00', 0xf7}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) r2 = dup2(r1, r1) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0xc}, @local}, 0x8) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000400)={@dev, 0x0}, &(0x7f0000000440)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000480)={r3, 0x1, 0x6, @local}, 0x10) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000100)={0x1, 0x0, 0x3, 0x3, 0x3}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000000240)={0x7, 0x0, 0x0, 0x2d3, 0xfffffffffffffff9, {0x20, 0x3}}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000300)='trusted.overlay.redirect\x00', &(0x7f0000000380)='./file0\x00', 0x8, 0x3) 11:52:29 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0xfdfdffff, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) 11:52:29 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x100000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:29 executing program 1: r0 = socket$unix(0x1, 0x2000000000001, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x7, 0x0) 11:52:29 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x600, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:29 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 639.000449][T14593] binder: 14590:14593 unknown command 536871040 [ 639.028080][T14593] binder: 14590:14593 ioctl c0306201 20000440 returned -22 11:52:29 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x700, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:29 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x200000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 639.060227][T14601] binder: 14590:14601 unknown command 536871040 [ 639.085520][T14601] binder: 14590:14601 ioctl c0306201 20000440 returned -22 11:52:29 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0xfffffdfd, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) 11:52:29 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x300000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:30 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0xb0000, 0x0) r1 = io_uring_setup(0xfc9, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x2, 0x4b}) dup3(r0, r1, 0x80000) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) readv(r2, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x40, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x2d1) 11:52:30 executing program 1: r0 = socket$unix(0x1, 0x2000000000001, 0x0) socketpair(0x0, 0x3, 0x5, &(0x7f0000000380)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x901, 0x0) execve(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000002c0)=[&(0x7f00000000c0)='/dev/full\x00', &(0x7f0000000100)='/dev/full\x00', &(0x7f0000000140)='/dev/full\x00', &(0x7f0000000180)='tls\x00', &(0x7f00000001c0)='tls\x00', &(0x7f0000000200)='self{system2\x00', &(0x7f0000000240)='tls\x00', &(0x7f0000000280)='tls\x00'], &(0x7f0000000340)=[&(0x7f0000000300)='eth0}ppp0\x00']) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) 11:52:30 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x4000, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 639.258327][T14715] binder: 14714:14715 unknown command 536871040 [ 639.274361][T14715] binder: 14714:14715 ioctl c0306201 20000440 returned -22 11:52:30 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:30 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x5800, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 639.356888][T14727] binder: 14714:14727 unknown command 536871040 [ 639.387493][T14727] binder: 14714:14727 ioctl c0306201 20000440 returned -22 11:52:30 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x600000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x100000000000000, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) 11:52:30 executing program 1: r0 = socket$unix(0x1, 0x2000000000001, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xffffffff, 0x800) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) write$evdev(r2, &(0x7f00000001c0)=[{{0x0, 0x2710}, 0x1, 0x4, 0x6}, {{}, 0xd9db63f9d00ba5a, 0x10001, 0x3}, {{r3, r4/1000+10000}, 0x14, 0x7, 0x6cf}, {{0x77359400}, 0x0, 0x7, 0x5}, {{0x0, 0x2710}, 0x1, 0xffffffffffffffff, 0x8001}, {{0x77359400}, 0x1f, 0x9, 0x8}], 0x90) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r5, 0x900, 0x70bd2d, 0x25dfdbfc, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) 11:52:30 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:30 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x1000000, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:30 executing program 1: r0 = socket$unix(0x1, 0x2000000000001, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 11:52:30 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x700000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 639.621962][T14849] binder: 14848:14849 unknown command 536871040 [ 639.673725][T14849] binder: 14848:14849 ioctl c0306201 20000440 returned -22 [ 639.717780][T14862] binder: 14848:14862 unknown command 536871040 [ 639.780290][T14862] binder: 14848:14862 ioctl c0306201 20000440 returned -22 11:52:31 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:52:31 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:31 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x2000000, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:31 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x3f00000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x200000000000000, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) 11:52:31 executing program 1: r0 = socket$unix(0x1, 0x2000000000001, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xdba, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000540)={0x0, 0x1000, "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"}, &(0x7f0000000040)=0x1008) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000080)={r3, 0xbe, "de749162ec1d1d786c56c03a238543b48dad3c8bdf3698d4a0c60172e30f48934fc3baac8cd631d69913dd307e1944d89b2392739202c63251ff468b4b0e58e55867d74971a236fd601bf5f9fadd5107b177f9e558cfae078b4c0113b614bc67cc5206fb20fed0111e35d391f067929cb76a8128561b29ac4fb7e6d74965fb04a2c8ec5fe067a757f25e1efa45d66604dc69c372062de9362f7715cda82f3a8b65ac2b4e5c1a735d157753b618084451eac781ef1dea34adc16a8b6a1c68"}, &(0x7f0000000180)=0xc6) connect$unix(r0, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 11:52:31 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x3000000, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 640.309203][T14973] binder: 14972:14973 unknown command 536871040 [ 640.315518][T14973] binder: 14972:14973 ioctl c0306201 20000440 returned -22 [ 640.343939][T14979] binder: 14972:14979 unknown command 536871040 11:52:31 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x4000000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:31 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:31 executing program 1: r0 = socket$unix(0x1, 0x2000000000001, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f00000000c0)) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7fff, 0x30202) ioctl$TIOCNOTTY(r3, 0x5422) connect$unix(r0, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) fcntl$setsig(r2, 0xa, 0x16) [ 640.372243][T14979] binder: 14972:14979 ioctl c0306201 20000440 returned -22 11:52:31 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x100, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = userfaultfd(0xffffffffffffffff) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:52:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x300000000000000, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) 11:52:31 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x6000000, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:31 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x6000000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:31 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:31 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl(r0, 0x1922, &(0x7f0000000000)="2c3adc26dcad5b5298b2efc79101ffa679eb99b01620b1022fbea69508c20a2128e0bd5c760d06722c0ef0fc") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) [ 640.668693][T15093] binder: 15092:15093 unknown command 536871040 11:52:31 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x7000000, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:31 executing program 1: r0 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x7, 0x40000000) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$unix(0x1, 0xb, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f00000001c0)='\x04\x00\x009\xadT\xaf\xe3\xa1\x1d\xd4\xfe(D\x1c\xfa\r\xab\x82\xeb\x00\x8dv\t\xc6\xd5\xe7\xdc\xd5\xd3\x8aI\x062\xe661\x81\xeb\xeeh\xec\xa8h<%C\r\x9e\x9e\xee\xafJ\xd4\xcc\xdd~\xfd\x18bQ\x81\xd0\xe3\xc4\xdf2\x9b\x15\xe7\x1e\xab\x8c\xc4\xdb\x96\xc6\x05\xe3\xda\xe7$Ni\x9b\xf9*\xecXw\xffI`aY\x94\v+x\xab\xad\xa5L\xa4\x93X\x8b\xb5\x14\xdc\x93\xfc\xa58\xb1\xec\xac\x05O\x05`\xd2Tv7\x8e\xa3\x86\x86\x13-\x80\xc2\xe3\x9b\x96\xa0\x91\x8e\x831\xb9!\xc8B\xcd\xe1\xdbn\x01\x8b\xc3\xc6\xbf0\x89x\xebY\x14\xc6\xfc\xfd`\xb7\x19\x04\x04?\x1b\xdd\x8bt\xeaK\x96\xbfx\x8c\xd6\x99\xb5h\xaa3o4\xe1\xf3&\xe4\xee\ar\xc1\xba\x1c#\xbd\xb15\xb1\x10{\xd9\xf2\xd3e\xd0$Q\x9d\x03{2\x99\xa9\xa6\x1cf\xc6p\xcd[\xa1>\xb8\xee\xf9\xcd\xfd\xa1\t=\xb8H\x13[\xcc\xfd\x88\xdd\xf8\xc6\xbc\x98\xb1g\xab\x01\\\x00\xd86\xabZ#\x90M\xe1\x8cp\xbc\xc5\x8ed?\r\xa4_V\xfc9q^\x97\x9fG\xd4\x9f.\x15\'\x94\x83\x81\x06O\x00\xa3\x15\xd4x\xe0@\xf4\x9c\xe7X)H\x95\x15\x16\x01\x92', 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) ioctl$TIOCNOTTY(r0, 0x5422) ioctl$UI_DEV_CREATE(r0, 0x5501) r4 = socket$unix(0x1, 0xfffffffffffffffd, 0x0) fcntl$setflags(r3, 0x2, 0x1) connect$unix(r1, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000300)={'bridge_slave_0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="030000004acf1556578dca04bee886acee69631964105e6d42b3ff81dd9ad406c481fb13629e399215fdd5cd034c2a1904ba396a13c554a1b790914ccd3cd0a27949f46a764368eb3253b4566edf0704fcacef865f175501473a10944a34fa6cf665ce052057d8afd91ae53e8f86cfbdfceadc0398b422e2fdf8e688f88bbf9abc76b71f88aae3e35f252eb57b0b85e46f260f1ecbd2f329384ca95bcdf0d11e1e44e2ada1e9f2dc5e8a7ca7fc2353bd09000000010000000100008008000000ffff000001b08e49a6a34d8356bc17f039d06e78763f663d61a871dd8795a20514c8"]}) [ 640.716849][T15093] binder: 15092:15093 ioctl c0306201 20000440 returned -22 11:52:31 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 640.782830][T15113] binder: BINDER_SET_CONTEXT_MGR already set [ 640.796631][T15119] binder: 15092:15119 unknown command 536871040 [ 640.810557][T15113] binder: 15092:15113 ioctl 40046207 0 returned -16 11:52:31 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x40000000, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:31 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x8dffffff00000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 640.827296][T15119] binder: 15092:15119 ioctl c0306201 20000440 returned -22 11:52:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x400000000000000, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) 11:52:31 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x58000000, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:31 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0xf5ffffff00000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:31 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 641.047741][T15197] binder: 15178:15197 unknown command 536871040 11:52:31 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x8dffffff, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:31 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0xffffffff00000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 641.088227][T15197] binder: 15178:15197 ioctl c0306201 20000440 returned -22 [ 641.148841][T15252] binder: 15178:15252 unknown command 536871040 [ 641.155147][T15252] binder: 15178:15252 ioctl c0306201 20000440 returned -22 11:52:32 executing program 1: r0 = socket$unix(0x1, 0x2000000000001, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x1, 0x4000) connect$l2tp(r1, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x1, 0x1, 0x4, {0xa, 0x4e22, 0x2, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xa}}, 0x7}}}, 0x3a) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) modify_ldt$read_default(0x2, &(0x7f0000000600)=""/248, 0xf8) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x40, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000000c0)={0x2000000000000001, 0x0, &(0x7f0000000540)=""/157, &(0x7f00000003c0)=""/22, &(0x7f0000000200)=""/178}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000001, 0xc010, r3, 0x8000000) 11:52:32 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:32 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x8800, 0x0) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000040)) 11:52:32 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0xf5ffffff, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x500000000000000, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) 11:52:32 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0xffffffffffffffff]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 641.587476][T15262] binder: 15261:15262 unknown command 536871040 11:52:32 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x2]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:32 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:32 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0xffffff8d, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 641.629546][T15262] binder: 15261:15262 ioctl c0306201 20000440 returned -22 [ 641.649452][T15316] binder: 15261:15316 unknown command 536871040 [ 641.684390][T15316] binder: 15261:15316 ioctl c0306201 20000440 returned -22 11:52:32 executing program 1: socket$unix(0x1, 0x2000000000001, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = accept$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000400)) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000440)={{0x0, @remote, 0x4e22, 0x1, 'sed\x00', 0x28, 0x2, 0x5}, {@broadcast, 0x4e21, 0x2002, 0x5, 0x0, 0x3}}, 0x44) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x1, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f00000000c0)={0x9, {0x2, 0x7, 0x7, 0x7ff, 0x6, 0xfffffffeffffffff}}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80080, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x8, 0x48000) sendto$rxrpc(r3, &(0x7f00000001c0)="d5de573485f26a7193", 0x9, 0x8000, 0x0, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xf1) 11:52:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x600000000000000, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) 11:52:32 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0xfffffff5, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:32 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x3]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:32 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5800]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 641.883958][T15394] QAT: Invalid ioctl [ 641.920520][T15399] binder: 15391:15399 unknown command 536871040 [ 641.931163][T15399] binder: 15391:15399 ioctl c0306201 20000440 returned -22 [ 641.953429][T15435] binder: 15391:15435 unknown command 536871040 [ 641.961757][T15435] binder: 15391:15435 ioctl c0306201 20000440 returned -22 11:52:33 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x100000000, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x24200, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040)=0x4) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:52:33 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x100000000000000, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:33 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x6]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:33 executing program 1: r0 = socket$unix(0x1, 0x2000000000001, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x20000) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x7ff) bind$unix(r1, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) vmsplice(r0, &(0x7f0000000380)=[{&(0x7f0000000040)="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", 0xfe}, {&(0x7f0000000140)="a3321f005b316dc4a044dceb653a8243a2713fb90a06beef6afe983e48ccf87d3245420c38c62d07db8a801ec1fa727375c8a03f350e4d9eb6f61983eb9b7f77568de4454e10d606677150e40c4959c036000d7db3d3a396a778d8350272d50585031dfc753e06428f300e9120557d2d193bc1f451a95f6be9ee25e443c9fc20c499d6f23454329f7545e7fc463ac77a93ea259b48e372e726f966aa42d89b18c28631e00417ea45d89ffc638f89d09198284e37977983b87a6cba52d2e6f32985b3064e89b7aae54028b6d25768dedd1f9b4102efce6ddd2f361af620287c6473a04ebd2da9d3e1cf2f9f061a9c4ff80c3910a69c23c2", 0xf7}, {&(0x7f0000000240)="792a8e1c356f223515020970ef09042a54c8d2afb5057b1b483ca8ae8aa16ddc9c255bf8094e76092bbf19d7d9623ce25db3c645b2584a9219636679e489c6051e4efbb1919d428b25da253dc9dce96118cdbf587f6806f66800854be3c9b402dc50ad0aa6e56f5a538ebd9f5e079d824b8028c85725b3770ade77b2b10edca51c2aac5f455363e7ddbbfe42b071", 0x8e}, {&(0x7f0000000300)}, {&(0x7f0000000340)="f43c209a266480be50dd6ea2aed141ba891d6c11a3e42bf2beae", 0x1a}], 0x5, 0x4) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f0000000300)) connect$unix(r0, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f0000000540)={0x3, 0x1, @stop_pts=0x9}) 11:52:33 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x700000000000000, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) 11:52:33 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x7]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 642.462499][T15515] binder: 15507:15515 unknown command 536871040 11:52:33 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:33 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x200000000000000, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 642.512638][T15515] binder: 15507:15515 ioctl c0306201 20000440 returned -22 11:52:33 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x60]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 642.590251][T15532] binder: BINDER_SET_CONTEXT_MGR already set [ 642.590376][T15515] binder: 15507:15515 unknown command 536871040 11:52:33 executing program 1: socket$unix(0x1, 0x3, 0x0) r0 = socket$unix(0x1, 0x2000000000001, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) [ 642.630697][T15532] binder: 15507:15532 ioctl 40046207 0 returned -16 11:52:33 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x300000000000000, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 642.687965][T15515] binder: 15507:15515 ioctl c0306201 20000440 returned -22 11:52:34 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xfffffffffffffffd, 0x22000) recvmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000040)=""/108, 0x6c}, {&(0x7f00000000c0)=""/114, 0x72}, {&(0x7f0000000240)=""/13, 0xd}, {&(0x7f0000001380)=""/210, 0xd2}], 0x5, &(0x7f0000002040)=""/4096, 0x1000}, 0x1) sendmmsg(r1, &(0x7f0000000000), 0x0, 0x80) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000001600)={0x0, 0x6}, &(0x7f0000001640)=0x8) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001700)={{0x0, 0x3, 0x200, 0x0, 0x1f5d}}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000001680)={r3, 0x9}, &(0x7f00000016c0)=0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000001480)={0x0, 0x5, 0x8, 0x3, 0x101, 0x7, 0x38e, 0x2, {0x0, @in={{0x2, 0x4e20, @broadcast}}, 0xd9, 0x100000001, 0x1ff, 0x0, 0x9}}, &(0x7f0000001540)=0xb0) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000001580)={r5, 0x100000000}, &(0x7f00000015c0)=0x8) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:52:34 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:34 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x300]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:34 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x600000000000000, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x1000000000000000, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) 11:52:34 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1000, 0x800) getpeername$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x1c) r1 = socket$unix(0x1, 0x2000000000001, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 11:52:34 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x600]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 643.366187][T15756] binder: 15749:15756 unknown command 536871040 11:52:34 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x700000000000000, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:34 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 643.411084][T15756] binder: 15749:15756 ioctl c0306201 20000440 returned -22 11:52:34 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x80000, 0x0) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f0000000040)=0x401) 11:52:34 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x700]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 643.496436][T15796] binder: 15749:15796 unknown command 536871040 [ 643.542706][T15796] binder: 15749:15796 ioctl c0306201 20000440 returned -22 11:52:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x2000000000000000, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) 11:52:34 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x3f00]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:34 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:34 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x4000000000000000, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:34 executing program 1: r0 = socket$unix(0x1, 0x2000000000001, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e23}, 0xffffff44) connect$unix(r0, &(0x7f0000000440)=@abs={0x1, 0x0, 0x4e24}, 0x6e) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x20600, 0x188) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000100)={0x1, @sliced={0xffffffff, [0x5, 0x5, 0x200, 0x10c7, 0x80000001, 0x5, 0x401, 0x1, 0x2, 0x9, 0x5, 0xc12, 0x5, 0xffff, 0x0, 0x8000, 0x42b0, 0xbc, 0x9, 0x1, 0x5714401f, 0x3, 0x4, 0x3f, 0x80, 0x6, 0x1, 0x0, 0x2b, 0xffffffffffff0000, 0xc7d, 0x7, 0x66, 0x2, 0x101, 0x9, 0x7, 0x8d, 0x5, 0x9, 0xff, 0x0, 0x2, 0x7, 0x5, 0x8001, 0x5], 0xffffffff}}) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000200), &(0x7f00000000c0)=0x4) [ 643.703572][T15883] binder: 15882:15883 unknown command 536871040 11:52:34 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:34 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x4000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:34 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x5800000000000000, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 643.762486][T15883] binder: 15882:15883 ioctl c0306201 20000440 returned -22 [ 643.809690][T15896] binder: 15882:15896 unknown command 536871040 [ 643.837415][T15896] binder: 15882:15896 ioctl c0306201 20000440 returned -22 11:52:34 executing program 1: r0 = socket$unix(0x1, 0x2000000000001, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) delete_module(&(0x7f0000000000)='/eppp0ppp0\x00', 0x800) connect$unix(r0, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 11:52:34 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x8dffffff00000000, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:35 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e21, @multicast1}], 0x10) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:52:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x3f00000000000000, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) 11:52:35 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x6000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:35 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:35 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0xf5ffffff00000000, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:35 executing program 1: r0 = socket$unix(0x1, 0x2000000000001, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000080)=ANY=[@ANYRES64]) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$RTC_PLL_SET(r2, 0x40207012, &(0x7f0000000040)={0xfffffffffffffffa, 0x8, 0x3, 0x3, 0x6, 0x9a6, 0x7f}) connect$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e) getsockopt$TIPC_NODE_RECVQ_DEPTH(r2, 0x10f, 0x83, &(0x7f0000000240), &(0x7f0000000280)=0x4) 11:52:35 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x1000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:35 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0xffffffff00000000, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 644.398116][T16115] binder: 16114:16115 unknown command 536871040 [ 644.437124][T16115] binder: 16114:16115 ioctl c0306201 20000440 returned -22 11:52:35 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 644.479929][T16164] binder: 16114:16164 unknown command 536871040 [ 644.517497][T16164] binder: 16114:16164 ioctl c0306201 20000440 returned -22 11:52:35 executing program 1: r0 = socket$unix(0x1, 0x2000000000001, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x24000) recvfrom$inet6(r2, &(0x7f0000000040)=""/62, 0x3e, 0x40010000, 0x0, 0x0) bind$unix(r1, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 11:52:35 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:35 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x2000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:35 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xe) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:52:35 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0xffffffffffffffff, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x4800000000000000, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) 11:52:35 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:35 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x3000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:35 executing program 1: r0 = socket$unix(0x1, 0x2000000000001, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 11:52:36 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:36 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x6000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 645.297342][T16359] binder: 16353:16359 unknown command 536871040 [ 645.312052][T16359] binder: 16353:16359 ioctl c0306201 20000440 returned -22 11:52:36 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x2, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 645.374306][T16359] binder: BINDER_SET_CONTEXT_MGR already set [ 645.403816][T16461] binder: 16353:16461 unknown command 536871040 11:52:36 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x7000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:36 executing program 1: r0 = socket$unix(0x1, 0x2000000000001, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000440)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000400)={r0}) sendmsg$tipc(r2, &(0x7f0000001b40)={&(0x7f0000000640)=@name={0x1e, 0x2, 0x3, {{0x43, 0x2}}}, 0x10, &(0x7f0000001ac0)=[{&(0x7f0000000680)="85f253bb02e2e550c46ae9b20a2c647b05ce5b27f2", 0x15}, {&(0x7f00000006c0)="0406f98db80c02f8c7358017981a0a4227bb98019838b88536822d5924ab6fc36d98c16d", 0x24}, {&(0x7f0000000700)="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", 0xfb}, {&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000001800)="65384868a07939b31bdfc6372c8a03a5d16d371f0b5e71c0a062e08fba490309df269a9e6b14a5e69c47d5f0ae07c2593dd158444460c4f719558610a1bfa0fc5cc32695c8a7579cfa80d73bd9fd066923ad55eeac81db0de9863145681f807f9a034466c40b3cb0b0834d54b4381c7eb0bf1fb5890d10ed1605b306965cb4f20bc19d96e552467eb26270ef545d709c37403312034839ad50eff21b327a6da04b58997da1a836806f9b076979b235a3f0153b915f22a0502e3aab714695727e860ba5ca614fd15543edd0056f70fd281ef667604fd9bd4ec6b7616ee45ddf9e58a6f00e2a", 0xe5}, {&(0x7f0000001900)="275edcb44d5486148ad3899fa07ac0a77c6a00ae3fa415f353648d70d70aad9e080680779f4c41458b8f604082fb3fd4251af5121b8d1270885566a75477cde7bf8b3717b647f8a98223acc26973a5e41bb9e152d3bca6950023393e308dc9cb9fee76ce6e40c887ee4fe987cabece37f3dee418867f90d68f2ae7bfc4e193546633664d59e2adce404c944e2a1f74abcf6939d209ba17057ca8", 0x9a}, {&(0x7f00000019c0)="360007cf8aa5c357755265bfaff1c23b27e3e35ed24071e68339d086b0079ad02476a5dcc395cb41886cc39c8f4e6081b93a6c81ad55cd6503e22d229553155c87ae9e2bc963f3b96f7a446214f29b3548265160376ae89f86cdbdb8f1a9240f927607f25d4a8fc774f0fd9b43059838e74da84cc310e3e992d3ae3ece496f425ecc55f3be", 0x85}, {&(0x7f0000001a80)="0dcb12875a0d5beb855553b9c19fe0b3142491e4893f599a16d2e793a055", 0x1e}], 0x8, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000000)={0x9}, 0x4) 11:52:36 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 645.418743][T16359] binder: 16353:16359 ioctl 40046207 0 returned -16 [ 645.444651][T16461] binder: 16353:16461 ioctl c0306201 20000440 returned -22 11:52:36 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000040)=0x10001) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:52:36 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x3, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x4c00000000000000, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) 11:52:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x452041, 0x6) fcntl$getown(r0, 0x9) r1 = socket$unix(0x1, 0x2000000000001, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x9, 0x1e, 0x14, 0x1, 0xb, 0x3, 0x2, 0x14a, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) utimensat(r0, &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000140)={{}, {r3, r4/1000+10000}}, 0x100) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000080)={0x8001, 0x40}) connect$unix(r1, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 11:52:36 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x3f000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:36 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:36 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x4, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 646.152632][T16496] binder: 16494:16496 unknown command 536871040 11:52:36 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x40000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:36 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8d]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 646.197529][T16496] binder: 16494:16496 ioctl c0306201 20000440 returned -22 11:52:37 executing program 1: r0 = socket$unix(0x1, 0x2000000000002, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = dup2(r1, r0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r2, 0x800443d3, &(0x7f0000000080)={{0x6e20, 0x4, 0x5, 0x7fffffff, 0x20, 0x1}, 0x4, 0x7, 0x2}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x8}, 0x10) [ 646.286000][T16508] binder: BINDER_SET_CONTEXT_MGR already set [ 646.289213][T16510] binder: 16494:16510 unknown command 536871040 11:52:37 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x1}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x20000, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000240)={0x1}, 0x115) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95)=0x100000, 0x4) [ 646.327620][T16508] binder: 16494:16508 ioctl 40046207 0 returned -16 [ 646.332401][T16510] binder: 16494:16510 ioctl c0306201 20000440 returned -22 11:52:37 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x60000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:37 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:37 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80803) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:52:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x6000000000000000, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) 11:52:37 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x5, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:37 executing program 1: r0 = socket$unix(0x1, 0x2000000000001, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7, 0x80) write$FUSE_WRITE(r2, &(0x7f0000000040)={0x18, 0x0, 0x6, {0x16}}, 0x18) bind$unix(r1, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000080)={0xc0ff, 0x2}) 11:52:37 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x8dffffff]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:37 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:37 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:52:37 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x7, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 646.665029][T16666] binder: 16665:16666 unknown command 536871040 [ 646.702688][T16666] binder: 16665:16666 ioctl c0306201 20000440 returned -22 [ 646.778505][T16666] binder: BINDER_SET_CONTEXT_MGR already set [ 646.778803][T16734] binder: 16665:16734 unknown command 536871040 [ 646.784644][T16666] binder: 16665:16666 ioctl 40046207 0 returned -16 11:52:37 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:37 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0xf5ffffff]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:37 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0xb, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:37 executing program 1: r0 = socket$unix(0x1, 0x2000000000001, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000004ec0)={{{@in=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000004fc0)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000051c0)={@local, 0x0}, &(0x7f0000005200)=0x14) r4 = semget$private(0x0, 0x3, 0x3) semctl$GETVAL(r4, 0x4, 0xc, &(0x7f0000005700)=""/200) sendmmsg(r0, &(0x7f0000005580)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000000000)="05ebd148f43b46444e3bc8b12fe604d46747973e758b8c3be35cda65b591402fc043ba54e345b35023a40dca82aab8d5eb9ee9e851307bca7b7a6d3e8c3b8111c25262ed76226e6c844bbcb0b94f19e46202e6ac5341762baf8740dd8f8fc5c8566a191ebd6985d54fc03f59989f32d19e8c90b87199a70a598173b77dcf753ada223e657eda0114c448c3e51332543ec3d723a7b4377ee54cb0079eabcdc8d455af60ec388a9ee3589cb50f6a27998cc15350e677256856bf89a8328ae01dd41c54e764950f10c4cea4c7c828a175b12e4241e34fb4d005f9b7c5869267ae5760", 0xe1}], 0x2, &(0x7f0000000140)=[{0x38, 0x13a, 0xfffffffffffffffb, "25d133afa64e9227b4e51325cbb134692c06d80a25703e69b196642eb5c39a372518f1f2a7e9e621"}, {0xe8, 0x13b, 0x6a, "e4b9ec2befb7a8dc1b805db2edbcf88c750c72dd8a2756638284310e2af643fa360d729306a94aab0e3b65286f28e3e9b5acb9538d1852fea85d5d5e19bf9bfbd8a9dcdf583ed4bbf1769c9dd084585f582dd981b965283e48da91c0c87abea5e4ad293685e66aed9dbbdf69ced9557d003ec04e622297decc20416a9e63877ae4613f1cf0c952aa9a3beeb15ccd8ad867f412f93ec362a3c368dcc92446a296d7ffed02b703ba8e594472bab8a233ceb0e4d3332f9ffebe7619390d3fc3c972bb837e4fae4158882e6d26b878e9d6aab01596d1"}, {0x30, 0x11f, 0xa979, "b4fae246c94580648ee100e8f68961fa557854364677605f3c56d21ea2ae0b5d"}], 0x150}, 0xc36}, {{&(0x7f00000002c0)=@isdn={0x22, 0x51, 0x4, 0x8, 0x9}, 0x80, &(0x7f0000002780)=[{&(0x7f0000000340)="adc5c216fddd65c1cf7e61986754b1decac2d8ef4151fab71d1f2ffafbf41c3e4739027cc5a4f557352787148c39b9bef366fc2036df5824689e13a8517d8e84e8d2f61ec630", 0x46}, {&(0x7f0000001540)="ef21af29a3a4c373a66faf7e31cbbb4f77ec6cc20b0b13dbe6f8b08343514bb7c9f10f11c75cce58e16f639159cb7b8af35e3d43d339975c01d595076859dcb73c3de2596f766f808903941e95f91d210dd0c4a81cf614b33113b4dd1030e77800f0a0cf2e574cec265103c2d61964226049946d33876e02180cbd320851c8efe4daa781c5ca533eda001ae69968c824f110adc52d29c27e1acae775baa1438b0aa3239c66d0e454eab2b9d333fb9506062d458af7feedb1b984aef032c33c8cadf945f0da40b8125ef92b", 0xcb}, {&(0x7f0000001640)="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", 0x1000}, {&(0x7f00000003c0)="d9b2abf486a0ec70939bb1f52be5f95968c3cb81ca53cb0a126a2c1912a75b3894337bea9ac18200952d1a35b8100f4f19a34f726f153dad494b073a2afe575e6baaff26ed2b45e766021ab3fe08437f226c4222d74b1b", 0x57}, {&(0x7f0000002640)="bd150e7ac88fc249e0002ea86bc7ab2e451cf8c1122c150599af07eb43271eb1ce296445d44a8ad15a90839beb7819b93a81", 0x32}, {&(0x7f0000002680)="8b9d306827801f32c77fbe56bca9c39a8edaf6188fc92f5aa30e54c4b21a9c7b86f8682720b03cceef822ae6d78f6f55aa", 0x31}, {&(0x7f00000026c0)="bdee756772d1a9cc64bd1ce3cd99ff718a3b5ea57cd8ba2ad33b582ca5be50bda624ebe51fd336933403a353180068aea27c32e98b554a6fc3f0704abf4d079725bf0bce71e38318c583a9fb0b3e927aeaaca11c39b8290227473a187488309dcaabc959e8d262a7fad1b4418735fd13a2e156ec41cc06e4675295ce914c079c03d8841f93dc1d439e72aa18573e68b81772a50bea291e6ef8ebb997c8", 0x9d}], 0x7, &(0x7f0000002800)=[{0x50, 0x13f, 0x7fff, "c188927ff6c548691a7b61c00b6c514ca5b293389b7509149cf31ec9b3117cd17203eb20adb8257d77121e2ba9ec12cdc900b2f1f44dc8f190ad6e8b12c8"}, {0xe0, 0x11f, 0x41c, "2fdf790e0f4f2f98ca7a2c9408b48bf447e73383aad5c22a2284dd8051c382de3284f87a46e411519de7761c41b27393a03a5a6e43c340dbc75ea2879701ee584cb6babd96da7fdd8320f09beab2c14b60b065f33b5deaebcbf97249ae89a494b8bc8bd349d78e3faf989167e2c51b304052913b9a5e6ea5f4fcc0d4ad90cb257725459fd5a276909bb8c93acefd36ede999a9e9ce1b01f20aea5d3fb85e159e85db139adee412008bd76b62a4ee62fa54bfacfd9a112d57bfbfd321eb4a4461c26a87414fd0d8ac234537b87f57"}, {0xb0, 0xff, 0xfff, "f73fe1da85cbcec47ad9b5830d8cf0dafcc892a7bf5e67022048928f743ad44df79afc7519b958e5c045a3afd641128730e09593447ffd09dd53e499ba6a240baf2ff42da4ae8269b245dc605f5a8bab5ea0848a019c8941a13de073ec47b6763f4c9c5581e864ec740bbe493843ee7e53c365f07082328e4a2ceb84971420dddf10512492f42c15230f1f2b84ea3c84ada754067c4ee38fc62c76"}, {0x1010, 0x113, 0x100, "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"}, {0x20, 0x13b, 0x100000000, "164404fe6bc1afa72602172e"}, {0xc8, 0x115, 0x3, "ff43761ce8c6b1a089ad34a0f96ddbc6ba072359a1b76923833a03b86e1712c9909c9799cfc6dc6c42f13c10f1501f36cba75d98f22cbe5a42a8b8192b32e08bb1b74fc7edc7b1c5ea5e45153bf33bd80d164ad5f4524bded1c2f9104ec90e59512b7d5f2dd742caeada1dcfd92f2144d6a97da7ee5e43bb2b881ee23a925d9f33797fabde32c6cdd3467e855858dbdf7ce84e4934223ae203d73624f4a3eec8b7266d32bd7386c68304e9fae955791c1e6aa9"}, {0xd8, 0x11f, 0x20, "29f96cd6889bb1f12982db1d387c5ada948d77acba3c38e027f1d1f7a169d42c6170d6e27956dc826edb49b784caa753671c595f30d496f1654414c4a733f31e4fdf0501f1fee75d21c312ce13c1470b8cc37fb9bed5190e222ad39fdb6d647d17ca3cfff25e631f841c2f8eb7d6eede2b38ef06316f557f0032236c5368c2f80e64ade94b5d4f3ce803ab2431327b6ced4ae2d256726bd513c2a184b439282e420d490c154f21824d3aca153a95ffe9da4c00662cd3333315a7fb830e353682e961"}, {0x78, 0x13e, 0x2, "1e66066adf7ce8c4291fb3b3ad3bd82d43f83615e126857f0eb645fc2c568ceed03294c443dc2529e542d032d0b7b4fbe7d75f7d09ed9a6a9b0bc611a910f3ac4676787f033d76d9e0633831caf239d3b3379ec4ff02e402b85c5c997b3b1ddc699d"}, {0x58, 0x103, 0x4, "a8592f5680d9f9d207b72b71b09a8f4b77f286e8b8ea065d523158ce29c43d8f53fde9c1ef1a5780755a19715db731d4a03de0db58c8606c1262394abf58a94059e9b28dcf542865"}, {0x10, 0x108, 0x101}], 0x1490}, 0x8}, {{&(0x7f0000003cc0)=@llc={0x1a, 0x337, 0xf321, 0x254c2150, 0xffffffffffff6913, 0x2, @broadcast}, 0x80, &(0x7f0000004000)=[{&(0x7f0000003d40)="5bb1d12e", 0x4}, {&(0x7f0000003d80)="b9435869e3258335ddc72a6bcd28afa7bc7d7a65b3a10b67c1a08eb2e554ce1ca56747093e5ba7ef8648ee7719ed8860c0f747781f050f0b85a7b86c30606b070dc7ff46b41bff53158e5d798fc6bec1c51822897e46586e49446c2bf155ab46d111bc5766bc900daa6f2222fd6bc0fee106bc39dd51ff8744f2434a9b5b9562c0ec980c2fc89d22764dc02a2b0d0ede575ce0aea8d1e4f7f1e1fac8ac2f56be08e16adab666112f1b223d4af4eb0eec06d4ae959859c6", 0xb7}, {&(0x7f0000003e40)="442cf5c2dde944b2a19bdb171ca3a1365777a79082fb5f9d27d52febde98c345180f19dfa4153e71f294f1adf55c93c96cafb3da27b257a9409999358f158e64c9f054a99421ab222aaa388cacc9eebc31a0af5a069fbdebb2aee9e457a6a13130ed64dc8d5c9107dbc9a29ba5b78cf3d20a1fd29eb1eefbd9b2de521e49733a8117", 0x82}, {&(0x7f0000003f00)="d16dd64669fb6c40da20bf3db7550aad6c6e3a9a337acac3fbd623c394fb7828f99372b29862047c4745ac63d2325b35272f953adc0b1a69cbe5d7b31b58124de6836014727ed97e551433c276df609e7288ead1dadd619955d67135988aa916fc78c1f7ec75b97bf5eb9d2771412c339435e2c2cd12e7310469efd575e8b8ea11d1098c0af131d5018e11ebe14ed1bc467d67e780e383714bf9210f514aaf48ad6c1037b620a7dd64807c2f1f6c6c10fde468352f2344abde1e83e4c33029354123b460726e39726ff1e62d2a5d670cce6c6b7bd3eb92765f56bd105a06515b73f2fc2937486de3f58bbd2bbfb274190d503e9b67fbec605b62", 0xfa}], 0x4, &(0x7f0000004040)=[{0xb8, 0x117, 0xb6, "fe1114e18b082b9eb4ef4ef995cb4435d2916c8505c266afc6a37e59fe00a1c3018f90bdaa20e4770ed8653a6e6c3ee7d35e49270178da8e769e7838b309ef14d44fcd08e1730edecbd934778ee403fdcc9ff3d64a67ab39883186f6ddb5aee334ebc45e486adb159b4a7532cd28c43957c918c7ed7204a5f239298aa2f4dc748b11d2e1a9b7cb178d426a5cf1b91af4d25c873ce4347d331674164981a6e799ba4b3a5f588d"}, {0xd8, 0x11f, 0x2, "2a19df4e43eb963574c7015bcdd9ae3e153c15d24af9cc34aaa7f1351323ec3a5150810d0756eb08361795ae34b8eb884dbb1019d159222605a63ba4cc459e5789577f43d38d14f049f425cfa44ffc9604c8325d091f22a636cf0c70ef66bd76adb44ec85e28dba65fba00677341c78ca47f5161758c62b0a5a2d2f3eef36d4a07b1eb53d87b01df25f832bade7d1bc5b266d668297ccb56fd7c2996ebf52903b2e0e52434d4a0b86805c33a83f5fd84b6d5e5d3bbac51b9d98bd2a6c8e63d8742fe4e"}, {0x58, 0x1ff, 0x80000001, "43f36edab427a76ae52f903b2c2b00c144da47cd4db7493be7db56bc6805f05177e3d67d59ce53d5e475550661003a349902fa8a6c6cec8608825760fba21c55d3c839ddb6"}], 0x1e8}, 0x7}, {{&(0x7f0000004240)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0x0, 0x7fff, "35bacb48d0f200008a85236ac339b1af556ec0b473f6d2c0cf67770a92d57831d7287d93d07758941627b63a9a4ccec945191fc99c4abb5105b67710c17992", 0xf}, 0x80, &(0x7f00000047c0)=[{&(0x7f00000042c0)="b2a167865858f087bad367613b88edcedb4dcf8c4ecfd55d55409d0cfea37b3baacd81312e5094d4732d6a6cfc9dd855a609fabfea659c895114aa515a9c8d613786915e6bba0d272d6e1be6eefc41cfe652fdecd6a418385907f94de282ae03f4b04b583d6e06055f784f29de4499edaa20864f868f449a8be72f2d91bab14493b11d4e516aa1ac766d02c1c734e23685b3747a87fc5235cba6f8c8a4ad69c8a9b35f49646674880c392de3bc2a0c156453462927b4e52c7fd86c8044edea83e05fd7f5d33f078b2858f79fcfd000684612fcdcc834bd03a0092b4687d0c345e341138e6eedfac78c9dac033c075cc95d8686201ac727261f8852f168", 0xfd}, {&(0x7f00000043c0)="c8ac01e0dd11b04cd4bce3ffece1d52c4250f8f1ded79bc314cfc4b0566157911dd7e3d455812dde7c77e7d3dc0a146aa268442fe57c19f3fd4ed4ca26fc044c966d969f3f3bc71115b3c550f32d8f7b55a4d19910570de5a22e4e41de20b61f4d0217b053ad0c42b5245ef6ca0c199af91db3fe3923923bda0030b72fa17f1de3a8a43c246c630046dda108b863607a2bd139604d9f31d55af11c182f38d10c32faaf891c21dc217a0f9a67", 0xac}, {&(0x7f0000004480)="10328fe2ef8490927549511374b10ae155514c2f9de68fbad67ef7bb42fd9dbc3d59c4d52dfb344041c0c15bf2293b3cecef4e95543cc3d6d95974d165233ea795fb75da6375b38fd704b73fe23cf5e5732b533008efd330b611fae5a621a141652b30df379aa859813ed5bc6e850f4b9865f4ff4d609e8c0eb9e78f9318ce6bea669608bbfcd314fd56d50cfdfb9345aeb770328a490546b53eb89fd9819d0dc6c5298f9636bab660cf10f86b80522b411cbd2a29f100dfc7b8099089cacbef916d1d8e667f290a628252315c9a4648c3687a4fe2", 0xd5}, {&(0x7f0000004580)="0668456c2d5508f72527de688ea2c1f5b415f12efca446c59800bc2fa41a5ac65f4375d70b147008b75f30e6862d35593528735c7cea515cc9c07de7205e8b96f2ed997af2b94af88b75d79bb62d2b2a46bdae244dfcafe14fef761326979de1b6aec38322260b71c2a063c91c508ef9a280523c76138d0650485bbe3ecaea3c9c10329afc0d480a4ac7727d57bcd400b08e7d7a29930c2521c50325b376a13481d936748b3e857792ab62d0c8811da12d18e52d1763db134f2b7a2476a8f69ba09a02d84805585ca3353e904d51702b663d91aa0875e74ad672c7096ca8e7078b1cb30fe44c567f6d9215af09008cc3f3977dbae6eb22", 0xf7}, {&(0x7f0000004680)="50f1e4e7ac0887d96a260d67aeb1ea2cadaa345f68c0f5543c10922959548d93be7da7ca69d30b68da41212934c11b3cd1563ffc2740688d91b7b62ccb9055b976e03a343a770e5a866a268903eb55e7747b2143f0c670f21e50a9933868db331913c022902c70235e", 0x69}, {&(0x7f0000004700)="5d2a0c2028d761c6c9733ba7cbdbb35bf818a4bc4fece63d2db073b11ab9dfcee89d39df2a4b43cf5c5f86ed24a64c06ee9e5b96f61063e776ab7fa84ac078c6504a7ee69a3021e8b6e3f44334289ec77b7266e040b60c8c58f6fba1e94b51550b700fc405dd9a2a37cd9f57dae5153deacb88f66546802082263d602337cba9b64c750752fea31501684660d92195f498efe56292620fa78c9b7ddb2710d3b4570cc4a3710ceeb7fbaa5e5ce56721a0ac", 0xb1}], 0x6, &(0x7f0000004840)=[{0x48, 0x8fbfa39a62e1e9d, 0x7ff, "1f19b72355b36280caa21b6146c2745476ded867fb4740dbeff8721e1b81811b5dfd7248dd60633e9cfa608be3046cd1c754d03656caee"}, {0xa0, 0x103, 0x10001, "b99ba7b68118454162515a5b2477f52ac950cdf1bb8d28b6b17fd7f02363b077d5a3d61a1b9763d8e70e97a4302bb25eb7c74ba9ce654f4c1f67166097fe7a133232ac3d8f11bc682dcd98bd28a89f3af5f9c0c7bec96d92b7c6574faa393e12c9a95d079b85fa774dde5f5ede5c5bb96a8344a78467d4ded1f2d6f25e473593fb73bd03552033b5badb4ccbd8cfd811"}, {0x78, 0x0, 0x7ff, "601b6b2a9a47325ae42c49b9b363083e74afc8a6383fc7e8b4e4529c4561352e6c79fd4f92a6ecac8963650b5c8f58fd8b787b0e92e1c090fd9a690ce6552b469218f3c208f48870fbd404cf86762d0406a3df28c64e642dc40d6bc5766487984ab21dbcf4"}, {0x110, 0x107, 0x3, "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"}, {0xc0, 0x10e, 0x100, "de40825822ac1f1fcf15a4eaa5f2eaf7400e6266e7d806c56b99f767d0a507f468d464eab71f19b12ab3cb164049f18d06484256a1f26f7052d02afed7ca91c38ca1b615c235f690934ad4fc74e813fde4312140cfc0107d7f1030bd1713b9e8b69435839d15f83ab39e39d1ab329823e0ba29aced5af9db4d032e5f957953300c2919d8d5db5c10d6fe374866b53768cda898387cbcbb5c42b86c710cb798bbf68ccdf51e661aa09bb43805d9"}, {0x58, 0x10e, 0xe4f, "ee82c4e67ac091c4e6f538a9b38cd981b9b5efc2ed3f405d48cb93fc761ad76a42ea54a9f081452d4225d8dba554a22056f63bc3614124e5b2ebfbaf8104e9e39321"}, {0x48, 0xff, 0x2, "223646a22c04ffc3d20a67ad3d363d0ed19ebbb10090a5a1850fffd14d6c55f47fdb9a0fb9f309f33cd4748e6b96d96b8e9647e0008ee090"}, {0xc0, 0x115, 0x2, "6472cd3be03185fadd2f53942b15c84ee8dfca8d461cc90dc01a89a4a5d0b553427a9fa0fad6120970311fc9394051ce6229697b43263fd7558332ef4a5409db93ae81ecbdfa294f969b7b3ac371d5b50a3d1cf107162237172fb154e153cf717bbf0f13f3023ebcad198a06803de14515035244d33a2465e42c99f62c54b58617bcf8b596c9c96781943c25d21aa65658638c90596ac28c1a40d89cdfae1ec3d9831490d880d12e46bbd3b652b469"}, {0xb8, 0x119, 0x7, "9cc1940c7f7bd0586f2700f535fbe92a501b71a3f69068bc8b9b1972cccf5cacd42c045ae551968fd196e0f44ba088bf6c91c52c8f1f87b4bfaa108b217bac561e3bf29693c93f3a13195ae1c550db7631c4be361a831845c7b7ab3be03c8333d91db1acb6d834e81dfd83b4333907c04dcf7cef8c7dd77abfdc7207709fde077244960980585a03f915f580bc8c17cdde9ec589913dc4792d64d97fc3878becdc385191fdf9"}, {0x40, 0x105, 0x7, "201c4851f123a2634df08cf0cc2b07bc2772414e0ea496361cf8b33c24f005d248469e5545e3864d90"}], 0x588}, 0x100}, {{&(0x7f0000005000)=@can={0x1d, r2}, 0x80, &(0x7f0000005100)=[{&(0x7f0000005080)="b6246e49b18138d5bea1456f57a99b5daac4db", 0x13}, {&(0x7f00000050c0)}], 0x2, &(0x7f0000005140)=[{0x30, 0x11f, 0x800, "f897565b6b6ef91381359d3b21cdedafb69d0834732ad415a04b4e83"}, {0x50, 0x11a, 0x2, "6918feacd8a1894ef75951c9bb72ccb66f0deaa43070105bc07d5593e6e9aea225394239d80eb924716f6818e633b3e6654344146c72081e019817"}], 0x80}, 0x6}, {{&(0x7f0000005240)=@hci={0x1f, r3, 0x1}, 0x80, &(0x7f0000005340)=[{&(0x7f00000052c0)="a6c647504512e259362efcea3ba5edf6c2d9f6a6c7902ceaa33d112c59910b884ef5649845622f7f4a2fdd28cc798ea09aed61e13f5506a952735fb395efe57186d06381f44948a2eb1a47b85b0b17ba64e90ce53a15a6e389db4bc6a6afd90a07b6fee50d66588a5e93ae95add2ccebf5fbf66e669312418da5173c", 0x7c}], 0x1, &(0x7f0000005380)=[{0xf8, 0x1ba, 0x100000000, "b8d746751f45f20ea359b56f6a6889c166085272acd3a8f3ab7ec535295992cfdea76a166d3c501d9b70640228fcf4122c4488c10d55568b3e833e6a97785d746a401114e4657dcaa2edc5c202a569d4e6b391f61cd790443e08e0f09a32a8659fb1cbd752b4545e69bcd580dfcd437ea399d5ab96b4df973580f6347c5b86cddc8354daaf654dc8c716933def4ab9b8957a749953b58239979d8a81458471ef9b8be1a8f95dae3ae2ec0c62fcbcc691021fdd5e668e4518d5c930dd603bebe680e36bee37acd60662ad92153a6301acfd3b5cc736fd722ae2d1eb4502be08f4bd7d"}, {0xf0, 0x11b, 0x9, "f5340318b071438cca8851ec5c50ab9f8be7bd4056923baa2dcd419fccb91423a0edb6f3d272b0f026d8e29440e8cffb8f3b138b3bc1227cc0e65f181ac776b7622f51702417c1bf089afae27720207d173306bc79eea5034b9aa794733c4d07a295550cc19c7d82de78feff3f29e690f0542072efe80520f1ed318f8c8b9cc1d604cf53e6c698ff705b8fc781ba825880569276fdea9f6609809607436b9a65ec6be18d59d8e8c19813f0ee0158cc15fe04de2904e28c7f8768689fdae29eedb88c90f133a381e2fce5a5bf8655a8e2bc2945e39470ca865289e5d2"}], 0x1e8}, 0x3}], 0x6, 0x40010) [ 646.864083][T16734] binder: 16665:16734 ioctl c0306201 20000440 returned -22 11:52:37 executing program 1: r0 = socket$unix(0x1, 0x4000000005, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 11:52:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x6800000000000000, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) 11:52:37 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:37 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0xffffff8d]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:37 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x57, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:37 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0xfffffff5]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 647.085459][T16772] binder: 16771:16772 unknown command 536871040 [ 647.113112][T16772] binder: 16771:16772 ioctl c0306201 20000440 returned -22 [ 647.152825][T16814] binder: 16771:16814 unknown command 536871040 [ 647.174835][T16814] binder: 16771:16814 ioctl c0306201 20000440 returned -22 11:52:38 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa, 0xfffffffffffffffe}) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:52:38 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:38 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "03290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:38 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x100000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x6c00000000000000, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) 11:52:38 executing program 1: r0 = socket$unix(0x1, 0x2000000000001, 0x0) chmod(&(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$unix(0x1, 0x4, 0x0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x2000) bind$unix(r1, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) [ 647.551910][T16891] binder: 16890:16891 unknown command 536871040 [ 647.577259][T16891] binder: 16890:16891 ioctl c0306201 20000440 returned -22 11:52:38 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:38 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x200000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:38 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x8000, 0xc0840) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000040)={0x0, 0x10000}) close(r1) [ 647.614636][T16908] binder: 16890:16908 unknown command 536871040 11:52:38 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "05290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 647.671079][T16908] binder: 16890:16908 ioctl c0306201 20000440 returned -22 11:52:38 executing program 1: r0 = socket$unix(0x1, 0x2000000000001, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) getpeername$unix(r1, &(0x7f0000000000), &(0x7f0000000080)=0x6e) 11:52:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x7400000000000000, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) 11:52:38 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "06290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:38 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:38 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x300000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 647.876413][T17024] binder: 17021:17024 unknown command 536871040 [ 647.913057][T17024] binder: 17021:17024 ioctl c0306201 20000440 returned -22 11:52:38 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:38 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x600000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:38 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "07290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 647.956416][T17108] binder: 17021:17108 unknown command 536871040 [ 647.988169][T17108] binder: 17021:17108 ioctl c0306201 20000440 returned -22 11:52:38 executing program 1: r0 = socket$unix(0x1, 0x2000000000001, 0x0) r1 = socket$unix(0x1, 0x7, 0x0) bind$unix(r1, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_CLOCK(r2, 0x8030ae7c, &(0x7f0000000000)) 11:52:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x7a00000000000000, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) [ 648.186984][T17204] binder: 17193:17204 unknown command 536871040 [ 648.227291][T17204] binder: 17193:17204 ioctl c0306201 20000440 returned -22 [ 648.239212][T17251] binder: 17193:17251 unknown command 536871040 [ 648.257177][T17251] binder: 17193:17251 ioctl c0306201 20000440 returned -22 11:52:39 executing program 3: mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x400000032, 0xffffffffffffffff, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f00000000c0)) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x7d, @loopback, 0xfffffffffffffff8}, @in6={0xa, 0x4e22, 0x800, @mcast2}, @in6={0xa, 0x4e22, 0xfffffffffffffffc, @loopback, 0x3}, @in={0x2, 0x4e23, @rand_addr=0x9}, @in6={0xa, 0x4e22, 0x4, @mcast2, 0x7}, @in6={0xa, 0x4e20, 0x2, @ipv4={[], [], @remote}, 0x6}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0xac) 11:52:39 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "0b290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:39 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:39 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x700000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:39 executing program 1: r0 = socket$unix(0x1, 0x2000000000001, 0x0) r1 = creat(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1d) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x18) write(r0, &(0x7f00000000c0)="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", 0xfb) socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 11:52:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0xfdfdffff00000000, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) 11:52:39 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x3f00000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 648.624762][T17264] binder: 17259:17264 unknown command 536871040 11:52:39 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "020b0f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:39 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5800000000000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 648.680491][T17264] binder: 17259:17264 ioctl c0306201 20000440 returned -22 11:52:39 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x4000000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 648.760348][T17294] binder: 17259:17294 unknown command 536871040 11:52:39 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x0, @empty}}) write(r0, &(0x7f0000000140), 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x440480, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000300)=0xa, 0x4) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) ioctl$VIDIOC_ENUMSTD(r3, 0xc0485619, &(0x7f0000000480)={0x0, 0x8000, "16bc5d1a6ab959ae9fb67f2bcba511cdc1b7807d62f69828", {0x0, 0x8000}}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000580)='/dev/snd/pcmC#D#c\x00', 0x0, 0x2000) ioctl$void(r2, 0x5450) write$apparmor_current(r4, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000240)={'filter\x00', 0x100000000000018c}, 0x68) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/stat\x00') r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r6, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x7fffffff, 0x9, 0xc84c, 0x2}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket(0x40000000015, 0x805, 0x0) bind$inet(r8, &(0x7f00000a9000)={0x2, 0x0, @loopback}, 0x10) setsockopt$sock_int(r8, 0x1, 0x2a, &(0x7f0000000180)=0x1, 0x4) sendmsg$inet_sctp(r8, &(0x7f0000000380)={&(0x7f0000000040)=@in={0x2, 0x0, @remote}, 0x10, 0x0}, 0x4000000) r9 = socket$unix(0x1, 0x5, 0x0) bind$unix(r9, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r7, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$DRM_IOCTL_GET_MAGIC(r5, 0x80046402, &(0x7f00000002c0)=0xffffffff7fffffff) [ 648.803424][T17264] binder: BINDER_SET_CONTEXT_MGR already set 11:52:39 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290b", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 648.855296][T17294] binder: 17259:17294 ioctl c0306201 20000440 returned -22 [ 648.867232][T17264] binder: 17259:17264 ioctl 40046207 0 returned -16 11:52:40 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x6000000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:40 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:40 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x2000, 0x0) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000240)=0x1) r2 = socket$inet6_sctp(0xa, 0x4000007, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000040), 0x4) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000280)={0xffff, 0x80000000, 0xfffffffffffffffe, 0x6}, 0x10) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)) userfaultfd(0x800) 11:52:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x630b}], 0x0, 0x0, &(0x7f0000000780)}) 11:52:40 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x7, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:40 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 11:52:40 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 649.485532][T17508] binder: 17499:17508 unknown command 536871040 [ 649.494654][T17508] binder: 17499:17508 ioctl c0306201 20000440 returned -22 11:52:40 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x8dffffff00000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:40 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff00000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 649.536055][T17558] binder: 17499:17558 ERROR: BC_REGISTER_LOOPER called without request 11:52:40 executing program 1: syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x8000) r0 = socket$unix(0x1, 0x2000000000001, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) [ 649.629580][T17558] binder: 17499:17558 unknown command 0 [ 649.636031][T17558] binder: 17499:17558 ioctl c0306201 200002c0 returned -22 11:52:40 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0xf5ffffff00000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:40 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x6, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:40 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 649.675162][T17558] binder: 17499:17558 unknown command 536871040 [ 649.730048][T17558] binder: 17499:17558 ioctl c0306201 20000440 returned -22 11:52:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x630c}], 0x0, 0x0, &(0x7f0000000780)}) [ 649.908359][T17738] binder: 17734:17738 unknown command 536871040 [ 649.915508][T17738] binder: 17734:17738 ioctl c0306201 20000440 returned -22 [ 649.925114][T17738] binder: 17734:17738 unknown command 0 [ 649.932621][T17738] binder: 17734:17738 ioctl c0306201 200002c0 returned -22 [ 649.943328][T17740] binder: 17734:17740 unknown command 536871040 [ 649.950222][T17740] binder: 17734:17740 ioctl c0306201 20000440 returned -22 11:52:41 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000000c0)={0xbb0000, 0x4, 0x1, [], &(0x7f0000000080)={0x0, 0xbbf8, [], @p_u16=&(0x7f0000000040)=0x4}}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x4f758261d2407d95, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x0, 0x21010, r2, 0x8000000) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000100)) 11:52:41 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:41 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0xffffffff00000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:41 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x29, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:41 executing program 1: r0 = socket$unix(0x1, 0x2000000000001, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='sched\x00') setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000040)={0x5}, 0x4) 11:52:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x630d}], 0x0, 0x0, &(0x7f0000000780)}) [ 650.369065][T17751] binder: 17749:17751 unknown command 536871040 [ 650.382547][T17751] binder: 17749:17751 ioctl c0306201 20000440 returned -22 11:52:41 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0xffffffffffffffff]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 650.409565][T17751] binder: 17749:17751 unknown command 0 11:52:41 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:41 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x2b, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 650.454972][T17751] binder: 17749:17751 ioctl c0306201 200002c0 returned -22 11:52:41 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x2]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:41 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 650.517579][T17837] binder: 17749:17837 unknown command 536871040 [ 650.551268][T17837] binder: 17749:17837 ioctl c0306201 20000440 returned -22 11:52:41 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x2c, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:41 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) open(&(0x7f0000000000)='./file0\x00', 0x80000, 0xa) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:52:41 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000000)) 11:52:41 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x3]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40046302}], 0x0, 0x0, &(0x7f0000000780)}) 11:52:41 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:41 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x2f, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 651.289559][T17889] binder: 17888:17889 unknown command 536871040 [ 651.295872][T17889] binder: 17888:17889 ioctl c0306201 20000440 returned -22 11:52:42 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x6]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:42 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x33, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:42 executing program 1: 11:52:42 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 651.355785][T17898] binder: BC_ACQUIRE_RESULT not supported [ 651.370621][T17898] binder: 17888:17898 ioctl c0306201 200002c0 returned -22 [ 651.426591][T17898] binder: 17888:17898 unknown command 536871040 11:52:42 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:42 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x7]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 651.475968][T17898] binder: 17888:17898 ioctl c0306201 20000440 returned -22 11:52:42 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80005) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x2, 0x2) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req={0x4, 0x1000, 0x1, 0x7}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000000c0)=0x0) sched_getaffinity(r3, 0x8, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:52:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40046304}], 0x0, 0x0, &(0x7f0000000780)}) 11:52:42 executing program 1: 11:52:42 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3b, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:42 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:42 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x60]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:42 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:42 executing program 1: 11:52:43 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3c, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 652.228947][T17930] binder: 17928:17930 unknown command 536871040 [ 652.247732][T17930] binder: 17928:17930 ioctl c0306201 20000440 returned -22 11:52:43 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x300]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:43 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0x7, 0x402) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0x100, r1, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, [], 0x27}}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_DEST={0x64, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x859c}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xf91}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe98}]}, 0x100}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0xd4) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e20, @broadcast}}, 0x3, 0x9}, &(0x7f0000000240)=0x90) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000280)={0x1000, 0x95, 0x2, 0x2, 0x80000000, 0x8, 0x4, 0x2, r3}, 0x20) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000003fe8)) readv(r4, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000000)=0x1, 0xda) 11:52:43 executing program 1: [ 652.356771][T17930] binder: 17928:17930 unknown command 0 11:52:43 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 652.406990][T17930] binder: 17928:17930 ioctl c0306201 200002c0 returned -22 [ 652.434958][T17930] binder: BINDER_SET_CONTEXT_MGR already set [ 652.449546][T17949] binder: 17928:17949 unknown command 536871040 [ 652.470883][T17930] binder: 17928:17930 ioctl 40046207 0 returned -16 [ 652.519270][T17949] binder: 17928:17949 ioctl c0306201 20000440 returned -22 11:52:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40046307}], 0x0, 0x0, &(0x7f0000000780)}) 11:52:43 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0xffffff89, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:43 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x600]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:43 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa, 0x30}) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:52:43 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:43 executing program 1: 11:52:43 executing program 1: [ 652.680577][T17971] binder: 17970:17971 unknown command 536871040 11:52:43 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:43 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x700]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:43 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x2, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 652.722833][T17971] binder: 17970:17971 ioctl c0306201 20000440 returned -22 11:52:43 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_STATFS(r2, &(0x7f0000000180)={0x60, 0xffffffffffffffff, 0x2, {{0x2, 0x6, 0x0, 0x0, 0x7fff, 0x8, 0x0, 0x6}}}, 0x60) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0xffffff09) fallocate(r1, 0x1, 0x0, 0xfffe) [ 652.781059][T17978] binder: 17970:17978 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 652.817268][T17978] binder: 17970:17978 unknown command 0 11:52:43 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x3f00]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 652.842947][T17978] binder: 17970:17978 ioctl c0306201 200002c0 returned -22 [ 652.874126][T17971] binder: 17970:17971 unknown command 536871040 [ 652.914064][T17971] binder: 17970:17971 ioctl c0306201 20000440 returned -22 11:52:43 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:43 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x3, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40086303}], 0x0, 0x0, &(0x7f0000000780)}) [ 653.050324][T18100] binder: 18099:18100 unknown command 536871040 [ 653.065896][T18100] binder: 18099:18100 ioctl c0306201 20000440 returned -22 [ 653.096227][T18100] binder: 18099:18100 BC_FREE_BUFFER u0000000000000000 no match [ 653.125672][T18100] binder: 18099:18100 unknown command 0 [ 653.141801][T18100] binder: 18099:18100 ioctl c0306201 200002c0 returned -22 [ 653.156288][T18104] binder: 18099:18104 unknown command 536871040 [ 653.163014][T18104] binder: 18099:18104 ioctl c0306201 20000440 returned -22 11:52:44 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080)) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x200000, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000040)) r2 = userfaultfd(0x0) write$9p(r1, &(0x7f0000000380)="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", 0x1000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) readv(r2, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:52:44 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x4000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:44 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x6, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:44 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:44 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x200, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsync(r0) 11:52:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x4008630a}], 0x0, 0x0, &(0x7f0000000780)}) [ 653.538370][T18109] binder: 18108:18109 unknown command 536871040 [ 653.556205][T18109] binder: 18108:18109 ioctl c0306201 20000440 returned -22 11:52:44 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x6000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:44 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x7, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 653.578910][T18109] binder: BC_ATTEMPT_ACQUIRE not supported [ 653.598055][T18109] binder: 18108:18109 ioctl c0306201 200002c0 returned -22 11:52:44 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 653.635915][T18120] binder: 18108:18120 unknown command 536871040 [ 653.690079][T18120] binder: 18108:18120 ioctl c0306201 20000440 returned -22 11:52:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40086310}], 0x0, 0x0, &(0x7f0000000780)}) 11:52:44 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5800]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:44 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x1000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 653.826206][T18237] binder: 18234:18237 unknown command 536871040 [ 653.860883][T18237] binder: 18234:18237 ioctl c0306201 20000440 returned -22 [ 653.878983][T18241] binder: 18234:18241 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 653.924341][T18241] binder: 18234:18241 unknown command 0 [ 653.946966][T18241] binder: 18234:18241 ioctl c0306201 200002c0 returned -22 [ 653.960943][T18241] binder: 18234:18241 unknown command 536871040 [ 653.967434][T18241] binder: 18234:18241 ioctl c0306201 20000440 returned -22 11:52:45 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40000, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x9, 0x100000000, 0xfffffffffffffff9, 0x7639, 0x5b6be383, 0x7ff, 0x1000, {0x0, @in={{0x2, 0x4e20, @rand_addr=0x4}}, 0x6, 0x4, 0x1f, 0xffffffffffffff81, 0x80000001}}, &(0x7f0000000100)=0xb0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000240)={r1, 0x3, 0x57, "bc3a7ac08ee4525d85e355224cab883c5131f185eaf6162f8d8b0816d37a1c009eef1a7445e3857e9858214a1d208ed2f49daf37345ec8a42079e98125b0d5bb64585b3659c394d5346e56585ea5b321dde849840c9d61"}, 0x5f) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) readv(r2, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:52:45 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x58, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:45 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:45 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) symlink(0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x101000, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) 11:52:45 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x2000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x400c630e}], 0x0, 0x0, &(0x7f0000000780)}) [ 654.456804][T18254] binder: 18249:18254 unknown command 536871040 [ 654.482860][T18254] binder: 18249:18254 ioctl c0306201 20000440 returned -22 11:52:45 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:45 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000140)=""/225, 0xfffffffffffffedd}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x3, 0x30}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={r2, 0xffffffff}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:52:45 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x300, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:45 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x3000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 654.505464][T18260] binder: 18249:18260 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 654.591053][T18260] binder: 18249:18260 unknown command 0 [ 654.618386][T18260] binder: 18249:18260 ioctl c0306201 200002c0 returned -22 11:52:45 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) fcntl$setstatus(r0, 0x4, 0x40800) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000012000/0x1000)=nil, 0x1000}, 0x2}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_proto_private(r1, 0x89ef, &(0x7f0000000000)="d68e087dcc6bab44f92e37f28df8c978714a59372efcef7a8ee558b4bb2efaaf6cb1984d279e4e41a04d6df066d7fbaed6a87b7cb6a7602d818c44a6c666e51a65e1a5736dc19b1bab5db32cb4a5b403d3d8d5feb208c6ac824c35dde4244d6e6a2ed0469110ebefe768cd420a7d583d1c57793544d963df58a6cffd6e0866c0084a3a741a0f") setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:52:45 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 654.650673][T18260] binder: 18249:18260 unknown command 536871040 [ 654.665936][T18260] binder: 18249:18260 ioctl c0306201 20000440 returned -22 11:52:45 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x6000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x400c630f}], 0x0, 0x0, &(0x7f0000000780)}) 11:52:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0) write$evdev(r1, &(0x7f00000001c0)=[{{}, 0x1, 0x74, 0x2}], 0x18) sendfile(r1, r1, &(0x7f0000000040), 0x100000001) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) sendfile(r3, r2, 0x0, 0x100000001) 11:52:45 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x600, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:45 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:45 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x42100, 0x0) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000040)="0af6b70d70c9ca8fb740226e42ee787c986b56ed6176cafa50f14c99f8f8fa383b22d26d3555938f94de307a30557d92f438e02bd6c9f735abe4032ee7c586f4a7490daebbba8f01e0e43cf9f0a544ac610987799a387dcf399a618bb1215e8e2611711cbb767ec08a9367f1f5ba7afa") write$UHID_INPUT2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xdb) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000100)=0x7, 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0xe) 11:52:45 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x700, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:45 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x7000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 654.853823][T18291] binder: 18286:18291 unknown command 536871040 [ 654.883198][T18291] binder: 18286:18291 ioctl c0306201 20000440 returned -22 [ 654.933985][T18304] binder: 18286:18304 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 11:52:45 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 654.987336][T18304] binder: 18286:18304 unknown command 0 [ 654.993071][T18304] binder: 18286:18304 ioctl c0306201 200002c0 returned -22 11:52:45 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x4000, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:45 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x3f000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 655.043134][T18291] binder: BINDER_SET_CONTEXT_MGR already set [ 655.078515][T18304] binder: 18286:18304 unknown command 536871040 [ 655.105767][T18291] binder: 18286:18291 ioctl 40046207 0 returned -16 11:52:45 executing program 1: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c64, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:52:45 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x5800, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 655.146021][T18304] binder: 18286:18304 ioctl c0306201 20000440 returned -22 11:52:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106302}], 0x0, 0x0, &(0x7f0000000780)}) 11:52:46 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:46 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x40000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(r0, 0x0, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x40, &(0x7f00000002c0)="9cbdb0c1836ae64a6264b113989193b5da3ee13bf61973c2abcbff00000000cac6c320a27e72e3f4080700000022a641a4775b41253d294adebf9ea6b23a3d8d2e671bd4a1ead589eca33921006798dc11f0c9b1c1", 0x55) [ 655.358230][T18430] binder: 18429:18430 unknown command 536871040 [ 655.386160][T18430] binder: 18429:18430 ioctl c0306201 20000440 returned -22 [ 655.402632][T18430] binder: 18429:18430 unknown command 1074815746 [ 655.438485][T18430] binder: 18429:18430 ioctl c0306201 200002c0 returned -22 [ 655.451498][T18449] binder: 18429:18449 unknown command 536871040 [ 655.458284][T18449] binder: 18429:18449 ioctl c0306201 20000440 returned -22 11:52:46 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = getpgrp(0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0xe5, 0x6, 0x40000, 0x2, 0x0, 0x0, 0x2000, 0x8, 0x5f7c, 0xff9, 0x5, 0xfffffffffffffff8, 0x40, 0x0, 0x9, 0x3fef, 0x1000, 0x0, 0x6, 0x81, 0x8658, 0x4, 0x40, 0x3, 0x7, 0x2142, 0x8000, 0x2, 0x0, 0x2, 0x800, 0xfffffffffffffffd, 0xa00000000000000, 0xffffffffffffe202, 0x2, 0x4000000000, 0x0, 0x7, 0x0, @perf_config_ext={0x5, 0x3}, 0x4808, 0x2, 0x93, 0x4, 0x1, 0x1}, r1, 0x8, r2, 0xa) readv(r0, &(0x7f0000000340), 0x128d) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000040), 0x4) 11:52:46 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x1000000, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:46 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x60000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:46 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106303}], 0x0, 0x0, &(0x7f0000000780)}) 11:52:46 executing program 1: 11:52:46 executing program 1: 11:52:46 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x8dffffff]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:46 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 655.818641][T18547] binder: 18542:18547 unknown command 536871040 [ 655.847447][T18547] binder: 18542:18547 ioctl c0306201 20000440 returned -22 11:52:46 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x2000000, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 655.893543][T18553] binder: 18542:18553 unknown command 1074815747 11:52:46 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xc440, 0x2000) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f0000000040)={0x2, 0x7fffffff}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) [ 655.937215][T18553] binder: 18542:18553 ioctl c0306201 200002c0 returned -22 11:52:46 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0xf5ffffff]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:46 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x3000000, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:46 executing program 1: [ 655.977773][T18553] binder: 18542:18553 unknown command 536871040 [ 656.013975][T18553] binder: 18542:18553 ioctl c0306201 20000440 returned -22 11:52:46 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:46 executing program 1: 11:52:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106304}], 0x0, 0x0, &(0x7f0000000780)}) 11:52:46 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0xffffff8d]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:46 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x6000000, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:47 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 656.236715][T18586] binder: 18583:18586 unknown command 536871040 11:52:47 executing program 1: 11:52:47 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0xfffffff5]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 656.291493][T18586] binder: 18583:18586 ioctl c0306201 20000440 returned -22 [ 656.291805][T18592] binder: 18583:18592 unknown command 1074815748 [ 656.311837][T18592] binder: 18583:18592 ioctl c0306201 200002c0 returned -22 [ 656.439871][T18592] binder: 18583:18592 unknown command 536871040 [ 656.455934][T18586] binder: BINDER_SET_CONTEXT_MGR already set [ 656.463646][T18592] binder: 18583:18592 ioctl c0306201 20000440 returned -22 [ 656.480130][T18586] binder: 18583:18586 ioctl 40046207 0 returned -16 11:52:47 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vfio/vfio\x00', 0x440800, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0x9, @rand_addr="20eba673210b9935ba7bab5502c2dd05", 0x58f}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:52:47 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x7000000, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:47 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:47 executing program 1: 11:52:47 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x100000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106305}], 0x0, 0x0, &(0x7f0000000780)}) 11:52:47 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000040), 0x3a3728, 0x0, 0x0, 0xffffffffffffffbf) [ 656.873148][T18615] binder: 18610:18615 unknown command 536871040 [ 656.900567][T18615] binder: 18610:18615 ioctl c0306201 20000440 returned -22 11:52:47 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:47 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x40000000, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 656.925305][T18619] binder: 18610:18619 unknown command 1074815749 11:52:47 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x200000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:47 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x9, 0x101000) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000040)=0x8, 0x4) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) [ 656.978866][T18619] binder: 18610:18619 ioctl c0306201 200002c0 returned -22 [ 657.018812][T18615] binder: BINDER_SET_CONTEXT_MGR already set 11:52:47 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 657.067428][T18619] binder: 18610:18619 unknown command 536871040 [ 657.081888][T18615] binder: 18610:18615 ioctl 40046207 0 returned -16 11:52:47 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x58000000, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 657.127357][T18619] binder: 18610:18619 ioctl c0306201 20000440 returned -22 11:52:47 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x300000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:47 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8d]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106306}], 0x0, 0x0, &(0x7f0000000780)}) 11:52:48 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200140002000000400000000000000005000600200000000a00000000000000000500e50800070000001f00000000000003000000000000020001008000000000000002000000000500050000009f000a0000ff17000000000000000000000000001700"/128], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x32f0460fe8298b6, 0x0) 11:52:48 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x8dffffff, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 657.306982][T18759] binder: 18755:18759 unknown command 536871040 11:52:48 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x600000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:48 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 657.347349][T18759] binder: 18755:18759 ioctl c0306201 20000440 returned -22 [ 657.374757][T18763] binder: 18755:18763 unknown command 1074815750 [ 657.388676][T18763] binder: 18755:18763 ioctl c0306201 200002c0 returned -22 11:52:48 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x700000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:48 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0xf5ffffff, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 657.442446][T18763] binder: 18755:18763 unknown command 536871040 [ 657.472062][T18763] binder: 18755:18763 ioctl c0306201 20000440 returned -22 11:52:48 executing program 3: mmap(&(0x7f0000014000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x1000000000000006) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = dup3(r0, r0, 0x80000) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="2d637075142d637075202f70696473202f696f203bd5c437e32e7aedeebe6922c7f0e795e1d9366533475bcdb80a72ecd7014ae639a758591b1396f676abbc676d916834761f9a563049c32b6d708d30da87b47c372547fc66173ac85d2c008f116ad5c4cc39ba44528f2d131d3a1d4ed9c380733df0fd960704ec7a02a3999d583b2fc32427355c5679f71ce3001b1c7cb4fda232b22bbcd3"], 0x14) epoll_create1(0x80000) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) write$ppp(r1, &(0x7f0000000100)="c696e718dfbc8583af796626ecc03e846cd12172854d6feb64442afd5b570c2a71946ff57e94d1a5275574280a87c11f533145", 0x33) socket$isdn_base(0x22, 0x3, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000013000/0x3000)=nil, 0x3000}}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0xffffffffffffff9f) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000000380)={0x1, 0x0, 0x2080, {0x1, 0x3001}, [], "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", "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"}) 11:52:48 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106307}], 0x0, 0x0, &(0x7f0000000780)}) 11:52:48 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001800)="7b074d4e9b", 0x5) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000001380)=ANY=[], 0x10000021e) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=""/4096, 0x7ffff000}], 0x1}, 0x0) 11:52:48 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0xffffff8d, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:48 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x3f00000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:48 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 658.008300][T18890] binder: 18884:18890 unknown command 536871040 11:52:48 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x4000000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 658.049779][T18890] binder: 18884:18890 ioctl c0306201 20000440 returned -22 [ 658.057629][T18943] binder: 18884:18943 unknown command 1074815751 11:52:48 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x420001, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0xd8, "12fbd57e0fe3cf22fd05ee1a0fa4d38fd9bad300d9d2b216eb07b47fa03da23547bbac7020a8374766b85796985965707621ba3f32c99f3d09e798920cfc9d04daffacc969ea899eb64eb1f5d64717e97e18c9284a2c206b35eaf0cec6f5d176ede7317faca04fc3c0010e9d1171642a5fa1ce895334b78a0487c38cebd6d850a788b2eaff32891a44f5a71b7a52b5bf128aa2a108ada747558d73db38d66e76a2c73fa1ae452f75d8ad8505cd6aed01c85c557e9db5ad8e26a7c22e2113df2627124f4bf7925cb2fea7c342dabd419547718ba44cfb6455"}, &(0x7f0000000100)=0xe0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000380)={r2, 0x8, 0x5d}, &(0x7f00000003c0)=0x8) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:52:48 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0xfffffff5, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 658.114222][T18943] binder: 18884:18943 ioctl c0306201 200002c0 returned -22 11:52:48 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:48 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0x102d4) [ 658.159675][T18943] binder: 18884:18943 unknown command 536871040 [ 658.165991][T18943] binder: 18884:18943 ioctl c0306201 20000440 returned -22 11:52:49 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x6000000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:49 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x100000000, 0x400) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) [ 658.264427][T18890] binder: BINDER_SET_CONTEXT_MGR already set [ 658.289080][T18890] binder: 18884:18890 ioctl 40046207 0 returned -16 11:52:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106309}], 0x0, 0x0, &(0x7f0000000780)}) 11:52:49 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x100000000000000, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:49 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:49 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x8dffffff00000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:49 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x200000000000000, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:49 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 658.545616][T19134] binder: 19127:19134 unknown command 536871040 [ 658.577258][T19134] binder: 19127:19134 ioctl c0306201 20000440 returned -22 11:52:49 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0xf5ffffff00000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:49 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x300000000000000, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 658.603719][T19134] binder: 19127:19134 BC_ACQUIRE_DONE u0000000000000000 no match 11:52:49 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:49 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x0) fchownat(r0, 0x0, 0x0, 0x0, 0x0) [ 658.665505][T19148] binder: 19127:19148 unknown command 536871040 [ 658.695249][T19148] binder: 19127:19148 ioctl c0306201 20000440 returned -22 11:52:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x4010630a}], 0x0, 0x0, &(0x7f0000000780)}) [ 658.893273][T19210] binder: 19198:19210 unknown command 536871040 [ 658.912041][T19210] binder: 19198:19210 ioctl c0306201 20000440 returned -22 [ 658.923893][T19210] binder: 19198:19210 unknown command 1074815754 [ 658.931085][T19210] binder: 19198:19210 ioctl c0306201 200002c0 returned -22 [ 658.951252][T19258] binder: 19198:19258 unknown command 536871040 [ 658.958631][T19258] binder: 19198:19258 ioctl c0306201 20000440 returned -22 11:52:49 executing program 3: mmap(&(0x7f0000012000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x4) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ustat(0x4, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:52:49 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0xffffffff00000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:49 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x600000000000000, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:49 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x4010630b}], 0x0, 0x0, &(0x7f0000000780)}) 11:52:49 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = syz_open_pts(0xffffffffffffff9c, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 11:52:50 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0xffffffffffffffff]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 659.270806][T19280] binder: 19272:19280 unknown command 536871040 [ 659.298840][T19280] binder: 19272:19280 ioctl c0306201 20000440 returned -22 11:52:50 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x700000000000000, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:50 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 659.326471][T19284] binder: 19272:19284 unknown command 1074815755 [ 659.337388][T19284] binder: 19272:19284 ioctl c0306201 200002c0 returned -22 11:52:50 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x2]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 659.398328][T19284] binder: 19272:19284 unknown command 536871040 [ 659.438435][T19284] binder: 19272:19284 ioctl c0306201 20000440 returned -22 11:52:50 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5800000000000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x4010630c}], 0x0, 0x0, &(0x7f0000000780)}) [ 659.594459][T19376] binder: 19375:19376 unknown command 536871040 [ 659.629379][T19376] binder: 19375:19376 ioctl c0306201 20000440 returned -22 [ 659.658940][T19406] binder: 19375:19406 unknown command 1074815756 [ 659.671885][T19406] binder: 19375:19406 ioctl c0306201 200002c0 returned -22 [ 659.688568][T19406] binder: 19375:19406 unknown command 536871040 [ 659.699985][T19406] binder: 19375:19406 ioctl c0306201 20000440 returned -22 11:52:50 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x3, 0x3, 0x9, 0x5, 0x1}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:52:50 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x4000000000000000, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:50 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x3]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:50 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:50 executing program 1: 11:52:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x4010630d}], 0x0, 0x0, &(0x7f0000000780)}) 11:52:50 executing program 1: 11:52:50 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x6]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:50 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x5800000000000000, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 660.178223][T19420] binder: 19416:19420 unknown command 536871040 [ 660.184558][T19420] binder: 19416:19420 ioctl c0306201 20000440 returned -22 11:52:50 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff00000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 660.298428][T19424] binder: 19416:19424 unknown command 1074815757 [ 660.305803][T19424] binder: 19416:19424 ioctl c0306201 200002c0 returned -22 [ 660.334564][T19424] binder: 19416:19424 unknown command 536871040 11:52:51 executing program 1: 11:52:51 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x7]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 660.344015][T19424] binder: 19416:19424 ioctl c0306201 20000440 returned -22 11:52:51 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:51 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x8dffffff00000000, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:51 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80, 0x0) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000040)={0x1, 0xf2, 0x3000000000, 0x9, 0xfffffffffffff46c, 0x1ff}) 11:52:51 executing program 1: 11:52:51 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x60]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x4010630e}], 0x0, 0x0, &(0x7f0000000780)}) 11:52:51 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x300]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:51 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 661.009304][T19455] binder: 19453:19455 unknown command 536871040 [ 661.015591][T19455] binder: 19453:19455 ioctl c0306201 20000440 returned -22 11:52:51 executing program 1: [ 661.085191][T19460] binder: 19453:19460 unknown command 1074815758 11:52:51 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0xf5ffffff00000000, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 661.139398][T19460] binder: 19453:19460 ioctl c0306201 200002c0 returned -22 11:52:51 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x600]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:51 executing program 1: [ 661.203345][T19460] binder: 19453:19460 unknown command 536871040 11:52:52 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 661.244310][T19460] binder: 19453:19460 ioctl c0306201 20000440 returned -22 11:52:52 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0xffffffff00000000, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:52 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) utime(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0xfffffffffffffffc, 0x1}) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x40, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000077c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000007800)=0x14) connect$can_bcm(r1, &(0x7f0000007840)={0x1d, r2}, 0x10) mknod(&(0x7f00000000c0)='./file0\x00', 0x8, 0x40) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000240)={0x3, r1}) r3 = getpid() ptrace$setregs(0xffffffffffffffff, r3, 0x9, &(0x7f0000000300)="78e7e27500c415cee8dbd67f4e266d60c155295d73206e38289e6cf88fc2b68998bb824af8289bd765945275a0f75230f6f027a7bd9c") r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_tcp_int(r1, 0x6, 0x2e, &(0x7f0000000100)=0x43, 0x4) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95)=0x80000000, 0x4) splice(r1, &(0x7f0000000280)=0x1c, r1, &(0x7f00000002c0), 0x9, 0x1) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000380)) 11:52:52 executing program 1: 11:52:52 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x700]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106310}], 0x0, 0x0, &(0x7f0000000780)}) 11:52:52 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:52 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0xffffffffffffffff, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 661.880652][T19488] binder: 19487:19488 unknown command 536871040 11:52:52 executing program 1: 11:52:52 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x2]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 661.940307][T19488] binder: 19487:19488 ioctl c0306201 20000440 returned -22 [ 661.940408][T19499] binder: 19487:19499 unknown command 1074815760 11:52:52 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:52 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000feb000/0x14000)=nil, 0x14000}, 0x1}) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x47, 0x9, 0x82, 0x8001, 0xfffffffffffffa03, 0xfffffffffffffff7}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:52:52 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x3f00]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 661.997512][T19499] binder: 19487:19499 ioctl c0306201 200002c0 returned -22 [ 662.043241][T19499] binder: 19487:19499 unknown command 536871040 11:52:52 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x3]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:52 executing program 1: [ 662.087722][T19499] binder: 19487:19499 ioctl c0306201 20000440 returned -22 11:52:52 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x4000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:52 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106311}], 0x0, 0x0, &(0x7f0000000780)}) 11:52:53 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x6000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:53 executing program 1: 11:52:53 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x6]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 662.272915][T19527] binder: 19525:19527 unknown command 536871040 [ 662.296634][T19527] binder: 19525:19527 ioctl c0306201 20000440 returned -22 11:52:53 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 662.339601][T19530] binder: 19525:19530 unknown command 1074815761 [ 662.367217][T19530] binder: 19525:19530 ioctl c0306201 200002c0 returned -22 11:52:53 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x1000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 662.425000][T19530] binder: 19525:19530 unknown command 536871040 [ 662.451549][T19530] binder: 19525:19530 ioctl c0306201 20000440 returned -22 11:52:53 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000)=0x2000000000000000, 0x4) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000080)={0x3, 0x5, 0x7, 0x2, 0x2, 0x8, 0xc}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:52:53 executing program 1: 11:52:53 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x7]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:53 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106312}], 0x0, 0x0, &(0x7f0000000780)}) 11:52:53 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:53 executing program 1: 11:52:53 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 662.917903][T19554] binder: 19553:19554 unknown command 536871040 [ 662.927345][T19554] binder: 19553:19554 ioctl c0306201 20000440 returned -22 11:52:53 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x58]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:53 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x3000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 662.988005][T19563] binder: 19553:19563 unknown command 1074815762 11:52:53 executing program 1: r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r0, r0}, 0x0, 0x0, 0x0) [ 663.033598][T19563] binder: 19553:19563 ioctl c0306201 200002c0 returned -22 11:52:53 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x6000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 663.073799][T19554] binder: 19553:19554 unknown command 536871040 [ 663.126337][T19554] binder: 19553:19554 ioctl c0306201 20000440 returned -22 11:52:54 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 11:52:54 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x300]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:54 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:54 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x7000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x6d, 0x0, 0x29) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:52:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x4010632f}], 0x0, 0x0, &(0x7f0000000780)}) [ 663.875728][T19597] binder: 19591:19597 unknown command 536871040 [ 663.914279][T19597] binder: 19591:19597 ioctl c0306201 20000440 returned -22 11:52:54 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x600]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:54 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x3f000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:54 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 663.923826][T19609] binder: 19591:19609 unknown command 1074815791 [ 663.931002][T19609] binder: 19591:19609 ioctl c0306201 200002c0 returned -22 [ 663.941571][T19609] binder: 19591:19609 unknown command 536871040 [ 663.949341][T19609] binder: 19591:19609 ioctl c0306201 20000440 returned -22 11:52:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106354}], 0x0, 0x0, &(0x7f0000000780)}) 11:52:54 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x40000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:54 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000180)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EDID(r0, 0xc0585604, &(0x7f0000000240)={0x0, 0x0, 0x0, [], 0x0}) [ 664.131382][T19715] binder: 19714:19715 unknown command 536871040 [ 664.160190][T19715] binder: 19714:19715 ioctl c0306201 20000440 returned -22 [ 664.189863][T19720] binder: 19714:19720 unknown command 1074815828 [ 664.229927][T19720] binder: 19714:19720 ioctl c0306201 200002c0 returned -22 [ 664.262222][T19715] binder: BINDER_SET_CONTEXT_MGR already set [ 664.269511][T19720] binder: 19714:19720 unknown command 536871040 [ 664.285574][T19715] binder: 19714:19715 ioctl 40046207 0 returned -16 [ 664.294183][T19720] binder: 19714:19720 ioctl c0306201 20000440 returned -22 11:52:55 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f0000000040)={0x2}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa, 0x20}) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x20, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:52:55 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:55 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x700]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:55 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000180)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EDID(r0, 0xc0905664, &(0x7f0000000240)={0x0, 0x0, 0x0, [], 0x0}) 11:52:55 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x60000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40406300}], 0x0, 0x0, &(0x7f0000000780)}) [ 664.726484][T19735] binder: 19734:19735 unknown command 536871040 [ 664.759609][T19735] binder: 19734:19735 ioctl c0306201 20000440 returned -22 11:52:55 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x8dffffff]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:55 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kexec_load(0x100697, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x9e945000, 0x3e0000}], 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080), &(0x7f0000000100)=0x4) 11:52:55 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:55 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x4000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 664.799702][ T7763] binder: release 19734:19743 transaction 456 out, still active [ 664.830004][T19735] binder: BINDER_SET_CONTEXT_MGR already set [ 664.840750][ T7763] binder: undelivered TRANSACTION_COMPLETE [ 664.880606][T19735] binder: 19734:19735 ioctl 40046207 0 returned -16 [ 664.887583][ T7763] binder: send failed reply for transaction 456, target dead 11:52:55 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:55 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xf5ffffff]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:56 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x5800]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40406301}], 0x0, 0x0, &(0x7f0000000780)}) 11:52:56 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:56 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:52:56 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vfio/vfio\x00', 0x440800, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0x9, @rand_addr="20eba673210b9935ba7bab5502c2dd05", 0x58f}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="2f8fe5fe9d86b033a870c03d7bcf8f4b11f5bc4e3b2f6e756c6c6230000000000020f1e5a3f27557d91438f051459b300896651740d3912df06e66b3409f12dca0b0376239c74fd1755a3d4260de7624a8ad6d92ce47d191b51a7f47866a4bc304e8ef55d97420beb4057844d01661853c0a8281ea66329d6b8c95be76f1ef9f657ca68e3b5cd2cf763bfbe2b52715f3f18f1789d95d1a94571d77df7c120f787f4e09d720b09a8d20baad5e32be5d752bc102cbbdcea2b090a99c5d0018d95b72eebd69607cd3814dbdce2e1a3b92e8621e61e4dcb2caa47f9d89e27151f151f8bef266f0c771613c4e91796c8aab4247b3d8421c93ad577b1a6c4ff38fac00b87b244dae0dfd322f573e0609cde68d15dcf6280abcf3b8b44b943d7f08210d958fe10d135f6182eb6aa7d8de6bc1fc1963cd55fce9b4ae8d09e9bd298e9cfe77a5bc5838ffa9bfd00c763dec2a7f9365b53c0d55e9ed77b723c6ff868af120008ae5ad065d817a04da4a4b7ae89e111dcab1c004fc43993475da2b6952cb79083d966f6da3e11ca33e9c316503590884576fd750d3402944c2b84fdc6bfad5270e8432cf7020495fe9f70a5dee409f4231000000"], &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:52:56 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xffffff8d]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 665.594737][T19871] binder: 19870:19871 unknown command 536871040 11:52:56 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5800]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:56 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xfffffff5]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:56 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x1000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 665.642146][T19871] binder: 19870:19871 ioctl c0306201 20000440 returned -22 [ 665.664406][T19882] binder: 19870:19882 got reply transaction with no transaction stack [ 665.735286][T19882] binder: 19870:19882 transaction failed 29201/-71, size 0-0 line 2900 11:52:56 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vfio/vfio\x00', 0x440800, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0x9, @rand_addr="20eba673210b9935ba7bab5502c2dd05", 0x58f}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="2f8fe5fe9d86b033a870c03d7bcf8f4b11f5bc4e3b2f6e756c6c6230000000000020f1e5a3f27557d91438f051459b300896651740d3912df06e66b3409f12dca0b0376239c74fd1755a3d4260de7624a8ad6d92ce47d191b51a7f47866a4bc304e8ef55d97420beb4057844d01661853c0a8281ea66329d6b8c95be76f1ef9f657ca68e3b5cd2cf763bfbe2b52715f3f18f1789d95d1a94571d77df7c120f787f4e09d720b09a8d20baad5e32be5d752bc102cbbdcea2b090a99c5d0018d95b72eebd69607cd3814dbdce2e1a3b92e8621e61e4dcb2caa47f9d89e27151f151f8bef266f0c771613c4e91796c8aab4247b3d8421c93ad577b1a6c4ff38fac00b87b244dae0dfd322f573e0609cde68d15dcf6280abcf3b8b44b943d7f08210d958fe10d135f6182eb6aa7d8de6bc1fc1963cd55fce9b4ae8d09e9bd298e9cfe77a5bc5838ffa9bfd00c763dec2a7f9365b53c0d55e9ed77b723c6ff868af120008ae5ad065d817a04da4a4b7ae89e111dcab1c004fc43993475da2b6952cb79083d966f6da3e11ca33e9c316503590884576fd750d3402944c2b84fdc6bfad5270e8432cf7020495fe9f70a5dee409f4231000000"], &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:52:56 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:56 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:56 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x2000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 665.795185][ T7763] binder: undelivered TRANSACTION_ERROR: 29201 [ 665.803624][T19871] binder: BINDER_SET_CONTEXT_MGR already set [ 665.826161][T19882] binder: 19870:19882 unknown command 536871040 [ 665.887458][T19871] binder: 19870:19871 ioctl 40046207 0 returned -16 [ 665.887494][T19882] binder: 19870:19882 ioctl c0306201 20000440 returned -22 11:52:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40486311}], 0x0, 0x0, &(0x7f0000000780)}) [ 666.085086][T20079] binder: 20075:20079 unknown command 536871040 [ 666.095198][T20079] binder: 20075:20079 ioctl c0306201 20000440 returned -22 [ 666.119714][ T12] binder: release 20075:20079 transaction 460 out, still active [ 666.127813][T20079] binder: BINDER_SET_CONTEXT_MGR already set [ 666.134031][T20115] binder: 20075:20115 unknown command 536871040 [ 666.140704][T20079] binder: 20075:20079 ioctl 40046207 0 returned -16 [ 666.147869][T20115] binder: 20075:20115 ioctl c0306201 20000440 returned -22 [ 666.151981][ T12] binder: undelivered TRANSACTION_COMPLETE [ 666.189902][ T12] binder: send failed reply for transaction 460, target dead 11:52:57 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x2a000, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000000c0)=0x7, 0x4) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) dup(r1) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) iopl(0x101) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$inet6_tcp_int(r2, 0x6, 0x27, &(0x7f0000000100)=0x6, 0x4) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000040)=0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000240)=0x80000001) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:52:57 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:57 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:57 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x3000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:57 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vfio/vfio\x00', 0x440800, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0x9, @rand_addr="20eba673210b9935ba7bab5502c2dd05", 0x58f}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:52:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40486312}], 0x0, 0x0, &(0x7f0000000780)}) 11:52:57 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 666.570778][T20128] binder: 20124:20128 unknown command 536871040 [ 666.594456][T20128] binder: 20124:20128 ioctl c0306201 20000440 returned -22 11:52:57 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:57 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x6000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 666.636881][T20134] binder: 20124:20134 got reply transaction with no transaction stack 11:52:57 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x7000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:57 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x20400, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000012000/0x3000)=nil, 0x3000, 0x0, 0x853, r1, 0x10000000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:52:57 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 666.763613][T20134] binder: 20124:20134 transaction failed 29201/-71, size 0-0 line 2900 11:52:57 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vfio/vfio\x00', 0x440800, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0x9, @rand_addr="20eba673210b9935ba7bab5502c2dd05", 0x58f}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="2f8fe5fe9d86b033a870c03d7bcf8f4b11f5bc4e3b2f6e756c6c6230000000000020f1e5a3f27557d91438f051459b300896651740d3912df06e66b3409f12dca0b0376239c74fd1755a3d4260de7624a8ad6d92ce47d191b51a7f47866a4bc304e8ef55d97420beb4057844d01661853c0a8281ea66329d6b8c95be76f1ef9f657ca68e3b5cd2cf763bfbe2b52715f3f18f1789d95d1a94571d77df7c120f787f4e09d720b09a8d20baad5e32be5d752bc102cbbdcea2b090a99c5d0018d95b72eebd69607cd3814dbdce2e1a3b92e8621e61e4dcb2caa47f9d89e27151f151f8bef266f0c771613c4e91796c8aab4247b3d8421c93ad577b1a6c4ff38fac00b87b244dae0dfd322f573e0609cde68d15dcf6280abcf3b8b44b943d7f08210d958fe10d135f6182eb6aa7d8de6bc1fc1963cd55fce9b4ae8d09e9bd298e9cfe77a5bc5838ffa9bfd00c763dec2a7f9365b53c0d55e9ed77b723c6ff868af120008ae5ad065d817a04da4a4b7ae89e111dcab1c004fc43993475da2b6952cb79083d966f6da3e11ca33e9c316503590884576fd750d3402944c2b84fdc6bfad5270e8432cf7020495fe9f70a5dee409f4231000000"], &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:52:57 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 666.858834][T32421] binder: undelivered TRANSACTION_ERROR: 29201 [ 666.865989][T20134] binder: BINDER_SET_CONTEXT_MGR already set [ 666.890418][T20253] binder: 20124:20253 unknown command 536871040 11:52:57 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:57 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x40000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 666.940158][T20134] binder: 20124:20134 ioctl 40046207 0 returned -16 [ 666.962297][T20253] binder: 20124:20253 ioctl c0306201 20000440 returned -22 11:52:57 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x2}], 0x0, 0x0, &(0x7f0000000780)}) 11:52:57 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vfio/vfio\x00', 0x440800, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0x9, @rand_addr="20eba673210b9935ba7bab5502c2dd05", 0x58f}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:52:57 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:57 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x58000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 667.139454][T20373] binder: 20372:20373 unknown command 536871040 11:52:57 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 667.187528][T20373] binder: 20372:20373 ioctl c0306201 20000440 returned -22 [ 667.194900][T20376] binder: 20372:20376 BC_INCREFS_DONE u0000000000000000 no match [ 667.270964][T20376] binder: 20372:20376 unknown command 536871040 [ 667.293124][T20376] binder: 20372:20376 ioctl c0306201 20000440 returned -22 11:52:58 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x2, 0x10012, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:52:58 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:58 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x8dffffff]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:58 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x3}], 0x0, 0x0, &(0x7f0000000780)}) 11:52:58 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vfio/vfio\x00', 0x440800, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0x9, @rand_addr="20eba673210b9935ba7bab5502c2dd05", 0x58f}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) [ 667.682225][T20505] binder: 20504:20505 unknown command 536871040 [ 667.715263][T20505] binder: 20504:20505 ioctl c0306201 20000440 returned -22 11:52:58 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x6000000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:58 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:58 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0xf5ffffff]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 667.743268][T20509] binder: 20504:20509 BC_INCREFS_DONE u0000000000000000 no match [ 667.756565][T20509] binder: 20504:20509 unknown command 536871040 [ 667.763497][T20509] binder: 20504:20509 ioctl c0306201 20000440 returned -22 11:52:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x4}], 0x0, 0x0, &(0x7f0000000780)}) 11:52:58 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x8dffffff00000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:58 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 667.983947][T20625] binder: 20622:20625 unknown command 536871040 [ 668.019225][T20625] binder: 20622:20625 ioctl c0306201 20000440 returned -22 [ 668.047338][T20631] binder: 20622:20631 BC_INCREFS_DONE u0000000000000000 no match [ 668.093438][T20634] binder: 20622:20634 unknown command 536871040 [ 668.100032][T20634] binder: 20622:20634 ioctl c0306201 20000440 returned -22 11:52:59 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e20, 0x2038, @local, 0x80000000}}}, 0x84) 11:52:59 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0xffffff8d]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:59 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x0, @empty}}) write(r0, &(0x7f0000000140), 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x440480, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000300)=0xa, 0x4) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) ioctl$VIDIOC_ENUMSTD(r3, 0xc0485619, &(0x7f0000000480)={0x0, 0x8000, "16bc5d1a6ab959ae9fb67f2bcba511cdc1b7807d62f69828", {0x0, 0x8000}}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000580)='/dev/snd/pcmC#D#c\x00', 0x0, 0x2000) ioctl$void(r2, 0x5450) write$apparmor_current(r4, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000240)={'filter\x00', 0x100000000000018c}, 0x68) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/stat\x00') r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r6, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x7fffffff, 0x9, 0xc84c, 0x2}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket(0x40000000015, 0x805, 0x0) bind$inet(r8, &(0x7f00000a9000)={0x2, 0x0, @loopback}, 0x10) setsockopt$sock_int(r8, 0x1, 0x2a, &(0x7f0000000180)=0x1, 0x4) sendmsg$inet_sctp(r8, &(0x7f0000000380)={&(0x7f0000000040)=@in={0x2, 0x0, @remote}, 0x10, 0x0}, 0x4000000) r9 = socket$unix(0x1, 0x5, 0x0) bind$unix(r9, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r7, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$DRM_IOCTL_GET_MAGIC(r5, 0x80046402, &(0x7f00000002c0)=0xffffffff7fffffff) 11:52:59 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:59 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x5}], 0x0, 0x0, &(0x7f0000000780)}) [ 668.526889][T20641] binder: 20640:20641 unknown command 536871040 11:52:59 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 668.572543][T20641] binder: 20640:20641 ioctl c0306201 20000440 returned -22 [ 668.580611][T20650] binder: 20640:20650 BC_INCREFS_DONE u0000000000000000 no match 11:52:59 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0xfffffff5]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:59 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 668.628627][T20650] binder: 20640:20650 unknown command 536871040 [ 668.645849][T20650] binder: 20640:20650 ioctl c0306201 20000440 returned -22 11:52:59 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x0, @empty}}) write(r0, &(0x7f0000000140), 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x440480, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000300)=0xa, 0x4) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) ioctl$VIDIOC_ENUMSTD(r3, 0xc0485619, &(0x7f0000000480)={0x0, 0x8000, "16bc5d1a6ab959ae9fb67f2bcba511cdc1b7807d62f69828", {0x0, 0x8000}}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000580)='/dev/snd/pcmC#D#c\x00', 0x0, 0x2000) ioctl$void(r2, 0x5450) write$apparmor_current(r4, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000240)={'filter\x00', 0x100000000000018c}, 0x68) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/stat\x00') r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r6, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x7fffffff, 0x9, 0xc84c, 0x2}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket(0x40000000015, 0x805, 0x0) bind$inet(r8, &(0x7f00000a9000)={0x2, 0x0, @loopback}, 0x10) setsockopt$sock_int(r8, 0x1, 0x2a, &(0x7f0000000180)=0x1, 0x4) sendmsg$inet_sctp(r8, &(0x7f0000000380)={&(0x7f0000000040)=@in={0x2, 0x0, @remote}, 0x10, 0x0}, 0x4000000) r9 = socket$unix(0x1, 0x5, 0x0) bind$unix(r9, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r7, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$DRM_IOCTL_GET_MAGIC(r5, 0x80046402, &(0x7f00000002c0)=0xffffffff7fffffff) 11:52:59 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:59 executing program 3: syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x1, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='user\x00'}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000013000/0x3000)=nil, 0x3000, 0xfffffffffffffffd, 0x41000003e, r0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x200000, 0x0) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f00000003c0)={@local, @dev, 0x0}, &(0x7f0000000400)=0xc) bind$can_raw(r1, &(0x7f0000000440)={0x1d, r2}, 0x10) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x1e}) readv(r3, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = getpgrp(0x0) fcntl$lock(r4, 0x27, &(0x7f0000000000)={0x1, 0x3, 0x100000000, 0x9, r5}) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000240)) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:52:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x6}], 0x0, 0x0, &(0x7f0000000780)}) 11:52:59 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:59 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x100000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 668.886499][T20673] binder: 20672:20673 unknown command 536871040 11:52:59 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:52:59 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000380)='trusted.overlay.redirect\x00', &(0x7f00000003c0)='./file0\x00', 0x8, 0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x2, 0x3) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x7ffffd}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r2, r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) [ 668.934522][T20673] binder: 20672:20673 ioctl c0306201 20000440 returned -22 [ 669.005940][T20676] binder: 20672:20676 BC_INCREFS_DONE u0000000000000000 no match 11:52:59 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x200000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:59 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:52:59 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 669.051905][T20676] binder: 20672:20676 unknown command 536871040 [ 669.063590][T20676] binder: 20672:20676 ioctl c0306201 20000440 returned -22 11:52:59 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000012000/0xc000)=nil, 0xc000, 0x1, 0x40010, r0, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x43}) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) fadvise64(r1, 0x0, 0x10001, 0x5) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:52:59 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x100000000, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x24200, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040)=0x4) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:52:59 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x300000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x7}], 0x0, 0x0, &(0x7f0000000780)}) 11:53:00 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8d]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:00 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2000, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)) 11:53:00 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x600000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 669.308180][T20810] binder: 20809:20810 unknown command 536871040 11:53:00 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:00 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 669.360466][T20810] binder: 20809:20810 ioctl c0306201 20000440 returned -22 [ 669.398041][T20840] binder: 20809:20840 BC_INCREFS_DONE u0000000000000000 no match 11:53:00 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x100000000, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x24200, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040)=0x4) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) [ 669.447723][T20840] binder: 20809:20840 unknown command 536871040 [ 669.486091][T20840] binder: 20809:20840 ioctl c0306201 20000440 returned -22 11:53:00 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x700000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:00 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:00 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x10}], 0x0, 0x0, &(0x7f0000000780)}) 11:53:00 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:00 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x4000000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:00 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 669.681154][T20993] binder: 20979:20993 unknown command 536871040 [ 669.697551][T20993] binder: 20979:20993 ioctl c0306201 20000440 returned -22 [ 669.717969][T20993] binder: 20979:20993 BC_INCREFS_DONE u0000000000000000 no match [ 669.791913][T21048] binder: 20979:21048 unknown command 536871040 [ 669.817647][T21048] binder: 20979:21048 ioctl c0306201 20000440 returned -22 11:53:00 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x2}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x300, 0x0) setsockopt$inet_dccp_int(r2, 0x21, 0x15, &(0x7f0000000100)=0xfffffffffffffee0, 0x4) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x10000, 0x82000) ioctl$VIDIOC_ENCODER_CMD(r3, 0xc028564d, &(0x7f0000000080)={0x3, 0x1, [0x9, 0x0, 0x10001, 0x4, 0x7, 0x9, 0x1f, 0x4ac]}) 11:53:00 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x100000000, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x24200, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040)=0x4) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:53:00 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x5800000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:00 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x48}], 0x0, 0x0, &(0x7f0000000780)}) 11:53:00 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:01 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 670.246171][T21061] binder: 21060:21061 unknown command 536871040 [ 670.284075][T21061] binder: 21060:21061 ioctl c0306201 20000440 returned -22 11:53:01 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:01 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x8dffffff00000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 670.341336][T21122] binder: 21060:21122 BC_INCREFS_DONE u0000000000000000 no match 11:53:01 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @random="cc8f25d17467", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 11:53:01 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 670.418485][T21122] binder: 21060:21122 unknown command 536871040 [ 670.424887][T21122] binder: 21060:21122 ioctl c0306201 20000440 returned -22 11:53:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x4c}], 0x0, 0x0, &(0x7f0000000780)}) [ 670.523308][T21185] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 670.577504][T21190] binder: 21188:21190 unknown command 536871040 [ 670.591248][T21190] binder: 21188:21190 ioctl c0306201 20000440 returned -22 [ 670.624590][T21193] binder: 21188:21193 BC_INCREFS_DONE u0000000000000000 no match [ 670.652461][T21193] binder: BINDER_SET_CONTEXT_MGR already set [ 670.660333][T21194] binder: 21188:21194 unknown command 536871040 [ 670.666982][T21194] binder: 21188:21194 ioctl c0306201 20000440 returned -22 [ 670.685429][T21193] binder: 21188:21193 ioctl 40046207 0 returned -16 11:53:01 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x10000800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) userfaultfd(0x80000) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:53:01 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:01 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0xf5ffffff00000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:01 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:01 executing program 1: r0 = gettid() r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0xc00000000, 0x100) mkdir(0x0, 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x40) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) umount2(&(0x7f0000000300)='./file0\x00', 0x8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000100)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x80000, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000480)='ip6_vti0\x00', 0x10) capget(&(0x7f0000000140)={0x39980732, r0}, &(0x7f0000000180)={0x8c2c, 0x8000, 0x1, 0x3, 0x3, 0x4b}) ioctl$VIDIOC_ENCODER_CMD(r3, 0xc028564d, &(0x7f0000000080)={0x1, 0x0, [0x2, 0xffff, 0xfff, 0xf0, 0x4, 0xfffd, 0x80, 0x5c]}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x3, @broadcast, 'bcsh0\x00'}}) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) write$vnet(r2, &(0x7f0000000400)={0x1, {&(0x7f0000000240)=""/144, 0x3ea, &(0x7f0000000340)=""/166, 0x2, 0x7}}, 0x68) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000680)) 11:53:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x60}], 0x0, 0x0, &(0x7f0000000780)}) 11:53:01 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0xffffffff00000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 671.167027][T21207] binder: 21206:21207 unknown command 536871040 [ 671.184820][T21207] binder: 21206:21207 ioctl c0306201 20000440 returned -22 11:53:01 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:02 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 671.227999][T21216] binder: 21206:21216 BC_INCREFS_DONE u0000000000000000 no match [ 671.287731][T21216] binder: 21206:21216 unknown command 536871040 11:53:02 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa, 0x1}) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x2000, 0x0) r3 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) r4 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x1) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000240)={r3, 0x6, 0x12, r4}) fsetxattr$security_smack_transmute(r4, &(0x7f0000000280)='security.SMACK64TRANSMUTE\x00', &(0x7f00000002c0)='TRUE', 0x4, 0x3) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x1, 0x0) ioctl$KVM_REINJECT_CONTROL(r5, 0xae71, &(0x7f0000000080)={0x9}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:53:02 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0xffffffffffffffff]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 671.329115][T21216] binder: 21206:21216 ioctl c0306201 20000440 returned -22 11:53:02 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x68}], 0x0, 0x0, &(0x7f0000000780)}) 11:53:02 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:02 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x2]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:02 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/225, 0xe1}, {&(0x7f0000000080)=""/127, 0x7f}], 0x2) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x4, 0x1) write$cgroup_type(r1, &(0x7f0000000380)='threaded\x00', 0x4f8) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) [ 671.531655][T21267] binder: 21266:21267 unknown command 536871040 [ 671.568590][T21267] binder: 21266:21267 ioctl c0306201 20000440 returned -22 [ 671.625037][T21318] binder: 21266:21318 unknown command 536871040 [ 671.678250][T21318] binder: 21266:21318 ioctl c0306201 20000440 returned -22 11:53:02 executing program 1: r0 = gettid() r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0xc00000000, 0x100) mkdir(0x0, 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x40) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) umount2(&(0x7f0000000300)='./file0\x00', 0x8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000100)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x80000, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000480)='ip6_vti0\x00', 0x10) capget(&(0x7f0000000140)={0x39980732, r0}, &(0x7f0000000180)={0x8c2c, 0x8000, 0x1, 0x3, 0x3, 0x4b}) ioctl$VIDIOC_ENCODER_CMD(r3, 0xc028564d, &(0x7f0000000080)={0x1, 0x0, [0x2, 0xffff, 0xfff, 0xf0, 0x4, 0xfffd, 0x80, 0x5c]}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x3, @broadcast, 'bcsh0\x00'}}) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) write$vnet(r2, &(0x7f0000000400)={0x1, {&(0x7f0000000240)=""/144, 0x3ea, &(0x7f0000000340)=""/166, 0x2, 0x7}}, 0x68) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000680)) 11:53:02 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:02 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x3]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:02 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:02 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x10000001000800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x20}) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x0, 0x70bd2b, 0x25dfdbff, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x8845) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:53:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x6c}], 0x0, 0x0, &(0x7f0000000780)}) 11:53:02 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 671.847970][T21361] binder: 21360:21361 unknown command 536871040 [ 671.864083][T21361] binder: 21360:21361 ioctl c0306201 20000440 returned -22 11:53:02 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x6]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:02 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5800000000000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:02 executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) listen(r0, 0x786) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) [ 671.918337][T21370] binder: 21360:21370 unknown command 536871040 [ 671.955854][T21370] binder: 21360:21370 ioctl c0306201 20000440 returned -22 11:53:02 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:02 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x7]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:02 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x41, &(0x7f0000000040)={'mangle\x00', 0x6}, &(0x7f00000000c0)=0x28) 11:53:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x74}], 0x0, 0x0, &(0x7f0000000780)}) 11:53:02 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:02 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:02 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x58]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:03 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff00000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:03 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 672.278765][T21499] binder: 21493:21499 unknown command 536871040 [ 672.317289][T21499] binder: 21493:21499 ioctl c0306201 20000440 returned -22 11:53:03 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x300]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 672.375453][T21508] binder_thread_write: 2 callbacks suppressed [ 672.375467][T21508] binder: 21493:21508 BC_INCREFS_DONE u0000000000000000 no match 11:53:03 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 672.455805][T21499] binder: 21493:21499 unknown command 536871040 [ 672.491306][T21499] binder: 21493:21499 ioctl c0306201 20000440 returned -22 11:53:03 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_int(r1, 0x0, 0x1d, &(0x7f0000000000)=0x37b, 0x4) 11:53:03 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:03 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x2000, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000180)={&(0x7f0000000080), 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="07000000000a00000300000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x7530, @ANYBLOB="020000a0010000000200006019010000ec69ccf933ad88e35b7869ddcc424dd4e7a494fb537146b53538c0ef1daf758b9cae9bd7fd2f044ca0c23c2b024b945152dc6d57460c29f2daa966878c4f37dc"], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xb) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000001200)={0x0, 0x1}, &(0x7f0000001240)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000001280)={r2, 0x3}, 0x8) write$UHID_INPUT(r1, &(0x7f00000001c0)={0x8, "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", 0x1000}, 0x1006) write$P9_RSTATFS(r1, &(0x7f00000012c0)={0x43, 0x9, 0x1, {0x0, 0x7, 0x80000001, 0x4, 0x9d, 0x76, 0x5, 0xe7, 0x2}}, 0x43) 11:53:03 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x600]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:03 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x7a}], 0x0, 0x0, &(0x7f0000000780)}) 11:53:03 executing program 1: r0 = socket(0x10, 0x803, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000012c0)={0xffffffffffffff9c, 0xc0, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xdfa}, 0x0, 0x0, &(0x7f0000000140)={0x3, 0x20f7, 0x5, 0x80}, &(0x7f0000000180)=0x3, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=0x3}}, 0x10) bind$inet(r0, &(0x7f0000002440)={0x2, 0x4e21, @loopback}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002480)=r1, 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ff00ffe90009144aff0ae9", 0x12, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000002400)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/147, 0x93}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000000000)=""/73, 0x49}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x4}, 0x60) [ 673.079573][T21632] binder: 21623:21632 unknown command 536871040 11:53:03 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:03 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:03 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x700]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 673.138029][T21632] binder: 21623:21632 ioctl c0306201 20000440 returned -22 [ 673.167314][T21637] binder: 21623:21637 BC_INCREFS_DONE u0000000000000000 no match 11:53:04 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x3, 0x2) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000240)={0x0, 0xdf, 0x1, [0x2]}, &(0x7f0000000280)=0xa) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000300)={r1, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x800, 0xfff, 0xf4, 0x3, 0x81}, &(0x7f00000003c0)=0x98) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair(0xa, 0x6, 0x82, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4001410}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r3, 0x702, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0xfff, 0x9, 0x4, 0x7fff}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x4810) r4 = getpgid(0x0) tkill(r4, 0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x200087) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/dlm-monitor\x00', 0x4000, 0x0) r7 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x3) pwritev(r6, &(0x7f00000001c0)=[{&(0x7f0000000600)="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", 0xff0}, {0x0}], 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r5) sendfile(r7, r5, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r5, 0x4c01) [ 673.228071][T21637] binder: 21623:21637 unknown command 536871040 [ 673.258795][T21637] binder: 21623:21637 ioctl c0306201 20000440 returned -22 11:53:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x300}], 0x0, 0x0, &(0x7f0000000780)}) [ 673.396942][T21658] binder: 21656:21658 unknown command 536871040 [ 673.414101][T21658] binder: 21656:21658 ioctl c0306201 20000440 returned -22 [ 673.424921][T21658] binder: 21656:21658 BC_INCREFS_DONE u0000000000000000 no match [ 673.442067][T21659] binder: 21656:21659 unknown command 536871040 [ 673.448980][T21659] binder: 21656:21659 ioctl c0306201 20000440 returned -22 11:53:04 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) userfaultfd(0x80800) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) r2 = getpid() wait4(r2, 0x0, 0x80000003, &(0x7f0000000000)) 11:53:04 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:04 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:04 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x4000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0a9623283640ad59dbd0704656d0979742608f068a2a97ddcc785336cf01b5da0a41cf12bbf0990b6ba7941747c720812813d599089820555c3a54f6e7d3cf7e435662430ce3f08a402206da7f7c40ac5e3857feb39c0899643d671fa1099415e5249d2dfce3aaa6db7e937eb74a3480ae7ff477fb7eebe983dafda8a94ea3") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4000000007}, {0x80000006}]}, 0x10) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000200)={'raw\x00'}, &(0x7f0000000040)=0x54) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x1, 0x204001) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000140)=0x4) 11:53:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x500}], 0x0, 0x0, &(0x7f0000000780)}) 11:53:04 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x5800]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:04 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:04 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 673.999398][T21671] binder: 21670:21671 unknown command 536871040 [ 674.028163][T21671] binder: 21670:21671 ioctl c0306201 20000440 returned -22 [ 674.074994][T21671] binder: 21670:21671 BC_INCREFS_DONE u0000000000000000 no match [ 674.144610][T21731] binder: 21670:21731 unknown command 536871040 11:53:04 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:04 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x1000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:04 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 674.186862][T21731] binder: 21670:21731 ioctl c0306201 20000440 returned -22 11:53:05 executing program 3: mmap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x4, 0x400000032, 0xffffffffffffffff, 0x3) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x100000000, 0xf0500) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000240)={{0x1d, @multicast2, 0x4e24, 0x1, 'rr\x00', 0x2, 0x7fffffff, 0x42}, {@local, 0x4e22, 0x0, 0x7, 0xffffffffffff866c, 0x3145}}, 0x44) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080)={r3, 0x6}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:53:05 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x600}], 0x0, 0x0, &(0x7f0000000780)}) 11:53:05 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8d]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:05 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x2000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:05 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'rose0\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x4400045b, 0x0) [ 674.848762][T21804] binder: 21803:21804 unknown command 536871040 11:53:05 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x3000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:05 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 674.903857][T21804] binder: 21803:21804 ioctl c0306201 20000440 returned -22 11:53:05 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 674.946534][T21816] binder: 21803:21816 BC_INCREFS_DONE u0000000000000000 no match 11:53:05 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = getpgid(0x0) fcntl$lock(r0, 0x5, &(0x7f0000000000)={0x0, 0x7, 0x3, 0x1000, r1}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x0, 0x20400) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) [ 675.012792][T21816] binder: 21803:21816 unknown command 536871040 [ 675.027210][T21816] binder: 21803:21816 ioctl c0306201 20000440 returned -22 11:53:05 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x6000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:05 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:05 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x700}], 0x0, 0x0, &(0x7f0000000780)}) 11:53:05 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:06 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x7000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:06 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 675.294856][T21891] binder: 21890:21891 unknown command 536871040 11:53:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000443000/0x2000)=nil, 0x2000, 0xe) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8, 0x8040) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xd000) [ 675.351729][T21945] binder: 21890:21945 BC_INCREFS_DONE u0000000000000000 no match [ 675.351743][T21891] binder: 21890:21891 ioctl c0306201 20000440 returned -22 11:53:06 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:06 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x40000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 675.414202][T21945] binder: 21890:21945 unknown command 536871040 [ 675.427250][T21945] binder: 21890:21945 ioctl c0306201 20000440 returned -22 11:53:06 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:06 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000010000/0x3000)=nil, 0x3000}, 0x1}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x80040) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f0000000240)=@v2={0x7, 0x1, 0xc, 0x4, 0xdc, "73e335bffbdd160247c17f0a56896560898a169d9f990a6648b764aaad3c13abed04667482f69a1fc81b7d539912db8faee677c4305a7677b353284e9376edf042db8644ca0daaf091f1b0fc1a3883746f7d34b4515bb43f9ac792c464333a0d9dba59fe2afc26520e28e9b47ec747ef8bcbca42bc2eaaf067951c2a5d436105ae6f579f415a4e0f12417a00a5fc465616abb2f5130640932727c43a08d75687053993c7805d0a44d06b01a57861809f63a1a7da4e62ab1a6aa42d2ad2c5ba5c09c295ce566c45d307b8b9d0410d537d4d3f5cbe32a091993bbdfbd6"}, 0xe6, 0x3) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:53:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x2000}], 0x0, 0x0, &(0x7f0000000780)}) 11:53:06 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:06 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:06 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x58000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:06 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec7) ioctl$KVM_NMI(r1, 0xae9a) mknod(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = dup2(r0, r0) ioctl$SCSI_IOCTL_SYNC(r2, 0x4) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200440, 0x181) 11:53:06 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:06 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x8dffffff]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:06 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 675.945204][T22075] binder: 22068:22075 unknown command 536871040 [ 675.981811][T22075] binder: 22068:22075 ioctl c0306201 20000440 returned -22 [ 676.023983][T22127] binder: 22068:22127 BC_INCREFS_DONE u0000000000000000 no match 11:53:06 executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r0, &(0x7f0000000440)={&(0x7f0000000080)=@nfc={0x103, 0x14}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000040)="9cffffffffffba00009b80004305", 0xe}], 0x1}, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x400, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@loopback, @in6}}, {{@in6=@local}, 0x0, @in=@initdev}}, &(0x7f0000000200)=0xe8) [ 676.072784][T22127] binder: 22068:22127 unknown command 536871040 11:53:06 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0xf5ffffff]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 676.121050][T22127] binder: 22068:22127 ioctl c0306201 20000440 returned -22 11:53:06 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:07 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) pread64(r0, &(0x7f0000000000)=""/199, 0xc7, 0x0) 11:53:07 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x3f00}], 0x0, 0x0, &(0x7f0000000780)}) 11:53:07 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:07 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0xffffff8d]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:07 executing program 1: r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xc001, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 11:53:07 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:07 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0xfffffff5]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:07 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 676.793862][T22312] binder: 22307:22312 unknown command 536871040 [ 676.818219][T22312] binder: 22307:22312 ioctl c0306201 20000440 returned -22 [ 676.864786][T22312] binder: 22307:22312 BC_INCREFS_DONE u0000000000000000 no match 11:53:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x4, &(0x7f0000b56f40)=""/192, &(0x7f0000004ffc)=0xc0) sync_file_range(r0, 0x4, 0x5, 0x7) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2480000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0xf08, 0x70bd26, 0x25dfdbfc, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x880) [ 676.925305][T22312] binder: BINDER_SET_CONTEXT_MGR already set [ 676.952128][T22429] binder: 22307:22429 unknown command 536871040 11:53:07 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x100000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:07 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff00000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 677.005215][T22312] binder: 22307:22312 ioctl 40046207 0 returned -16 [ 677.006204][T22429] binder: 22307:22429 ioctl c0306201 20000440 returned -22 11:53:08 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000000)={0x0, @src_change}) 11:53:08 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5800]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x4800}], 0x0, 0x0, &(0x7f0000000780)}) 11:53:08 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:08 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x200000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:08 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x200000000202100, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_to_bridge\x00', &(0x7f0000000980)=ANY=[@ANYBLOB="290000000000000000000000000000000000000000000000000800000000000000000000000000000000615c9374355dd4471b3e7c02d14fe76fcdccc1f8bc208d16db"]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0, 0xffffffffffff0001}, &(0x7f0000000400)=0xffffffffffffffc8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x4, 0x1fc) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002880)=[{&(0x7f0000000680)="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", 0x1aa}], 0x1}, 0x0) mount(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f00000001c0)) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='securityfs\x00', 0x100021, &(0x7f0000000480)) r4 = syz_open_dev$sndpcmc(&(0x7f0000000540)='/dev/snd/pcmC#D#c\x00', 0x3, 0x7ffff) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r4, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000ac0)={r0, r1, 0x3, 0x97, &(0x7f0000000a00)="479aa50a95ce69e52638a668141f54dc22ad6a17b8c1adf4fbae0bc459e5bb68c67b623426f7e241f97e800b6eab5f7b210d7e4fafd334fa8f306fb616745d1d13477d1102b05d95e70cea7dea1f91043d9f8ec737a60caa04f43a6afa6676af616847abac2a200a462f04d43cd780c257f1d531e58d37c03a13a562c0a69cd0b7e8a09030400e8cf6966aa01e5626420adf59f09d5869", 0x4, 0x2, 0x725c, 0x7, 0x5, 0x759ca74c1459d7a2, 0x6, 'syz0\x00'}) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(0xffffffffffffffff) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x6, 0x0, 0x7}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r4, 0x4080aea1, &(0x7f0000000440)=""/40) r7 = getpid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f0000000500)=0xe8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002280)={0x0, r3, 0x0, 0x5, &(0x7f0000000840)='syz0\x00', 0xffffffffffffffff}, 0x30) r10 = fcntl$getown(r3, 0x9) sendmsg$netlink(r4, &(0x7f00000024c0)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x40000}, 0xc, &(0x7f0000002440)=[{&(0x7f0000000b80)={0x17c, 0x29, 0x200, 0x70bd26, 0x25dfdbfe, "", [@typed={0xc, 0x4b, @u64=0x9}, @generic="d59daf82b78c0e54e66f6e896cd35a1eadb7ecd2bd8135f277e34b6c34485cce708bf172320b0460a8080f12949421e5cc5095ddf8a6cf5130cc4f8c41887db0da0677aedc6782f45dba824e504d0e4b34123136249b7253fddb600513c26884df74642a56451043d01d8c6079528d5344bf7cf920098be6b41355ede7692b1e3e00bc2b799464f02c2df649ba66aaaa2442c24bff8628e99f866228aabebefe36c8ccc2f5648969817ef95cc3392221a7f7be8633aea98dd212cc06028bf89e01a898e0144d076d081568786a3b", @generic="abcd4fa703bb02dddba7c8a24db9b9ee63fb8e311265b260b90b9f6dd19a7cd4d1f271eaf72a00ea826b855fe3ff", @generic="0061344e08efbdb29eff27c16896f35db5c4dfd3d3988f9a7935766a9478976d3c7ee60360f8cbe99292158fcfc22411f20530b81f419311b570420ddc4a364437d8654a11b79bafe0b2df48060737ef7356", @typed={0x8, 0x89, @pid=r7}, @generic="9002f0c770a087"]}, 0x17c}, {&(0x7f0000000d00)={0x1564, 0x27, 0x200, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x112c, 0x86, [@typed={0x14, 0x91, @str='vmnet0vmnet0\x00'}, @generic="dd42bf7d450dea7750b7d2cfb6c11c7804f27712ca9c8d62c0e13b39f628dce9cbcb01f79645d811acc84795e486581a71fc7b2ec5aefaa8deb1814f84cee9a7bffbda337442a229675f9df04b9557b05ec59ce44b", @generic="0448fe096dad21ab7cca8ea3af74099208df2e6e927e8aa3cc4eaab0d9c0d9880ebd9df56b009750faead00cc6290d9f0c16bc58c0f45ad037186e948c99fa790b1c5759caf4df286e4d912a4835786fffb1783817dca5e6712ae26aa609b62312f2d7ed4607be28624a00870dd69e97b89904c6b0771bf363f97ca5e8bcb93c9ddbb5abebd08156a2be79a116ab4927cf9fa75af35fd7f7debdf884292830b6b5a85e1ffaff36754f2b692a1b5648cbde3594c3e47cf2ec803387cfc0", @generic="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"]}, @typed={0x10, 0x93, @str='/dev/ptmx\x00'}, @nested={0x2c, 0x27, [@generic="714fe29d809880103021168702bbd6e226f0f5176bb3c765b2970364350b6964e88bce1e758abd32"]}, @typed={0x8, 0x87, @fd=r0}, @typed={0x8, 0x16, @fd=r3}, @generic="af5bc47722dbfdd0dff0eb2ccddc3ba9b2a05622576e60a56289594b32d47c7805ca2ac21906b8f5f9355b82fac84359f085593fa87d27c8664d4f9c0fe5373d620fdc7a19918d3f0ce9f2a23fff322cf1ecf7c680e65b937db81bb450947dc4889bb4c6", @nested={0x1a0, 0x38, [@generic="2ed0a74cdfc698660b98807cbba5d97c787e9e11abcf38a837d0f171cb5e882f7dacd987a16cdde1e0c6358319f68b2f25b257842c39087371797f1293b9fb01185a0efadefd09802e3e2a222ff7388004116a5638aa38d9b6fdd0dfa6ba9f99031c5d025e157a9fb317b8d593147ad23da131fae3ba94ffe7a70679f2c0209a47b90fb43b6123b4b8ba24de8c7587f3c2f517bec1e995393f04aa4f94f5b0ba5cea27197e798e14bb918f6657ca6e05c3cf6bbc74956f", @generic="622b344818f8b49d2c6c3587770332bba192cf4c5aeca28f4ba2664aa97e039ccdb63f3b280396701fb0fd29748ae6300137b21ecfc949b7de45514a3db617859bf3e5bfb5e8d2d7637753f58ed101570e558142da3c32d69ded06c370d91a913586eb611591a3386a7b3237abbef44977f57062487222e71ee147ff28cbaaaa97e1d8ebc9b877d1bc148e3374", @generic="36c1cb24f61f6eecd37d9d3983bba4efc340c1b23f15c826e056118f074042548e0ccdf1422418453926c975f2ed8d620909b80031eb8219a021973af5d431105461a56fb9bb49285a06dbaca7eae55ebe5e460513fd28"]}, @generic="c3ea5ae41bdd8543cfa425d2d1e4ede3f061a07e09d2fd432ebd7d060828047726d87efabd2102ece96716e2fdfa0c1e84cfdbd97691d2967ad8743445c35a89e287b91b73b641c7b1a5028db2f13497d2d826456ad71b2d048e5a797be90d019dbfabe319a0dee726ba3c2eee9d01269059ae84cb36b290504986342db72fdc9684ea393f68e0d196d09952f3b315e594c3c5eacadd3c1934709474630fdfe5612d5bbb4862c54b316c688d41138582", @generic="fd3b5120da0249db25f01638b34435a08e54246c7ee59a2eb79367378c264a373e1034c6596b5621bfd1f2cdda93a756d3b4c2e523ff4430569ed99ecd5a9fad664eb023e71aa071d11558223803e42cd6280f80ee557e85170e9258ec5afbc411e2ebbc2bfe6f3d29ee2ee64bf96b005395c2a89057a88fbaa73922e831bad765a2c49bf5ad09015e9b0cae4780a88394939a705f0b01cb36295d821c7377c0f8201e05d5bd62605e77da0bb31160ede1d7fa3d", @generic="941e48e7a582970caeae707ccc132f3fb2f0cb1a0937ae075de1406cc882dcaa3628c3795a95274002eed50c1f200cbed430c21364120e094eab1bcc15ee380339dd2b425530309fe47241e456ab0be7553b65a48ad978750db55449a6a11cdc860efb8e043f76b50fba1f89ab57e0fa2cd2f0"]}, 0x1564}, {&(0x7f00000022c0)={0x14c, 0x35, 0x911, 0x70bd25, 0x25dfdbfd, "", [@generic="bb21be8472ee0b11c0dfbde8d5bf7286a0d0c6eb4f42a095944e3defe96a7b613c066570f88a1d4093566e2755b0c0ec588eb59fcb6190889411d3485bba22278f0976f625406566c44b86f5138af3289268f352f8b6641efef339dd0d4607cd5cdcd6a662d479e334314265bdfc14b1dff6b4d43d6b3175799d464d5fcc5a15076bd07368b57b4621afead7398e0689e0d3731302425a51df7bec1e033c1de05b76a417d4d0c60e4b8721f6ab36eb344fb98237f91a7c927db5c63944f2efdb83fe1320cb7d65471543d866ca1a32", @typed={0x8, 0x7a, @u32=0x6}, @nested={0x64, 0x33, [@typed={0x8, 0x23, @fd=r2}, @typed={0x8, 0x52, @uid=r8}, @typed={0xc, 0x18, @u64=0x758652af}, @typed={0x8, 0x7c, @pid=r9}, @generic, @typed={0x8, 0x6f, @str='\x00'}, @generic="b0b767150574b85c649414c02f20d669359086327aaa2f6b6816bf7da4bdbc991eb936891e746ee372", @typed={0x8, 0x2, @fd=r3}]}]}, 0x14c}], 0x3, &(0x7f0000002480)=[@cred={0x20, 0x1, 0x2, r10, r5, r6}], 0x20, 0x804}, 0x4) listen(0xffffffffffffffff, 0x80) close(0xffffffffffffffff) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000900)={'filter\x00', 0x0, 0x3, 0x50, [], 0x1, &(0x7f0000000400)=[{}], &(0x7f0000000880)=""/80}, &(0x7f0000000480)=0x78) ioctl$int_in(r2, 0x80000040045010, &(0x7f0000000040)=0xfeffffff) ioctl$SNDRV_CTL_IOCTL_PVERSION(r4, 0x80045500, &(0x7f00000004c0)) socket$inet_udplite(0x2, 0x2, 0x88) [ 677.666531][T22549] binder: 22548:22549 unknown command 536871040 11:53:08 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:08 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x300000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 677.708599][T22549] binder: 22548:22549 ioctl c0306201 20000440 returned -22 [ 677.723417][T22558] binder: 22548:22558 BC_INCREFS_DONE u0000000000000000 no match [ 677.735581][T22558] binder: 22548:22558 unknown command 536871040 [ 677.751584][T22558] binder: 22548:22558 ioctl c0306201 20000440 returned -22 11:53:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x4c00}], 0x0, 0x0, &(0x7f0000000780)}) 11:53:08 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:08 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 677.933662][T22569] binder: 22568:22569 unknown command 536871040 11:53:08 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x600000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 678.002766][T22572] binder: 22568:22572 BC_INCREFS_DONE u0000000000000000 no match [ 678.002779][T22569] binder: 22568:22569 ioctl c0306201 20000440 returned -22 [ 678.119472][T22569] binder: BINDER_SET_CONTEXT_MGR already set [ 678.125702][T22572] binder: 22568:22572 unknown command 536871040 [ 678.147497][T22569] binder: 22568:22569 ioctl 40046207 0 returned -16 [ 678.156228][T22572] binder: 22568:22572 ioctl c0306201 20000440 returned -22 11:53:09 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x5, 0x400000) r3 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xc1, 0x80000) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000080)=r3) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:53:09 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x200000000202100, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_to_bridge\x00', &(0x7f0000000980)=ANY=[@ANYBLOB="290000000000000000000000000000000000000000000000000800000000000000000000000000000000615c9374355dd4471b3e7c02d14fe76fcdccc1f8bc208d16db"]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0, 0xffffffffffff0001}, &(0x7f0000000400)=0xffffffffffffffc8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x4, 0x1fc) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002880)=[{&(0x7f0000000680)="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", 0x1aa}], 0x1}, 0x0) mount(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f00000001c0)) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='securityfs\x00', 0x100021, &(0x7f0000000480)) r4 = syz_open_dev$sndpcmc(&(0x7f0000000540)='/dev/snd/pcmC#D#c\x00', 0x3, 0x7ffff) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r4, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000ac0)={r0, r1, 0x3, 0x97, &(0x7f0000000a00)="479aa50a95ce69e52638a668141f54dc22ad6a17b8c1adf4fbae0bc459e5bb68c67b623426f7e241f97e800b6eab5f7b210d7e4fafd334fa8f306fb616745d1d13477d1102b05d95e70cea7dea1f91043d9f8ec737a60caa04f43a6afa6676af616847abac2a200a462f04d43cd780c257f1d531e58d37c03a13a562c0a69cd0b7e8a09030400e8cf6966aa01e5626420adf59f09d5869", 0x4, 0x2, 0x725c, 0x7, 0x5, 0x759ca74c1459d7a2, 0x6, 'syz0\x00'}) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(0xffffffffffffffff) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x6, 0x0, 0x7}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r4, 0x4080aea1, &(0x7f0000000440)=""/40) r7 = getpid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f0000000500)=0xe8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002280)={0x0, r3, 0x0, 0x5, &(0x7f0000000840)='syz0\x00', 0xffffffffffffffff}, 0x30) r10 = fcntl$getown(r3, 0x9) sendmsg$netlink(r4, &(0x7f00000024c0)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x40000}, 0xc, &(0x7f0000002440)=[{&(0x7f0000000b80)={0x17c, 0x29, 0x200, 0x70bd26, 0x25dfdbfe, "", [@typed={0xc, 0x4b, @u64=0x9}, @generic="d59daf82b78c0e54e66f6e896cd35a1eadb7ecd2bd8135f277e34b6c34485cce708bf172320b0460a8080f12949421e5cc5095ddf8a6cf5130cc4f8c41887db0da0677aedc6782f45dba824e504d0e4b34123136249b7253fddb600513c26884df74642a56451043d01d8c6079528d5344bf7cf920098be6b41355ede7692b1e3e00bc2b799464f02c2df649ba66aaaa2442c24bff8628e99f866228aabebefe36c8ccc2f5648969817ef95cc3392221a7f7be8633aea98dd212cc06028bf89e01a898e0144d076d081568786a3b", @generic="abcd4fa703bb02dddba7c8a24db9b9ee63fb8e311265b260b90b9f6dd19a7cd4d1f271eaf72a00ea826b855fe3ff", @generic="0061344e08efbdb29eff27c16896f35db5c4dfd3d3988f9a7935766a9478976d3c7ee60360f8cbe99292158fcfc22411f20530b81f419311b570420ddc4a364437d8654a11b79bafe0b2df48060737ef7356", @typed={0x8, 0x89, @pid=r7}, @generic="9002f0c770a087"]}, 0x17c}, {&(0x7f0000000d00)={0x1564, 0x27, 0x200, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x112c, 0x86, [@typed={0x14, 0x91, @str='vmnet0vmnet0\x00'}, @generic="dd42bf7d450dea7750b7d2cfb6c11c7804f27712ca9c8d62c0e13b39f628dce9cbcb01f79645d811acc84795e486581a71fc7b2ec5aefaa8deb1814f84cee9a7bffbda337442a229675f9df04b9557b05ec59ce44b", @generic="0448fe096dad21ab7cca8ea3af74099208df2e6e927e8aa3cc4eaab0d9c0d9880ebd9df56b009750faead00cc6290d9f0c16bc58c0f45ad037186e948c99fa790b1c5759caf4df286e4d912a4835786fffb1783817dca5e6712ae26aa609b62312f2d7ed4607be28624a00870dd69e97b89904c6b0771bf363f97ca5e8bcb93c9ddbb5abebd08156a2be79a116ab4927cf9fa75af35fd7f7debdf884292830b6b5a85e1ffaff36754f2b692a1b5648cbde3594c3e47cf2ec803387cfc0", @generic="d8ca096022fa80987224fc02f97eb0e34fa84a665835289815456066e8c373ce5b672ff13f09c81b657082a41764345dd0896f404dba96b66ab460649df6c19c852b98bf12f38d1636927345721d984ec306d4f6a86e55ba8b90179610b789710a721bb3b1c02957f2745265b2b79c8050b10a57af596493df2cfc36bf27e2183f7ae856d595c54c4222109995771c66ff6b00565f8047df8aa29b9a1a05e8176e2772e1ce0b395bab51feb60235a42f58885d6b66dd75fba6494d617fd8c0302ace28d488d4890ef993b19be77bcd6facdfe891f52115b82e08088a58b25a29daafe8ae622a4e4a4d390f1ccbdeb1b6ba47d0b825368fc3f4a146c8e567a2ad8847179b54e66dba5d21bb9b80eda1709861cf0d90e4bf466b44e9767fd1c10d012cead037d8650929177a2bdd1c29cbdf6c17fa168322cfe91d39dc10833d562e2be90cbed61073f82a31a671886d125358fa4f802e6b9108ada43de10080582fff40cb1f855821858d88aedbe9c9363a5207ff390adb9b536ea21813ad5f7a32d2008f269801238fba5f717861504a78dc6b34ec2c452311de065b1f163421aefd756e04812cc3a918464a0e2397f0f79d96046058ae06aa5501d776dbbeb2edf67ec96cfe2e70e57755148a8d78cd47e627e9c8e2a5c02767283e35e1f5d98c0338b286d44a8305c03250c0d1215ada52e7ff8a0710c0752fa3b5268202c3a9923517c0e45ff20df428549f83fe5b478d0ec81370dad1b4dac6a4573a293e4c4e0cbade113a6104e5e50022c8f890aca987dd2f0fcf43c7219ca3540dd2de733e8b11f94df872fb52475432594e1b8cc2efcd89b0c391a77ffaf1bd9b0045dc5db81d4901c7deb504b09dbc91e3d0007a669900481e6d67e6f471724eb8249e694446080225400cd612ba7c480a3004a2124e4abd4f6bd7f01efd6839fed675119c7d2779427bb585237979b764f72783f41ddc593bb754c1ae57029895a162125047c58ab0a17afdbab48f125b0f63f84e2d23d0920d9ce2ad143c6ca6b7472f3cfc7f8d2ee7e23701bdb55247f4448d5a9833cdb4d425a15a4d56a9e990814d34b60bc462bb1273e6a5ebcab25a4c07fe9bf436df053c5b55a82c5fb328297061969c9c7ed3656675ad2024aad61e34e001dbf3c969690d703eb27df2d23f9457e9087d5a1c7dd63d688205c48c2644f7b1488910ec13421b2dbcd506d763a45e44b3f76b21b2621b7bdf5e0c99a7ab6a4802084733229f7b306f7d9fe5fceb4a9e7266524784e111d18d9b199790b5635ac92ad20e5e45b2233db99e395cedafd0245a30479508978f86d54c512e70601dab920a4b295ac30479f91094f7684e14a3347bc145dd708a40cbcfcff46a118a52a025030f1d15ce61ee8d8ee1648774c624f322c7fc5426768db61e94b2632829c4b040c5e99320d4e973f6f2b9fb5e1a5f915eed6beb6970ed99e02e1852940ebaca0d11134b5d80a97c9f51cbd06a9a22a6c57d9170e035a52cfa0e50592979425da63b8da4ab8f15fe37da56e666d62677ce299c5e3010d4d7cd252794e2f0183ecf4c208b64ea84c96e1f5c5bb896a77c1ee13b96bbb0ba304d64716c72b48ec91ffb780772b5099c58e8b366485a3d6a4c18089f9ef9670e4b8e84c879ad41a91969218565df607a8dd61cc75da7c29cce61a69ae57c8cd52afc4cbb3981e7ebd8c78ffa542b871b28aee78eaa1e7371c050daf87f965dc9110e5d024f5cc1a2e3a7394fe2d8f8ef6d3838b11a8d77e032da22d792176c1f9130f3b2d2311590cb12e6fabc6074632c2f302f8aa16c4066c6e9620cd839e19b79e7d7d8b85617e61f9cc3ee01058ffcf37e5f171ebe5b450accc8da70dcb8e0979ff9f33b2c3042a72ba6ad4ddb5d742a4b4cd8b7a8293fde3c4b59fdd60a42c535ef1a348afa9d7084e9b4dafa65591b59dda0a653d4504332c6762e9cdf16751df850ee75adb87a37e3c31a64e35abec608090f33612e857126279760dfba8cc8b5423c23a6d35a8847521beb394de0e66dd1f7085d27efa789086ba3eda1d2cdcd0fe6b8afb0107dd356ba836338cf5b906f30ec089e3be20adab23820c3d4193090b366a69360cc0a67fd3542c6fc58fb74b5ae0827c5b90add7ef29080229c937b455f863f778c45154bb5a67c7fdfc4d72c625d26d4a9768092acc6929c904ddb1dacb76ac089eedc06e9cdd804c8fb7a0d34175cc4902603b9d0d583660409b2b744c26a621f9a29c9fe6b9a441f14c0182e4ef83ffb521d3a04f9f1268d74769d68e9ef29715c1f4371cdfcfbc193097ac6e8e7085bed59a273da93726deeec5a7160e5648e904720ab3b30e146879273943a2b4aea171868475ef2aa17f0814b6cd99cbb2a1cb53c9598b911732f8c68b3f2d06fb8b95727f3b95f7575c85de935d8aa477b0b738c34110cfd2e8563b762d690eba7388311ebd1c8aa3bce45fdf90c03164254c0e34e9108773a628acd1db2bf9c006a03ce0b81d14ac5d1a8b65fc872484a1ee93df980669deafa3a3de22de8e51271c2a121e0a3c83a1845be183a24b6cefda207aed575792a3a6b4f8e6c0844b809843acffadb350617573baf17bf951472fffca93e0ebb171f962998769c8d3ab1b196e9909b8ef7f146d5a9fa61de39b7b2929d302921561816e2deceafd98b7e3559240c47e3d2994c5f91ac0883cb49ee5f3170cd12d2840dabb5b66bb12c690023d98bd3d0da39c2bfa3d7e257f19764f4c5bc893ef7f0a82a75acb7d806841a8c46d75dee008e631662506255596d93518d4dd4b852156eb1be861bdc0df23a0f6c4a8729f57e74d9641b50c7ce6a53e7f5458f8fb244dd785e2791753d69ec21c2091ed12c7d9eae74f10d47e35286ee085961b7b796c9b11486b719d1538a8d2a9a53346af9e0f3ec923e65b8682c460559affe59aa4932c7b67506c1a9b0da2871a98faabbedd1f522cdd44e1f07b97c96f734307bcc0644d7dc79a0f1f1f28c2a60aa4f9264f5b0d7ee29d24ffd673c650f7a52ce1ea833cfce0b54b94a5f5930ccb96e3236c29a498f39c768841e26fd100fdf4da78177ed7198aacf03bf34b5d7d21b843b526e20188a4c5632fe8e74cff2e59a52f10e9c17dea90ed268eeb7e317b26d8e101365d5293526c78c5943d31e820a0829ff4a59be42b210072c20bf41a73f70df12a3eaaa6d5412e54b9c2ccdb088f1081490653bdfe7d39a46e8f0a78034904a51fbe3bc91f3a581ba7c1a9200b9e552a14560c5013a7a79a867ced77f1580fe89bece322445e0be9f369881baceb043c97d7de59d3c7a1717ce03ebcc9ea7423ecbcdb75b828cfe6b31e8e4f135890a84b4becd3f52ee123b4de1bd06d9322cceb61f27988a2eea72f3c74aa489d0462398bc009b95f11e48e02e4a93988c37e357869d08f7c1f834ceaaf7f3da81c52fa28d48424ba2541802331726378857993783850ba9cbacfd4270eff1b2add3c80aad533cfeec1b8e2a02c7e42b70fbeb6f7a50965ca16f9817d83930c8506ddfc23e61a76a7fec98a027a6b8cf6a99d608ce250831124178fa3391c5b5ea25967d5516136d78ec701e6d0607734795e0f6e756d344db9956d026e798285e06f609d3ea40ac80ec59176b1b2064d048a2049ab933958c07c77c2021edeec73e85a49bdb245e544c09265f8eff2ea8155e1a454c4ff024705ca75eb630aa16066ad0400b2147a44f088902156190e3fdfb91fca120c641f66c9c059954cf8a46b286cff07b22175985c5283144857cbdd861fd7569c7dbf778f8de87f4dccb54ee595e4746b9d1e969de5d54b2e0ab77e7fc77dc674a051feb10366493f23ecc2e76b12376fd9c58d65eedbf8256a85dabb63480a3396629819ea5559502d4a3cbba7acf0ae0bcfaa065d1476c668beab66efc05ca2c88a6eaa9af06f36050e28747a178f50bf047f64fcd4e1501075845af08a16c466c0760401152a15a655532f7d59064a5acc95039e7d9552638716bcb3208110738d92f2c36ee26288ecf93fcc2dd6c439db82886bec7605dcedae26f4f083037449fe936f41016f137bca5c4562534238b6b584c4edeeac0f468014e8cd2fec7c95ecb231b03ce47e284435c57fedc9a3fe95d3a7485aed4ce140480b9f4355be1b68f1d47e200f5c9463a56479bb1e3def3c57ce4ab269b1f091fbb11bacad2b83d1b51c24f893beb302ca6c9b72e565c406dcccd3c3dc51e0d824d9d49aea5e70e4c9da99249529ccbf667b7cf159458ae09afe838ed2239b8fb515783c6cbd8f0c84a5dc521ed2bbb8c43b63f516d81a1a91dc0d63d7bb7ea1a0accad22c1b8ee8a673ebe01c3d5d063f30244a05962fb316207f57e125551c5ad486bed061545e1297317a1a5941734a92dda7390f4d17a56d3eebe91c264d86122cb0e7f8515b35b18847d4b82645837866275a923b5be563dfc845d8717b38c1a2a6910bce23b7e34e60649c7ea71d539cc7e7eb32275373e3c679e8f8589de168b9468a206657d5c6174761353b89f5cdd538aa7ebddefab4610a90b286180a3978bd6543b9a243214563ca28ada60c732026e21c0c71d6624df6d39e7c12948e97d6f4cc9dd7265210cc80bd193523e196bc5fe6dd474cfee18c610752df3dd2096f18bd0a7e837dd15b87627115a999e3c98b542ce269e10a5cd6513b703201e89578c6cb1df8154c97b48e660cb2e43aabe198f4d7827c114a92180869773a57e0682e399d6b79cf852b6200b407d524ca900b5abb270df7e2d8f4a8631aff706fb37de7a2a5dc64f0f734aac79da17d6ffc77c6580aa2d8584a4c81460d9f3a9e2b083f5cfa9de56e9b3b90f891d7fd015d90d1c22578a0d3fbb32b6a3de4ad4b758e34fac266565f66e22814bbb83ce3121cb8d2445bcbe4350f5c207a78c15972a9021d2ffc1384766b1ecb7a5d7ba1641ac88e9021dd54aa5a3d96732c6f9cbccede3e321356bc1f27d4318272484bc58aa0451f814f6dadc0f524c4674744d7c8e8a1b57d0e4e10d4bcb748e8e0475e4514d8b945d7934c296e322156370f4d5d1939175284c91fd91ba81bb4e74e698fa387f1cbf19e889cb34fe14dce892cd662df70a7113b17517e73d668939d6b58c93820fa5bf320bb27262c4431e2499c900087791cda9e81c8e3c700164879ce0fb3b019a4207f98e557926fdd88fee51e3a33fabf15a5407bc16a4794c0bdde2e6fdc527f1ab3a796657f40a85e65bbb368f3af930a156efdce37e51dbc888d33a229ae4f6275a4684a316ca025447d427a5a8c20841a8a82d486a1d35394ce8e75ece841fbf5f1a3d06e20ee777f97c2bbdcf08669c3516781233b145aded4225221f89d3fa477b5b59a3bc8d27c3be2760b26c8b092d95aeae2a9aff1b385a7d3662677aef0a6ecb6f0c1a6458b17f75809fea9a1bbf9df6ab5517d192b59deefab654958578beba026b38bec1af756c9da1288725b91c1d731780a2e7ffa2dbfde523382426a20bc55efd7ac5a75c74ca60245e355a1c0c0b0100dcd46668f09e181d5e32bda020ae5bf958f1f44ebf7c90ca168bed595983bdd0bbf21e3bc90b64545512dadb9f2fbb2380cfee77b89e9abe7aa7cc45b9e3aa41b4869c066ea66fb827c0ecdc208cdb854c12a603fe97e9e9f3697107bf5ebbedc9cad0ac55d1d32d47ac0abc09063b13ffe6bd42b8903d246dd3796ea35b85b224c184159f8247dd4721ceebba575c08689e913cee4b87847f411dc8c616dd72eeaef250e26d1d71afdbfff09d563b403229ac5a2c7df8"]}, @typed={0x10, 0x93, @str='/dev/ptmx\x00'}, @nested={0x2c, 0x27, [@generic="714fe29d809880103021168702bbd6e226f0f5176bb3c765b2970364350b6964e88bce1e758abd32"]}, @typed={0x8, 0x87, @fd=r0}, @typed={0x8, 0x16, @fd=r3}, @generic="af5bc47722dbfdd0dff0eb2ccddc3ba9b2a05622576e60a56289594b32d47c7805ca2ac21906b8f5f9355b82fac84359f085593fa87d27c8664d4f9c0fe5373d620fdc7a19918d3f0ce9f2a23fff322cf1ecf7c680e65b937db81bb450947dc4889bb4c6", @nested={0x1a0, 0x38, [@generic="2ed0a74cdfc698660b98807cbba5d97c787e9e11abcf38a837d0f171cb5e882f7dacd987a16cdde1e0c6358319f68b2f25b257842c39087371797f1293b9fb01185a0efadefd09802e3e2a222ff7388004116a5638aa38d9b6fdd0dfa6ba9f99031c5d025e157a9fb317b8d593147ad23da131fae3ba94ffe7a70679f2c0209a47b90fb43b6123b4b8ba24de8c7587f3c2f517bec1e995393f04aa4f94f5b0ba5cea27197e798e14bb918f6657ca6e05c3cf6bbc74956f", @generic="622b344818f8b49d2c6c3587770332bba192cf4c5aeca28f4ba2664aa97e039ccdb63f3b280396701fb0fd29748ae6300137b21ecfc949b7de45514a3db617859bf3e5bfb5e8d2d7637753f58ed101570e558142da3c32d69ded06c370d91a913586eb611591a3386a7b3237abbef44977f57062487222e71ee147ff28cbaaaa97e1d8ebc9b877d1bc148e3374", @generic="36c1cb24f61f6eecd37d9d3983bba4efc340c1b23f15c826e056118f074042548e0ccdf1422418453926c975f2ed8d620909b80031eb8219a021973af5d431105461a56fb9bb49285a06dbaca7eae55ebe5e460513fd28"]}, @generic="c3ea5ae41bdd8543cfa425d2d1e4ede3f061a07e09d2fd432ebd7d060828047726d87efabd2102ece96716e2fdfa0c1e84cfdbd97691d2967ad8743445c35a89e287b91b73b641c7b1a5028db2f13497d2d826456ad71b2d048e5a797be90d019dbfabe319a0dee726ba3c2eee9d01269059ae84cb36b290504986342db72fdc9684ea393f68e0d196d09952f3b315e594c3c5eacadd3c1934709474630fdfe5612d5bbb4862c54b316c688d41138582", @generic="fd3b5120da0249db25f01638b34435a08e54246c7ee59a2eb79367378c264a373e1034c6596b5621bfd1f2cdda93a756d3b4c2e523ff4430569ed99ecd5a9fad664eb023e71aa071d11558223803e42cd6280f80ee557e85170e9258ec5afbc411e2ebbc2bfe6f3d29ee2ee64bf96b005395c2a89057a88fbaa73922e831bad765a2c49bf5ad09015e9b0cae4780a88394939a705f0b01cb36295d821c7377c0f8201e05d5bd62605e77da0bb31160ede1d7fa3d", @generic="941e48e7a582970caeae707ccc132f3fb2f0cb1a0937ae075de1406cc882dcaa3628c3795a95274002eed50c1f200cbed430c21364120e094eab1bcc15ee380339dd2b425530309fe47241e456ab0be7553b65a48ad978750db55449a6a11cdc860efb8e043f76b50fba1f89ab57e0fa2cd2f0"]}, 0x1564}, {&(0x7f00000022c0)={0x14c, 0x35, 0x911, 0x70bd25, 0x25dfdbfd, "", [@generic="bb21be8472ee0b11c0dfbde8d5bf7286a0d0c6eb4f42a095944e3defe96a7b613c066570f88a1d4093566e2755b0c0ec588eb59fcb6190889411d3485bba22278f0976f625406566c44b86f5138af3289268f352f8b6641efef339dd0d4607cd5cdcd6a662d479e334314265bdfc14b1dff6b4d43d6b3175799d464d5fcc5a15076bd07368b57b4621afead7398e0689e0d3731302425a51df7bec1e033c1de05b76a417d4d0c60e4b8721f6ab36eb344fb98237f91a7c927db5c63944f2efdb83fe1320cb7d65471543d866ca1a32", @typed={0x8, 0x7a, @u32=0x6}, @nested={0x64, 0x33, [@typed={0x8, 0x23, @fd=r2}, @typed={0x8, 0x52, @uid=r8}, @typed={0xc, 0x18, @u64=0x758652af}, @typed={0x8, 0x7c, @pid=r9}, @generic, @typed={0x8, 0x6f, @str='\x00'}, @generic="b0b767150574b85c649414c02f20d669359086327aaa2f6b6816bf7da4bdbc991eb936891e746ee372", @typed={0x8, 0x2, @fd=r3}]}]}, 0x14c}], 0x3, &(0x7f0000002480)=[@cred={0x20, 0x1, 0x2, r10, r5, r6}], 0x20, 0x804}, 0x4) listen(0xffffffffffffffff, 0x80) close(0xffffffffffffffff) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000900)={'filter\x00', 0x0, 0x3, 0x50, [], 0x1, &(0x7f0000000400)=[{}], &(0x7f0000000880)=""/80}, &(0x7f0000000480)=0x78) ioctl$int_in(r2, 0x80000040045010, &(0x7f0000000040)=0xfeffffff) ioctl$SNDRV_CTL_IOCTL_PVERSION(r4, 0x80045500, &(0x7f00000004c0)) socket$inet_udplite(0x2, 0x2, 0x88) 11:53:09 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x6000}], 0x0, 0x0, &(0x7f0000000780)}) 11:53:09 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x700000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:09 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:09 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x4000000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:09 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 678.579654][T22587] binder: 22585:22587 unknown command 536871040 [ 678.592952][T22587] binder: 22585:22587 ioctl c0306201 20000440 returned -22 [ 678.630464][T22600] binder: 22585:22600 BC_INCREFS_DONE u0000000000000000 no match 11:53:09 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:09 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x5800000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 678.691870][T22600] binder: 22585:22600 unknown command 536871040 [ 678.711025][T22600] binder: 22585:22600 ioctl c0306201 20000440 returned -22 11:53:09 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x6800}], 0x0, 0x0, &(0x7f0000000780)}) [ 678.946015][T22618] binder: 22616:22618 unknown command 536871040 [ 678.984820][T22618] binder: 22616:22618 ioctl c0306201 20000440 returned -22 [ 679.001119][T22618] binder: 22616:22618 BC_INCREFS_DONE u0000000000000000 no match [ 679.025256][T22622] binder: 22616:22622 unknown command 536871040 [ 679.033395][T22622] binder: 22616:22622 ioctl c0306201 20000440 returned -22 11:53:10 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000012000/0x2000)=nil) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000240)={{{@in=@loopback, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000380)=0xe8) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)=0x0) r6 = getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000480)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f00000004c0)={{0x7fff, r2, r3, r4, r5, 0x80, 0x6}, 0x5, 0x800, 0x40, 0x2, r6, r7, 0x4fe}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = dup3(r0, r8, 0x80000) ioctl$UI_BEGIN_FF_UPLOAD(r9, 0xc06855c8, &(0x7f0000000640)={0x3, 0x9, {0x57, 0x20, 0x8, {0x7fffffff, 0x1}, {0x3, 0x3}, @period={0x5d, 0x4a4b, 0x1, 0x6, 0x1e7, {0xfe70, 0x532, 0x3, 0x7}, 0x6, &(0x7f0000000600)=[0xd000000, 0x0, 0xffffffffffffffe0, 0x8, 0x10000, 0x9]}}, {0x53, 0x100, 0x1f, {0x4, 0x2f7410e5}, {0x401, 0x7}, @cond=[{0x0, 0x8000, 0x94, 0x0, 0xae, 0x40}, {0x100, 0xc2a, 0x3, 0xd89, 0x7fffffff}]}}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r8, 0x84, 0x8, &(0x7f0000013e95), 0x4) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x80, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000580), &(0x7f00000005c0)=0xb) 11:53:10 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x200000000202100, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_to_bridge\x00', &(0x7f0000000980)=ANY=[@ANYBLOB="290000000000000000000000000000000000000000000000000800000000000000000000000000000000615c9374355dd4471b3e7c02d14fe76fcdccc1f8bc208d16db"]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0, 0xffffffffffff0001}, &(0x7f0000000400)=0xffffffffffffffc8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x4, 0x1fc) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002880)=[{&(0x7f0000000680)="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", 0x1aa}], 0x1}, 0x0) mount(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f00000001c0)) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='securityfs\x00', 0x100021, &(0x7f0000000480)) r4 = syz_open_dev$sndpcmc(&(0x7f0000000540)='/dev/snd/pcmC#D#c\x00', 0x3, 0x7ffff) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r4, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000ac0)={r0, r1, 0x3, 0x97, &(0x7f0000000a00)="479aa50a95ce69e52638a668141f54dc22ad6a17b8c1adf4fbae0bc459e5bb68c67b623426f7e241f97e800b6eab5f7b210d7e4fafd334fa8f306fb616745d1d13477d1102b05d95e70cea7dea1f91043d9f8ec737a60caa04f43a6afa6676af616847abac2a200a462f04d43cd780c257f1d531e58d37c03a13a562c0a69cd0b7e8a09030400e8cf6966aa01e5626420adf59f09d5869", 0x4, 0x2, 0x725c, 0x7, 0x5, 0x759ca74c1459d7a2, 0x6, 'syz0\x00'}) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(0xffffffffffffffff) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x6, 0x0, 0x7}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r4, 0x4080aea1, &(0x7f0000000440)=""/40) r7 = getpid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f0000000500)=0xe8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002280)={0x0, r3, 0x0, 0x5, &(0x7f0000000840)='syz0\x00', 0xffffffffffffffff}, 0x30) r10 = fcntl$getown(r3, 0x9) sendmsg$netlink(r4, &(0x7f00000024c0)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x40000}, 0xc, &(0x7f0000002440)=[{&(0x7f0000000b80)={0x17c, 0x29, 0x200, 0x70bd26, 0x25dfdbfe, "", [@typed={0xc, 0x4b, @u64=0x9}, @generic="d59daf82b78c0e54e66f6e896cd35a1eadb7ecd2bd8135f277e34b6c34485cce708bf172320b0460a8080f12949421e5cc5095ddf8a6cf5130cc4f8c41887db0da0677aedc6782f45dba824e504d0e4b34123136249b7253fddb600513c26884df74642a56451043d01d8c6079528d5344bf7cf920098be6b41355ede7692b1e3e00bc2b799464f02c2df649ba66aaaa2442c24bff8628e99f866228aabebefe36c8ccc2f5648969817ef95cc3392221a7f7be8633aea98dd212cc06028bf89e01a898e0144d076d081568786a3b", @generic="abcd4fa703bb02dddba7c8a24db9b9ee63fb8e311265b260b90b9f6dd19a7cd4d1f271eaf72a00ea826b855fe3ff", @generic="0061344e08efbdb29eff27c16896f35db5c4dfd3d3988f9a7935766a9478976d3c7ee60360f8cbe99292158fcfc22411f20530b81f419311b570420ddc4a364437d8654a11b79bafe0b2df48060737ef7356", @typed={0x8, 0x89, @pid=r7}, @generic="9002f0c770a087"]}, 0x17c}, {&(0x7f0000000d00)={0x1564, 0x27, 0x200, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x112c, 0x86, [@typed={0x14, 0x91, @str='vmnet0vmnet0\x00'}, @generic="dd42bf7d450dea7750b7d2cfb6c11c7804f27712ca9c8d62c0e13b39f628dce9cbcb01f79645d811acc84795e486581a71fc7b2ec5aefaa8deb1814f84cee9a7bffbda337442a229675f9df04b9557b05ec59ce44b", @generic="0448fe096dad21ab7cca8ea3af74099208df2e6e927e8aa3cc4eaab0d9c0d9880ebd9df56b009750faead00cc6290d9f0c16bc58c0f45ad037186e948c99fa790b1c5759caf4df286e4d912a4835786fffb1783817dca5e6712ae26aa609b62312f2d7ed4607be28624a00870dd69e97b89904c6b0771bf363f97ca5e8bcb93c9ddbb5abebd08156a2be79a116ab4927cf9fa75af35fd7f7debdf884292830b6b5a85e1ffaff36754f2b692a1b5648cbde3594c3e47cf2ec803387cfc0", @generic="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"]}, @typed={0x10, 0x93, @str='/dev/ptmx\x00'}, @nested={0x2c, 0x27, [@generic="714fe29d809880103021168702bbd6e226f0f5176bb3c765b2970364350b6964e88bce1e758abd32"]}, @typed={0x8, 0x87, @fd=r0}, @typed={0x8, 0x16, @fd=r3}, @generic="af5bc47722dbfdd0dff0eb2ccddc3ba9b2a05622576e60a56289594b32d47c7805ca2ac21906b8f5f9355b82fac84359f085593fa87d27c8664d4f9c0fe5373d620fdc7a19918d3f0ce9f2a23fff322cf1ecf7c680e65b937db81bb450947dc4889bb4c6", @nested={0x1a0, 0x38, [@generic="2ed0a74cdfc698660b98807cbba5d97c787e9e11abcf38a837d0f171cb5e882f7dacd987a16cdde1e0c6358319f68b2f25b257842c39087371797f1293b9fb01185a0efadefd09802e3e2a222ff7388004116a5638aa38d9b6fdd0dfa6ba9f99031c5d025e157a9fb317b8d593147ad23da131fae3ba94ffe7a70679f2c0209a47b90fb43b6123b4b8ba24de8c7587f3c2f517bec1e995393f04aa4f94f5b0ba5cea27197e798e14bb918f6657ca6e05c3cf6bbc74956f", @generic="622b344818f8b49d2c6c3587770332bba192cf4c5aeca28f4ba2664aa97e039ccdb63f3b280396701fb0fd29748ae6300137b21ecfc949b7de45514a3db617859bf3e5bfb5e8d2d7637753f58ed101570e558142da3c32d69ded06c370d91a913586eb611591a3386a7b3237abbef44977f57062487222e71ee147ff28cbaaaa97e1d8ebc9b877d1bc148e3374", @generic="36c1cb24f61f6eecd37d9d3983bba4efc340c1b23f15c826e056118f074042548e0ccdf1422418453926c975f2ed8d620909b80031eb8219a021973af5d431105461a56fb9bb49285a06dbaca7eae55ebe5e460513fd28"]}, @generic="c3ea5ae41bdd8543cfa425d2d1e4ede3f061a07e09d2fd432ebd7d060828047726d87efabd2102ece96716e2fdfa0c1e84cfdbd97691d2967ad8743445c35a89e287b91b73b641c7b1a5028db2f13497d2d826456ad71b2d048e5a797be90d019dbfabe319a0dee726ba3c2eee9d01269059ae84cb36b290504986342db72fdc9684ea393f68e0d196d09952f3b315e594c3c5eacadd3c1934709474630fdfe5612d5bbb4862c54b316c688d41138582", @generic="fd3b5120da0249db25f01638b34435a08e54246c7ee59a2eb79367378c264a373e1034c6596b5621bfd1f2cdda93a756d3b4c2e523ff4430569ed99ecd5a9fad664eb023e71aa071d11558223803e42cd6280f80ee557e85170e9258ec5afbc411e2ebbc2bfe6f3d29ee2ee64bf96b005395c2a89057a88fbaa73922e831bad765a2c49bf5ad09015e9b0cae4780a88394939a705f0b01cb36295d821c7377c0f8201e05d5bd62605e77da0bb31160ede1d7fa3d", @generic="941e48e7a582970caeae707ccc132f3fb2f0cb1a0937ae075de1406cc882dcaa3628c3795a95274002eed50c1f200cbed430c21364120e094eab1bcc15ee380339dd2b425530309fe47241e456ab0be7553b65a48ad978750db55449a6a11cdc860efb8e043f76b50fba1f89ab57e0fa2cd2f0"]}, 0x1564}, {&(0x7f00000022c0)={0x14c, 0x35, 0x911, 0x70bd25, 0x25dfdbfd, "", [@generic="bb21be8472ee0b11c0dfbde8d5bf7286a0d0c6eb4f42a095944e3defe96a7b613c066570f88a1d4093566e2755b0c0ec588eb59fcb6190889411d3485bba22278f0976f625406566c44b86f5138af3289268f352f8b6641efef339dd0d4607cd5cdcd6a662d479e334314265bdfc14b1dff6b4d43d6b3175799d464d5fcc5a15076bd07368b57b4621afead7398e0689e0d3731302425a51df7bec1e033c1de05b76a417d4d0c60e4b8721f6ab36eb344fb98237f91a7c927db5c63944f2efdb83fe1320cb7d65471543d866ca1a32", @typed={0x8, 0x7a, @u32=0x6}, @nested={0x64, 0x33, [@typed={0x8, 0x23, @fd=r2}, @typed={0x8, 0x52, @uid=r8}, @typed={0xc, 0x18, @u64=0x758652af}, @typed={0x8, 0x7c, @pid=r9}, @generic, @typed={0x8, 0x6f, @str='\x00'}, @generic="b0b767150574b85c649414c02f20d669359086327aaa2f6b6816bf7da4bdbc991eb936891e746ee372", @typed={0x8, 0x2, @fd=r3}]}]}, 0x14c}], 0x3, &(0x7f0000002480)=[@cred={0x20, 0x1, 0x2, r10, r5, r6}], 0x20, 0x804}, 0x4) listen(0xffffffffffffffff, 0x80) close(0xffffffffffffffff) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000900)={'filter\x00', 0x0, 0x3, 0x50, [], 0x1, &(0x7f0000000400)=[{}], &(0x7f0000000880)=""/80}, &(0x7f0000000480)=0x78) ioctl$int_in(r2, 0x80000040045010, &(0x7f0000000040)=0xfeffffff) ioctl$SNDRV_CTL_IOCTL_PVERSION(r4, 0x80045500, &(0x7f00000004c0)) socket$inet_udplite(0x2, 0x2, 0x88) 11:53:10 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:10 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:10 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x8dffffff00000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x6c00}], 0x0, 0x0, &(0x7f0000000780)}) 11:53:10 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0xf5ffffff00000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 679.513426][T22636] binder: 22635:22636 unknown command 536871040 [ 679.529474][T22636] binder: 22635:22636 ioctl c0306201 20000440 returned -22 11:53:10 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) pidfd_send_signal(r2, 0xa, &(0x7f0000000040)={0x3e, 0xff, 0x7}, 0x0) 11:53:10 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:10 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 679.558424][T22638] binder: 22635:22638 BC_INCREFS_DONE u0000000000000000 no match [ 679.657410][T22644] binder: 22635:22644 unknown command 536871040 11:53:10 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:10 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0xffffffff00000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 679.757320][T22644] binder: 22635:22644 ioctl c0306201 20000440 returned -22 11:53:10 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:10 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x200000000202100, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_to_bridge\x00', &(0x7f0000000980)=ANY=[@ANYBLOB="290000000000000000000000000000000000000000000000000800000000000000000000000000000000615c9374355dd4471b3e7c02d14fe76fcdccc1f8bc208d16db"]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0, 0xffffffffffff0001}, &(0x7f0000000400)=0xffffffffffffffc8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x4, 0x1fc) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002880)=[{&(0x7f0000000680)="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", 0x1aa}], 0x1}, 0x0) mount(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f00000001c0)) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='securityfs\x00', 0x100021, &(0x7f0000000480)) r4 = syz_open_dev$sndpcmc(&(0x7f0000000540)='/dev/snd/pcmC#D#c\x00', 0x3, 0x7ffff) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r4, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000ac0)={r0, r1, 0x3, 0x97, &(0x7f0000000a00)="479aa50a95ce69e52638a668141f54dc22ad6a17b8c1adf4fbae0bc459e5bb68c67b623426f7e241f97e800b6eab5f7b210d7e4fafd334fa8f306fb616745d1d13477d1102b05d95e70cea7dea1f91043d9f8ec737a60caa04f43a6afa6676af616847abac2a200a462f04d43cd780c257f1d531e58d37c03a13a562c0a69cd0b7e8a09030400e8cf6966aa01e5626420adf59f09d5869", 0x4, 0x2, 0x725c, 0x7, 0x5, 0x759ca74c1459d7a2, 0x6, 'syz0\x00'}) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(0xffffffffffffffff) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x6, 0x0, 0x7}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r4, 0x4080aea1, &(0x7f0000000440)=""/40) r7 = getpid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f0000000500)=0xe8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002280)={0x0, r3, 0x0, 0x5, &(0x7f0000000840)='syz0\x00', 0xffffffffffffffff}, 0x30) r10 = fcntl$getown(r3, 0x9) sendmsg$netlink(r4, &(0x7f00000024c0)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x40000}, 0xc, &(0x7f0000002440)=[{&(0x7f0000000b80)={0x17c, 0x29, 0x200, 0x70bd26, 0x25dfdbfe, "", [@typed={0xc, 0x4b, @u64=0x9}, @generic="d59daf82b78c0e54e66f6e896cd35a1eadb7ecd2bd8135f277e34b6c34485cce708bf172320b0460a8080f12949421e5cc5095ddf8a6cf5130cc4f8c41887db0da0677aedc6782f45dba824e504d0e4b34123136249b7253fddb600513c26884df74642a56451043d01d8c6079528d5344bf7cf920098be6b41355ede7692b1e3e00bc2b799464f02c2df649ba66aaaa2442c24bff8628e99f866228aabebefe36c8ccc2f5648969817ef95cc3392221a7f7be8633aea98dd212cc06028bf89e01a898e0144d076d081568786a3b", @generic="abcd4fa703bb02dddba7c8a24db9b9ee63fb8e311265b260b90b9f6dd19a7cd4d1f271eaf72a00ea826b855fe3ff", @generic="0061344e08efbdb29eff27c16896f35db5c4dfd3d3988f9a7935766a9478976d3c7ee60360f8cbe99292158fcfc22411f20530b81f419311b570420ddc4a364437d8654a11b79bafe0b2df48060737ef7356", @typed={0x8, 0x89, @pid=r7}, @generic="9002f0c770a087"]}, 0x17c}, {&(0x7f0000000d00)={0x1564, 0x27, 0x200, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x112c, 0x86, [@typed={0x14, 0x91, @str='vmnet0vmnet0\x00'}, @generic="dd42bf7d450dea7750b7d2cfb6c11c7804f27712ca9c8d62c0e13b39f628dce9cbcb01f79645d811acc84795e486581a71fc7b2ec5aefaa8deb1814f84cee9a7bffbda337442a229675f9df04b9557b05ec59ce44b", @generic="0448fe096dad21ab7cca8ea3af74099208df2e6e927e8aa3cc4eaab0d9c0d9880ebd9df56b009750faead00cc6290d9f0c16bc58c0f45ad037186e948c99fa790b1c5759caf4df286e4d912a4835786fffb1783817dca5e6712ae26aa609b62312f2d7ed4607be28624a00870dd69e97b89904c6b0771bf363f97ca5e8bcb93c9ddbb5abebd08156a2be79a116ab4927cf9fa75af35fd7f7debdf884292830b6b5a85e1ffaff36754f2b692a1b5648cbde3594c3e47cf2ec803387cfc0", @generic="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"]}, @typed={0x10, 0x93, @str='/dev/ptmx\x00'}, @nested={0x2c, 0x27, [@generic="714fe29d809880103021168702bbd6e226f0f5176bb3c765b2970364350b6964e88bce1e758abd32"]}, @typed={0x8, 0x87, @fd=r0}, @typed={0x8, 0x16, @fd=r3}, @generic="af5bc47722dbfdd0dff0eb2ccddc3ba9b2a05622576e60a56289594b32d47c7805ca2ac21906b8f5f9355b82fac84359f085593fa87d27c8664d4f9c0fe5373d620fdc7a19918d3f0ce9f2a23fff322cf1ecf7c680e65b937db81bb450947dc4889bb4c6", @nested={0x1a0, 0x38, [@generic="2ed0a74cdfc698660b98807cbba5d97c787e9e11abcf38a837d0f171cb5e882f7dacd987a16cdde1e0c6358319f68b2f25b257842c39087371797f1293b9fb01185a0efadefd09802e3e2a222ff7388004116a5638aa38d9b6fdd0dfa6ba9f99031c5d025e157a9fb317b8d593147ad23da131fae3ba94ffe7a70679f2c0209a47b90fb43b6123b4b8ba24de8c7587f3c2f517bec1e995393f04aa4f94f5b0ba5cea27197e798e14bb918f6657ca6e05c3cf6bbc74956f", @generic="622b344818f8b49d2c6c3587770332bba192cf4c5aeca28f4ba2664aa97e039ccdb63f3b280396701fb0fd29748ae6300137b21ecfc949b7de45514a3db617859bf3e5bfb5e8d2d7637753f58ed101570e558142da3c32d69ded06c370d91a913586eb611591a3386a7b3237abbef44977f57062487222e71ee147ff28cbaaaa97e1d8ebc9b877d1bc148e3374", @generic="36c1cb24f61f6eecd37d9d3983bba4efc340c1b23f15c826e056118f074042548e0ccdf1422418453926c975f2ed8d620909b80031eb8219a021973af5d431105461a56fb9bb49285a06dbaca7eae55ebe5e460513fd28"]}, @generic="c3ea5ae41bdd8543cfa425d2d1e4ede3f061a07e09d2fd432ebd7d060828047726d87efabd2102ece96716e2fdfa0c1e84cfdbd97691d2967ad8743445c35a89e287b91b73b641c7b1a5028db2f13497d2d826456ad71b2d048e5a797be90d019dbfabe319a0dee726ba3c2eee9d01269059ae84cb36b290504986342db72fdc9684ea393f68e0d196d09952f3b315e594c3c5eacadd3c1934709474630fdfe5612d5bbb4862c54b316c688d41138582", @generic="fd3b5120da0249db25f01638b34435a08e54246c7ee59a2eb79367378c264a373e1034c6596b5621bfd1f2cdda93a756d3b4c2e523ff4430569ed99ecd5a9fad664eb023e71aa071d11558223803e42cd6280f80ee557e85170e9258ec5afbc411e2ebbc2bfe6f3d29ee2ee64bf96b005395c2a89057a88fbaa73922e831bad765a2c49bf5ad09015e9b0cae4780a88394939a705f0b01cb36295d821c7377c0f8201e05d5bd62605e77da0bb31160ede1d7fa3d", @generic="941e48e7a582970caeae707ccc132f3fb2f0cb1a0937ae075de1406cc882dcaa3628c3795a95274002eed50c1f200cbed430c21364120e094eab1bcc15ee380339dd2b425530309fe47241e456ab0be7553b65a48ad978750db55449a6a11cdc860efb8e043f76b50fba1f89ab57e0fa2cd2f0"]}, 0x1564}, {&(0x7f00000022c0)={0x14c, 0x35, 0x911, 0x70bd25, 0x25dfdbfd, "", [@generic="bb21be8472ee0b11c0dfbde8d5bf7286a0d0c6eb4f42a095944e3defe96a7b613c066570f88a1d4093566e2755b0c0ec588eb59fcb6190889411d3485bba22278f0976f625406566c44b86f5138af3289268f352f8b6641efef339dd0d4607cd5cdcd6a662d479e334314265bdfc14b1dff6b4d43d6b3175799d464d5fcc5a15076bd07368b57b4621afead7398e0689e0d3731302425a51df7bec1e033c1de05b76a417d4d0c60e4b8721f6ab36eb344fb98237f91a7c927db5c63944f2efdb83fe1320cb7d65471543d866ca1a32", @typed={0x8, 0x7a, @u32=0x6}, @nested={0x64, 0x33, [@typed={0x8, 0x23, @fd=r2}, @typed={0x8, 0x52, @uid=r8}, @typed={0xc, 0x18, @u64=0x758652af}, @typed={0x8, 0x7c, @pid=r9}, @generic, @typed={0x8, 0x6f, @str='\x00'}, @generic="b0b767150574b85c649414c02f20d669359086327aaa2f6b6816bf7da4bdbc991eb936891e746ee372", @typed={0x8, 0x2, @fd=r3}]}]}, 0x14c}], 0x3, &(0x7f0000002480)=[@cred={0x20, 0x1, 0x2, r10, r5, r6}], 0x20, 0x804}, 0x4) listen(0xffffffffffffffff, 0x80) close(0xffffffffffffffff) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000900)={'filter\x00', 0x0, 0x3, 0x50, [], 0x1, &(0x7f0000000400)=[{}], &(0x7f0000000880)=""/80}, &(0x7f0000000480)=0x78) ioctl$int_in(r2, 0x80000040045010, &(0x7f0000000040)=0xfeffffff) ioctl$SNDRV_CTL_IOCTL_PVERSION(r4, 0x80045500, &(0x7f00000004c0)) socket$inet_udplite(0x2, 0x2, 0x88) 11:53:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x7400}], 0x0, 0x0, &(0x7f0000000780)}) 11:53:10 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0xffffffffffffffff]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:10 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 679.997627][T22667] binder: 22666:22667 unknown command 536871040 11:53:10 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 680.056954][T22667] binder: 22666:22667 ioctl c0306201 20000440 returned -22 [ 680.107575][T22671] binder: 22666:22671 BC_INCREFS_DONE u0000000000000000 no match 11:53:10 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 680.169376][T22671] binder: 22666:22671 unknown command 536871040 [ 680.196685][T22671] binder: 22666:22671 ioctl c0306201 20000440 returned -22 11:53:11 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = dup2(r0, r0) getsockname$netlink(r1, &(0x7f00000000c0), &(0x7f0000000100)=0xc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x200, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x6daebcf) getsockopt$inet_dccp_int(r3, 0x21, 0xf, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$void(r0, 0x5450) 11:53:11 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x2]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x7a00}], 0x0, 0x0, &(0x7f0000000780)}) 11:53:11 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:11 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xf59, 0x0) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000140)=[0xee01]) write$P9_RGETATTR(r1, &(0x7f0000000180)={0xa0, 0x19, 0x2, {0x1000, {0x22, 0x4, 0x7ff}, 0x1, r2, r3, 0x3, 0x0, 0x9e, 0xcc5, 0x6, 0x5, 0xfffffffffffffffa, 0x100000001, 0x5, 0xfffffffffffffff7, 0x4, 0x4, 0x7, 0x79e, 0x3ff}}, 0xa0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4004af07, &(0x7f0000000000)) socket$inet6_dccp(0xa, 0x6, 0x0) 11:53:11 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 680.561211][T22689] binder: 22688:22689 unknown command 536871040 [ 680.583767][T22689] binder: 22688:22689 ioctl c0306201 20000440 returned -22 [ 680.593428][T22689] binder: 22688:22689 BC_INCREFS_DONE u0000000000000000 no match 11:53:11 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:11 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:11 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x3]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 680.616668][T22700] binder: 22688:22700 unknown command 536871040 [ 680.630087][T22700] binder: 22688:22700 ioctl c0306201 20000440 returned -22 11:53:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x1000000}], 0x0, 0x0, &(0x7f0000000780)}) 11:53:11 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/l2cap\x00') exit(0x0) sendfile(r0, r0, 0x0, 0x3fc) 11:53:11 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 680.764655][T22714] binder: 22713:22714 unknown command 536871040 [ 680.794826][T22714] binder: 22713:22714 ioctl c0306201 20000440 returned -22 [ 680.824289][T22718] binder: 22713:22718 BC_INCREFS_DONE u0000000000000000 no match [ 680.853894][T22718] binder: 22713:22718 unknown command 536871040 [ 680.868614][T22718] binder: 22713:22718 ioctl c0306201 20000440 returned -22 11:53:12 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x6]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:12 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x2000000}], 0x0, 0x0, &(0x7f0000000780)}) 11:53:12 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = accept(0xffffffffffffff9c, &(0x7f0000000080)=@can, &(0x7f0000000100)=0x80) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140045}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x908, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2200, 0x0) write$evdev(r3, &(0x7f0000000040)=[{{}, 0x0, 0x7f, 0x7f}], 0x18) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:53:12 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:12 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 681.453710][T22735] binder: 22727:22735 unknown command 536871040 [ 681.474276][T22735] binder: 22727:22735 ioctl c0306201 20000440 returned -22 11:53:12 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x7]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:12 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 681.506337][T22739] binder: 22727:22739 BC_INCREFS_DONE u0000000000000000 no match [ 681.560156][T22739] binder: 22727:22739 unknown command 536871040 11:53:12 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8d]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:12 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 681.601049][T22739] binder: 22727:22739 ioctl c0306201 20000440 returned -22 11:53:12 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={0xffffffffffffffff, 0x7, 0x1, 0x5, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x20806, 0x80) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000100)={0x709b, 0x9f5}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) keyctl$session_to_parent(0x12) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000640)={0x0, 0x70, 0x0, 0x6, 0x5, 0x7, 0x0, 0xd3d, 0x0, 0x0, 0x8, 0x0, 0x8dd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa9, 0x7ff, 0x3, 0x6, 0x1f, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x2000, 0x0, 0x0, 0x0, 0x9, 0x7, 0x7}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="160000001a0081aee4050c00000f00fe078bc36f1600", 0x16}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe88}, 0x0) recvmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r2, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) 11:53:12 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x58]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x3000000}], 0x0, 0x0, &(0x7f0000000780)}) [ 681.783079][T22764] binder: 22763:22764 unknown command 536871040 [ 681.790297][T22764] binder: 22763:22764 ioctl c0306201 20000440 returned -22 [ 681.814319][T22764] binder: 22763:22764 BC_INCREFS_DONE u0000000000000000 no match [ 681.825145][T22771] binder: 22763:22771 unknown command 536871040 11:53:12 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:12 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 681.833164][T22771] binder: 22763:22771 ioctl c0306201 20000440 returned -22 11:53:13 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340), 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x40, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x8}, &(0x7f0000000100)=0x8) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:53:13 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x300]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x4000000}], 0x0, 0x0, &(0x7f0000000780)}) 11:53:13 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:13 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:13 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={0xffffffffffffffff, 0x7, 0x1, 0x5, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x20806, 0x80) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000100)={0x709b, 0x9f5}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) keyctl$session_to_parent(0x12) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000640)={0x0, 0x70, 0x0, 0x6, 0x5, 0x7, 0x0, 0xd3d, 0x0, 0x0, 0x8, 0x0, 0x8dd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa9, 0x7ff, 0x3, 0x6, 0x1f, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x2000, 0x0, 0x0, 0x0, 0x9, 0x7, 0x7}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="160000001a0081aee4050c00000f00fe078bc36f1600", 0x16}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe88}, 0x0) recvmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r2, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) 11:53:13 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x600]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 682.366742][T22883] binder: 22881:22883 unknown command 536871040 [ 682.394003][T22883] binder: 22881:22883 ioctl c0306201 20000440 returned -22 11:53:13 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:13 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 682.433681][T22891] binder: 22881:22891 unknown command 536871040 [ 682.463737][T22891] binder: 22881:22891 ioctl c0306201 20000440 returned -22 11:53:13 executing program 1: sendmsg$alg(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18}], 0x18}, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000100)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f0000000080)=0xe8) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000040)='./file0\x00', r2, r3) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x400000000000174, 0x0) 11:53:13 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x700]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x5000000}], 0x0, 0x0, &(0x7f0000000780)}) [ 682.654623][T22910] binder: 22907:22910 unknown command 536871040 [ 682.728731][T22910] binder: 22907:22910 ioctl c0306201 20000440 returned -22 [ 682.770431][T22914] binder: 22907:22914 unknown command 536871040 [ 682.776904][T22914] binder: 22907:22914 ioctl c0306201 20000440 returned -22 11:53:13 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0xffffffffffffffff}) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0xffffffffffff24ae) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95)=0x2a52c30d, 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x10000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000040)={{0x6, 0x1}, 'port0\x00', 0x11, 0x400, 0xa3a8, 0x0, 0x6, 0x6, 0x3, 0x0, 0x6}) 11:53:13 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:13 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:13 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x4000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x6000000}], 0x0, 0x0, &(0x7f0000000780)}) 11:53:13 executing program 1: r0 = syz_open_dev$evdev(0x0, 0x2, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r2, 0xc038563b, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x41) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x40800, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r3, 0x400443c8, &(0x7f0000000040)={r4, 0x2}) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000000)=0x0) capset(&(0x7f0000000100)={0x19980330, r7}, &(0x7f00000004c0)={0x1800000000000, 0x4, 0x2, 0x8, 0x0, 0xd0c}) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f00000001c0)=""/214) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f00000002c0)={0x40, {{0xa, 0x4e24, 0x1ff, @mcast2}}, {{0xa, 0x4e24, 0x14810f1d, @rand_addr="d7ac2c5af824548f2320fba68d7640aa", 0x1}}}, 0x108) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000400)=0x8000, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r6) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) write$FUSE_STATFS(r3, &(0x7f0000000440)={0x60, 0x0, 0x8, {{0x7, 0xbb, 0x1, 0x200, 0x53e, 0xffffffff00000001, 0x1, 0x8}}}, 0x60) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000500)={0x10000, 0x1f, 0x7, 0xffffffff, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f00001da000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f00000005c0)="0f18e60f01b808002e0f01cf0f239f66b9800000c00f326635008000000f30baa000edba2100ec66b9020a000066b87a8b000666ba000000000f30f30f092e0fc7a90000", 0x44}], 0x1, 0x0, &(0x7f0000000680), 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000140)={0x0, 0x44b4, 0x6, 0x0, 0x4, 0x3}) syz_open_dev$media(0x0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x40084503, &(0x7f0000ffcffc)) 11:53:13 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:14 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x5800]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 683.252353][T22926] binder: 22919:22926 unknown command 536871040 11:53:14 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:14 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) mmap(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2000000, 0x400000032, r0, 0x0) r1 = userfaultfd(0x0) socketpair(0x10, 0x0, 0x1, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x0, 0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) r5 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x21b0d071, 0x4000) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f00000000c0)=r5) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) [ 683.322137][T22926] binder: 22919:22926 ioctl c0306201 20000440 returned -22 [ 683.340265][T22934] binder_thread_write: 2 callbacks suppressed [ 683.340280][T22934] binder: 22919:22934 BC_INCREFS_DONE u0000000000000000 no match 11:53:14 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x1000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:14 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:14 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:14 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000006c0)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x2000) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f0000000100)=0x3) r3 = add_key(&(0x7f0000000300)='logon\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f0000000700)="6d9f34ed4ba62af8b4225b13f43c80cb1a84acd7403378ad7d9092da97f6865dad2b61133a78b34fd13e683ed102dd718ca8f01abe6752a741d9f5a6e7fc5c402d0acdd5c652f2a1f26ec47de5afe832637423689be5daa8213bd955b596c6b8702bb7d1c2c77a30f90f12f097786dcf3edd79b74377321d00e8a3f415fc97d410f00753763feca481a951647c3ec19454259471fd2a7382b1df952c71580938c7403ccef0d248476803554243ad07fcf868b29d03aa60e90252a847021272ae3e75134305647c4cc3a51eee6405013c492c16c7851486f251915f01b9c474030b26adfac96398d17fadcef20cc9b2866d876c2489627be227a56c50395003c552ef803d5753", 0x106, 0xfffffffffffffffa) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000200)={0x5, 0x10, 0xfa00, {&(0x7f0000000b80), r4, 0x2}}, 0x18) keyctl$revoke(0x3, r3) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000004c0)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f00000005c0)=0xe8) request_key(&(0x7f00000003c0)='big_key\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000440)='selfkeyring[\\}wlan0vmnet1mime_typevmnet0\\\x00', r3) stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r3, r5, r6) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f0000000240)={0x0, @motion_det}) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x420000, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x1ae0, 0x410000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000080)=0x43e) [ 683.570109][T22934] binder: 22919:22934 unknown command 536871040 11:53:14 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa, 0x20}) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) [ 683.612419][T22934] binder: 22919:22934 ioctl c0306201 20000440 returned -22 11:53:14 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x7000000}], 0x0, 0x0, &(0x7f0000000780)}) [ 683.913059][T23069] binder: 23068:23069 unknown command 536871040 [ 683.937194][T23069] binder: 23068:23069 ioctl c0306201 20000440 returned -22 [ 683.948231][T23069] binder: 23068:23069 BC_INCREFS_DONE u0000000000000000 no match 11:53:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f123c123f319bd070") r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000180)={0x2200000008001008}) ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f0000000080)={0x20, "f58b7f958ea3b55f6cd3e1e69332df846b8508b5cfc26251a052b04df70d234e", 0x2, 0x4, 0x2, 0x7ff, 0x13, 0x2, 0x3, 0x2}) 11:53:14 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:14 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x2000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:14 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 683.959662][T23070] binder: 23068:23070 unknown command 536871040 [ 683.979101][T23070] binder: 23068:23070 ioctl c0306201 20000440 returned -22 11:53:14 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:14 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x3000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:14 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x10000000}], 0x0, 0x0, &(0x7f0000000780)}) 11:53:14 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x6000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 684.172767][T23170] binder: 23163:23170 unknown command 536871040 [ 684.203772][T23170] binder: 23163:23170 ioctl c0306201 20000440 returned -22 [ 684.243797][T23194] binder: 23163:23194 BC_INCREFS_DONE u0000000000000000 no match [ 684.290797][T23170] binder: 23163:23170 unknown command 536871040 [ 684.301716][T23170] binder: 23163:23170 ioctl c0306201 20000440 returned -22 11:53:15 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) r2 = syz_open_dev$dmmidi(&(0x7f00000003c0)='/dev/dmmidi#\x00', 0x10001, 0x204100) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000000), 0x4) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000400)) 11:53:15 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:15 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c000000000000b8000000008b00400000a05024eb04934781e33126babad324366f918805fca8c2663cbef87e36724d7da93df180c8b994a72371616280e68487825c2d9c536d1889c8b8616ed7939f71d5fe3da7b4489273072842faa19fff01b0a9e4061d03679714966c92199155211369e63176daf45bac22e53b8283a223a4e96f9b90b7852b333ca0000000d54e104ff61675df68fd445fe4f8992cfdd36eb24b000000fdd5c91c2f36ac66933804226e0930ab08"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x2b7, &(0x7f000000cf3d)=""/195}, 0x48) 11:53:15 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5800000000000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:15 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x7000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x20000000}], 0x0, 0x0, &(0x7f0000000780)}) [ 684.580947][T23207] binder: 23202:23207 unknown command 536871040 [ 684.601686][T23207] binder: 23202:23207 ioctl c0306201 20000440 returned -22 11:53:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000004500)='/dev/autofs\x00', 0x400000, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000004540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000004580)=0x14) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000045c0)={@dev={0xfe, 0x80, [], 0xf}, @mcast2, @loopback, 0x62, 0xf708, 0x7fff, 0x400, 0x5fa, 0x40000010, r3}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f00000000c0)=[@ptr={0x70742a85, 0x1, 0x0}], &(0x7f0000000200)=[0x0]}}}], 0x0, 0x0, 0x0}) 11:53:15 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x40000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:15 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8d]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:15 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 684.623680][T23207] binder: 23202:23207 BC_INCREFS_DONE u0000000000000000 no match [ 684.688578][T23207] binder: BINDER_SET_CONTEXT_MGR already set [ 684.721520][T23220] binder: 23202:23220 unknown command 536871040 11:53:15 executing program 1: r0 = socket$inet6(0xa, 0x8000a, 0x36) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=',', 0x1}], 0x1}, 0xc100) write$binfmt_aout(r0, &(0x7f00000010c0)=ANY=[@ANYBLOB="00000000ffffff6500"/26], 0x1a) [ 684.736314][T23207] binder: 23202:23207 ioctl 40046207 0 returned -16 [ 684.753321][T23220] binder: 23202:23220 ioctl c0306201 20000440 returned -22 11:53:15 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff00000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:16 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vfio/vfio\x00', 0x80001, 0x0) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000240)={0xffffffff8beac7e5, 0x0, 0xffff}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) readv(r1, &(0x7f0000000340), 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='autogroup\x00') getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x8b, "56cba49224b285c59b8d9fd0967a8476f68ff59328814a7f2f3ebeead692179ae940ac96e18b3e2ba7d941bd8542441206e8846570a71076d380d30fb1fe06f4c6fc2fca87dc325c7d23c23c0dd0abbb22ed5e19be62f65d867b53c95540b2346dbcdb5bbaa2ed1fa98355c471826b73450f95477f50a85c068bec246f288a75388a742c3a61b47774abf7"}, &(0x7f0000000140)=0x93) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000180)={r3, 0x7f, 0x20, 0xe292}, &(0x7f00000001c0)=0x10) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x100, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:53:16 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:16 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x58000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x3f000000}], 0x0, 0x0, &(0x7f0000000780)}) 11:53:16 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:16 executing program 1: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer\x00', 0x2000, 0x0) openat(r1, &(0x7f00000004c0)='./file0\x00', 0x20000, 0x22) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) arch_prctl$ARCH_GET_FS(0x1003, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x8001, 0x6000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x2000, 0xa2, &(0x7f0000ffd000/0x2000)=nil) syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x900080c0}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00032abd7000fcdbdf2502000000080002000a0000000800040002000000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x44004) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000500)={0x1000, 0x201, 0x4bb, 0x9, 0x0}, &(0x7f0000000540)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000580)={r4, 0xa7d}, 0x8) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) fstat(r3, &(0x7f0000000240)) clone(0x400000000004000, &(0x7f0000000380), 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffe) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socket$rxrpc(0x21, 0x2, 0xa) name_to_handle_at(r2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000380)={0xb7, 0xffff, "73a705c8e269f6bb484edd757c41563581405029a22cc426a60b94e21d1d9bfb3c0a329bd85b461fb3bf163eb421bff432866257b81fd4f318bd4b5e776b419faf19797ab5098d1f5c5404bbaa1c3f17a604d0a125842cfda0032e2b48a717ff20f361dc9bbe0ee12a39f8b47d3cb75421b1bec2bb2ef7a8cc666734fb30977354d635b42f781f56afe11de76a4a85d2d347d501f15fe6f4c60a5c1c467e0343759a3665e079a2d6f2bfcceebb833f"}, &(0x7f0000000440), 0x1000) socket(0x2, 0x1, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x101000, 0x0) [ 685.526206][T23351] binder: 23343:23351 unknown command 536871040 [ 685.562333][T23351] binder: 23343:23351 ioctl c0306201 20000440 returned -22 11:53:16 executing program 3: lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.impure\x00', &(0x7f0000000080)=""/113, 0x71) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000012000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1}) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:53:16 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x8dffffff]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:16 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 685.648364][T23358] binder: 23343:23358 BC_INCREFS_DONE u0000000000000000 no match 11:53:16 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:16 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:16 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0xf5ffffff]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 685.846442][T23358] binder: 23343:23358 unknown command 536871040 11:53:16 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec7) ioctl$KVM_NMI(r2, 0xae9a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x2000) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, 0x0) [ 685.969157][T23358] binder: 23343:23358 ioctl c0306201 20000440 returned -22 11:53:16 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [], 0x2}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:16 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x48000000}], 0x0, 0x0, &(0x7f0000000780)}) 11:53:16 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0xffffff8d]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 686.192875][T23443] binder: 23442:23443 unknown command 536871040 [ 686.239400][T23443] binder: 23442:23443 ioctl c0306201 20000440 returned -22 [ 686.267320][T23443] binder: 23442:23443 BC_INCREFS_DONE u0000000000000000 no match [ 686.338201][T23496] binder: 23442:23496 unknown command 536871040 [ 686.388889][T23496] binder: 23442:23496 ioctl c0306201 20000440 returned -22 11:53:17 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x420000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:53:17 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [], 0x3}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:17 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0xfffffff5]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00'}) keyctl$set_reqkey_keyring(0xe, 0x7) ftruncate(0xffffffffffffffff, 0x1000000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, 0x0) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f00000001c0)) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f00000037c0)=0xf10001, 0xfffffdef) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x232040, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000540)=@get={0x1, 0x0, 0x2}) r2 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100)='/dev/capi20\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x7003, 0x0) poll(&(0x7f0000000500)=[{0xffffffffffffffff, 0x200}, {}, {0xffffffffffffffff, 0x2020}, {r2, 0x29}], 0x4, 0x7fffffff) 11:53:17 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x4c000000}], 0x0, 0x0, &(0x7f0000000780)}) 11:53:17 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 686.682322][T23509] binder: 23508:23509 unknown command 536871040 [ 686.716820][T23509] binder: 23508:23509 ioctl c0306201 20000440 returned -22 11:53:17 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [], 0x4}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:17 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x100000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 686.777001][T23548] binder: 23508:23548 BC_INCREFS_DONE u0000000000000000 no match 11:53:17 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000001600)=0x108000001b, 0x4) r1 = socket$netlink(0x10, 0x3, 0x10000000004) write(r1, &(0x7f0000000100)="2700000014000707030e0000120f0a0010000100f5fe001259f338c57410e8a99f47ff00000007", 0x27) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) 11:53:17 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x200000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 686.861524][T23509] binder: 23508:23509 unknown command 536871040 [ 686.888912][T23509] binder: 23508:23509 ioctl c0306201 20000440 returned -22 11:53:18 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x200005, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:53:18 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [], 0x6}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:18 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x60000000}], 0x0, 0x0, &(0x7f0000000780)}) 11:53:18 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x300000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x7fffd, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0xa7f, 0x4263c0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000000180), 0x0, 0x4000) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x401, 0x52, 0x0, 0x7}) r4 = socket(0x1e, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000003c0)='/dev/dri/card#\x00', 0x60, 0x200000) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) ioctl$DRM_IOCTL_VERSION(r5, 0xc0406400, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000280)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x3}}, 0x20) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040), 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e23, @multicast1}}, [0x5, 0x4, 0x81, 0x5, 0x0, 0x3, 0x1, 0xffff, 0x1, 0x8, 0x7fff, 0x2, 0x2, 0xd14b, 0x7ff]}, &(0x7f0000000500)=0x100) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$P9_RSTAT(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="5100009b0e020000004a00020006000000000300000000000000000000dfff001000fdffffffff000000000000009000000007005449504a7632000f002f6465762f7365717502006365720001002c00002b8832ccbc1892ca1af792e0e875"], 0x51) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0xf6) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x0, 0x0) ioctl$BLKIOMIN(r6, 0x1278, &(0x7f0000000200)) getrandom(&(0x7f00000005c0)=""/198, 0xc6, 0x3) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) msgctl$IPC_STAT(0x0, 0x2, &(0x7f00000006c0)=""/108) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000000)=0x3) 11:53:18 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:18 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x600000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 687.578406][T23741] binder: 23739:23741 unknown command 536871040 11:53:18 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [], 0x7}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 687.627996][T23741] binder: 23739:23741 ioctl c0306201 20000440 returned -22 [ 687.658639][T23753] binder: 23739:23753 BC_INCREFS_DONE u0000000000000000 no match [ 687.673951][T23753] binder: 23739:23753 unknown command 536871040 11:53:18 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff00000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 687.708623][T23753] binder: 23739:23753 ioctl c0306201 20000440 returned -22 [ 687.737337][T23741] binder: 23739:23741 BC_INCREFS_DONE u0000000000000000 no match 11:53:18 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x700000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x68000000}], 0x0, 0x0, &(0x7f0000000780)}) [ 687.913244][T23873] binder: 23872:23873 unknown command 536871040 [ 687.927402][T23873] binder: 23872:23873 ioctl c0306201 20000440 returned -22 [ 687.955665][T23873] binder: 23872:23873 BC_INCREFS_DONE u0000000000000000 no match [ 687.986254][T23877] binder: 23872:23877 unknown command 536871040 [ 687.999911][T23877] binder: 23872:23877 ioctl c0306201 20000440 returned -22 11:53:19 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @dev}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000100)=0xe8) ioprio_get$uid(0x3, r1) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:53:19 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [], 0x8}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:19 executing program 1: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r1, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000340)={0x5, 0x7, 0x2000}, 0x4) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x8, 0x6, [0x3, 0x1, 0x9, 0x6, 0x1, 0x13]}, &(0x7f0000000180)=0x14) sendto$inet(r2, &(0x7f0000000240)="945d3ad7944aab14402cb64633fdf7f7849ea30a6b84ff100029b62b7ed34daf5b52685cc9a9ed4172daaad1cb1d447461bae64e0eae08555ab241ea89a7f74ea366ffa67c993f59bbd322742c3ac0652ec2e4e4573b8706256c2f2297443d615e5edf4c472227df412877b7a6b225365654b818ce8e113251330895e807ef62e8205f5741cdc8b2b8bf0dc15ce99c209143c36f811a44b50c55fba93ee3e24a4a80a804ee93dd9659b15b86c9571605b3bf5e2bcde2b15c975bab8043a6f1650b", 0xc1, 0x4, 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000001c0)={r3, 0x101}, &(0x7f0000000200)=0x8) 11:53:19 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:19 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x4000000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x6c000000}], 0x0, 0x0, &(0x7f0000000780)}) 11:53:19 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [], 0xf}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 688.508724][T23891] binder: 23889:23891 unknown command 536871040 [ 688.515033][T23891] binder: 23889:23891 ioctl c0306201 20000440 returned -22 11:53:19 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:19 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x5800000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:19 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x8000, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000007c0)={0x1, 0xffffffff, 0x3, {0x3, @sdr={0x39555659, 0x3f}}}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$TCGETX(0xffffffffffffffff, 0x5432, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000380)={0x20, {{0x2, 0x4e22, @multicast1}}, 0x0, 0x7, [{{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e20, @empty}}, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e22, @local}}, {{0x2, 0x4e20, @local}}, {{0x2, 0x4e23, @broadcast}}]}, 0x410) socketpair(0x4, 0xf, 0xd7bd, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000240)=[@in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @rand_addr=0x3}, @in6={0xa, 0x4e21, 0x8, @local, 0x5}, @in6={0xa, 0x4e23, 0xdea5, @local, 0x4}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0x10}, 0x2}], 0xb4) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x88800, 0x0) [ 688.555378][T23896] binder: 23889:23896 BC_INCREFS_DONE u0000000000000000 no match 11:53:19 executing program 1: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r1, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000340)={0x5, 0x7, 0x2000}, 0x4) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x8, 0x6, [0x3, 0x1, 0x9, 0x6, 0x1, 0x13]}, &(0x7f0000000180)=0x14) sendto$inet(r2, &(0x7f0000000240)="945d3ad7944aab14402cb64633fdf7f7849ea30a6b84ff100029b62b7ed34daf5b52685cc9a9ed4172daaad1cb1d447461bae64e0eae08555ab241ea89a7f74ea366ffa67c993f59bbd322742c3ac0652ec2e4e4573b8706256c2f2297443d615e5edf4c472227df412877b7a6b225365654b818ce8e113251330895e807ef62e8205f5741cdc8b2b8bf0dc15ce99c209143c36f811a44b50c55fba93ee3e24a4a80a804ee93dd9659b15b86c9571605b3bf5e2bcde2b15c975bab8043a6f1650b", 0xc1, 0x4, 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000001c0)={r3, 0x101}, &(0x7f0000000200)=0x8) 11:53:19 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [], 0x30b}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 688.677199][T23896] binder: 23889:23896 unknown command 536871040 11:53:19 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:19 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x8dffffff00000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 688.726676][T23896] binder: 23889:23896 ioctl c0306201 20000440 returned -22 11:53:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000002c0)='(\xcf\x11\x16\xc0\x83\xceC\xcc-\xcff\xbb!\xca\xcf\xd9v\xd0\xe7\xb4h8\xc9\xfb#\x16)\xf0\xc3\n\x86\xf1~\xe9\xabHe+\x9c]8}2\xc34h\x13\x15R\ax\x9e\x15b\xa2\x94T\x01!\x11\xb1\xa9\x9f<\xf8e\xf7\xfd3\xb3\xa2\x95\xfa\xf1\x13\xfe\x9f\xf3\xa0\x87@f\xa29?\x8bl\x15\x15\xed\xc8\x8cj\xa96\x19:\x1b\xab\x16\xab\xce\x1b\xbf\x14\xc5\x83[\x8d\xf6\xbf\x81\xe1m\x83\xfb\xac6RI\x0e[-\xff\x00$\xdc\xe1\xe6\xe3\xfb0\xc9\xe2\x0f\xe6\x97o\x7fl1\x8d\xb4m\xeb\x0eP\xdc)\xb0\x99P\xd4\xd3u7W\x12\x00\x86\x95\r$\xf9E\x00\x00\x00\x00\x00\x00\x00\x00n\xa6m>|\xfa\xd4V7\xb2\x18\x86\xcd\xd9X\x88\xa0\x81/\xd0|\x18\x16C\xbb\xbfN\xff\xf0\xde\x11\xa8i\xb6<_\x9c\x88Il;\xeb\x12\xcc\xc7\xc4\xcd\xe5\xeb\xd6\xaa5\x96M\x1b\x11j\xfe\xf2\xd28\xa4\xf258\x9f\xab\xcd\xcf]9G\xe2\x04k\xa54fQ\x907\xd6\xf2qb\xbe\x00\x00\x00\x00\x00\x00\x00\b\xc2vpB\x90\xa53\xc9\xdff\x19G\x17f}\xfe\xb0\xd2\x89\x0e9*\xe5q\xd5\xa9\xc0T\x85\xf0\xb0\x86\\\x8f\xa7|\xfa\v]\x89\xb9oJ\xd6\x85\xf4\x15\xb5\xa6\xd7\xb3\xc6\x95 \xd0\xd7\xf9X\xbe\xb1\xdf\xb9\xd9b\x8ay\xd4\xc2\xb9\x1fs\"o\xa7W\x1c\xc4\xc2k\xc8\xc0,${?\x84\xbb\xb1i\ab\xe8\x00e\xacZH^\xe8\x91\xae\v*j\x90\x1dA\'\xf3\x8e\x84\xaa\xf92,\x8e\x0e\'\x86\xe3\xbe\x9f\x83]\xa2w&\x87\xf84\x9eM\x87\x1d\x00'/415) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f00000000c0)={0x2, 0x1, 0x6, 'queue0\x00', 0x40}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) readv(r2, &(0x7f0000000340), 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000040), 0x4) setrlimit(0xe, &(0x7f00000001c0)={0x1f, 0xd23}) ioctl$int_out(r2, 0x5462, &(0x7f0000000080)) r4 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x40) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x401) ioctl$int_in(r3, 0x5421, &(0x7f0000000180)=0x200000000000008) ioctl$VIDIOC_S_FBUF(r4, 0x4030560b, &(0x7f0000000480)={0xe2, 0x21, &(0x7f0000000200)="555cd501b1807f28c745aebc7b5379913f01eb675b617b44a9c93eea8cdcaa9e8a892379a2f3ead85d7de93566ae5ec5e746da0c165910dd7adf4f04e148c8d871036a0aa0c5acfd765481344b685da4019729139a41060e04e24f68f8ddc1995dbdd9f8933b9935228987704cc99c51c9834fe86ac7d8d88f89577b003e9181904199fce9fe07e7905a9bb93db3db81f009e87e6e9f26e2437c2723b9bbf3c21aee711208647a22c01618491e30af8875", {0x9, 0x400, 0x50323234, 0x6, 0xff, 0x4, 0x2, 0x1}}) 11:53:19 executing program 1: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r1, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000340)={0x5, 0x7, 0x2000}, 0x4) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x8, 0x6, [0x3, 0x1, 0x9, 0x6, 0x1, 0x13]}, &(0x7f0000000180)=0x14) sendto$inet(r2, &(0x7f0000000240)="945d3ad7944aab14402cb64633fdf7f7849ea30a6b84ff100029b62b7ed34daf5b52685cc9a9ed4172daaad1cb1d447461bae64e0eae08555ab241ea89a7f74ea366ffa67c993f59bbd322742c3ac0652ec2e4e4573b8706256c2f2297443d615e5edf4c472227df412877b7a6b225365654b818ce8e113251330895e807ef62e8205f5741cdc8b2b8bf0dc15ce99c209143c36f811a44b50c55fba93ee3e24a4a80a804ee93dd9659b15b86c9571605b3bf5e2bcde2b15c975bab8043a6f1650b", 0xc1, 0x4, 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000001c0)={r3, 0x101}, &(0x7f0000000200)=0x8) 11:53:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x74000000}], 0x0, 0x0, &(0x7f0000000780)}) 11:53:19 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0xf5ffffff00000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:19 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:19 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2={0xff, 0x2, [], 0xf000}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 688.935958][T23930] binder: 23929:23930 unknown command 536871040 [ 688.986975][T23930] binder: 23929:23930 ioctl c0306201 20000440 returned -22 11:53:19 executing program 1: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r1, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000340)={0x5, 0x7, 0x2000}, 0x4) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x8, 0x6, [0x3, 0x1, 0x9, 0x6, 0x1, 0x13]}, &(0x7f0000000180)=0x14) sendto$inet(r2, &(0x7f0000000240)="945d3ad7944aab14402cb64633fdf7f7849ea30a6b84ff100029b62b7ed34daf5b52685cc9a9ed4172daaad1cb1d447461bae64e0eae08555ab241ea89a7f74ea366ffa67c993f59bbd322742c3ac0652ec2e4e4573b8706256c2f2297443d615e5edf4c472227df412877b7a6b225365654b818ce8e113251330895e807ef62e8205f5741cdc8b2b8bf0dc15ce99c209143c36f811a44b50c55fba93ee3e24a4a80a804ee93dd9659b15b86c9571605b3bf5e2bcde2b15c975bab8043a6f1650b", 0xc1, 0x4, 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000001c0)={r3, 0x101}, &(0x7f0000000200)=0x8) 11:53:19 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3ff, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) r1 = userfaultfd(0x2) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:53:19 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0xffffffff00000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 689.029433][T23936] binder: 23929:23936 BC_INCREFS_DONE u0000000000000000 no match 11:53:19 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:19 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x3, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 689.124218][T23950] binder: 23929:23950 unknown command 536871040 [ 689.137219][T23950] binder: 23929:23950 ioctl c0306201 20000440 returned -22 11:53:19 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0xffffffffffffffff]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x7a000000}], 0x0, 0x0, &(0x7f0000000780)}) 11:53:20 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) userfaultfd(0x80000) 11:53:20 executing program 1: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r1, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000340)={0x5, 0x7, 0x2000}, 0x4) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x8, 0x6, [0x3, 0x1, 0x9, 0x6, 0x1, 0x13]}, &(0x7f0000000180)=0x14) sendto$inet(r2, &(0x7f0000000240)="945d3ad7944aab14402cb64633fdf7f7849ea30a6b84ff100029b62b7ed34daf5b52685cc9a9ed4172daaad1cb1d447461bae64e0eae08555ab241ea89a7f74ea366ffa67c993f59bbd322742c3ac0652ec2e4e4573b8706256c2f2297443d615e5edf4c472227df412877b7a6b225365654b818ce8e113251330895e807ef62e8205f5741cdc8b2b8bf0dc15ce99c209143c36f811a44b50c55fba93ee3e24a4a80a804ee93dd9659b15b86c9571605b3bf5e2bcde2b15c975bab8043a6f1650b", 0xc1, 0x4, 0x0, 0x0) 11:53:20 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:20 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 689.311315][T24066] binder: 24065:24066 unknown command 536871040 [ 689.327414][T24066] binder: 24065:24066 ioctl c0306201 20000440 returned -22 [ 689.351316][T24066] binder: 24065:24066 BC_INCREFS_DONE u0000000000000000 no match 11:53:20 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x2]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:20 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x5, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:20 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 689.466373][T24077] binder: 24065:24077 unknown command 536871040 [ 689.491009][T24077] binder: 24065:24077 ioctl c0306201 20000440 returned -22 11:53:20 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x3]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0xfdfdffff}], 0x0, 0x0, &(0x7f0000000780)}) 11:53:20 executing program 1: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r1, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000340)={0x5, 0x7, 0x2000}, 0x4) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x8, 0x6, [0x3, 0x1, 0x9, 0x6, 0x1, 0x13]}, &(0x7f0000000180)=0x14) 11:53:20 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:20 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x6, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 689.645118][T24095] binder: 24093:24095 unknown command 536871040 [ 689.696936][T24095] binder: 24093:24095 ioctl c0306201 20000440 returned -22 [ 689.697433][T24103] binder: 24093:24103 BC_INCREFS_DONE u0000000000000000 no match [ 689.774874][T24103] binder: BINDER_SET_CONTEXT_MGR already set [ 689.774903][T24109] binder: 24093:24109 unknown command 536871040 [ 689.814892][T24103] binder: 24093:24103 ioctl 40046207 0 returned -16 [ 689.824986][T24109] binder: 24093:24109 ioctl c0306201 20000440 returned -22 11:53:20 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x8d83eb5}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x401}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000240)={r2, 0x8, 0x2, 0x4, 0xd35, 0xfffffffffffffffc, 0xffffffffffff0001, 0x74df, {r3, @in={{0x2, 0x4e22, @rand_addr=0xc2e}}, 0x2, 0x0, 0x2, 0x401, 0x80}}, &(0x7f0000000100)=0xb0) 11:53:20 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:20 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x6]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:20 executing program 1: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r1, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000340)={0x5, 0x7, 0x2000}, 0x4) 11:53:20 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x7, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0xfffffdfd}], 0x0, 0x0, &(0x7f0000000780)}) [ 690.213525][T24121] binder: 24115:24121 unknown command 536871040 11:53:21 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:21 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xb, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:21 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x7]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 690.265247][T24121] binder: 24115:24121 ioctl c0306201 20000440 returned -22 [ 690.265593][T24127] binder: 24115:24127 BC_INCREFS_DONE u0000000000000000 no match 11:53:21 executing program 1: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r1, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 11:53:21 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000380)={0x2f, 0x3, 0x0, {0x1, 0xe, 0x0, 'trustedselinux'}}, 0x2f) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000003000), 0xb7) read$FUSE(r0, &(0x7f0000002000), 0x46d) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) lsetxattr$security_smack_transmute(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000280)={0x60, 0x0, 0x4, {{0x14000000000, 0x5, 0x3, 0x6, 0x101, 0x1, 0x10001, 0x80000001}}}, 0x60) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x100, 0x40) r3 = getpgrp(0x0) sched_setparam(r3, &(0x7f00000003c0)=0x2) inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0xa2f3f59e941d178d) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:53:21 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 690.401135][T24127] binder: BINDER_SET_CONTEXT_MGR already set [ 690.410007][T24140] binder: 24115:24140 unknown command 536871040 [ 690.416322][T24140] binder: 24115:24140 ioctl c0306201 20000440 returned -22 11:53:21 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x10, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:21 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x58]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 690.458467][T24127] binder: 24115:24127 ioctl 40046207 0 returned -16 11:53:21 executing program 1: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r1, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 11:53:21 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:21 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x300]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x100000000000000}], 0x0, 0x0, &(0x7f0000000780)}) 11:53:21 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x2, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:21 executing program 1: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r1, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:21 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:21 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x600]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 690.752932][T24172] binder: 24171:24172 unknown command 536871040 [ 690.786399][T24172] binder: 24171:24172 ioctl c0306201 20000440 returned -22 [ 690.822278][T24180] binder: 24171:24180 BC_INCREFS_DONE u0000000000000000 no match [ 690.899399][T24180] binder: 24171:24180 unknown command 536871040 [ 690.905721][T24180] binder: 24171:24180 ioctl c0306201 20000440 returned -22 11:53:22 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000240)={0x38, 0x6fb0}) sysfs$1(0x1, &(0x7f00000000c0)='/dev/vcsa#\x00') r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x70, 0x400) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_timeval(r2, 0x1, 0x0, &(0x7f0000000080)={r3, r4/1000+30000}, 0x10) r5 = shmget$private(0x0, 0x3000, 0x78000400, &(0x7f0000013000/0x3000)=nil) shmctl$IPC_INFO(r5, 0x3, &(0x7f0000000380)=""/4096) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:53:22 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x3, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:22 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:22 executing program 1: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:22 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x700]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x200000000000000}], 0x0, 0x0, &(0x7f0000000780)}) 11:53:22 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:22 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x4, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 691.340968][T24194] binder: 24193:24194 unknown command 536871040 [ 691.357441][T24194] binder: 24193:24194 ioctl c0306201 20000440 returned -22 [ 691.414579][T24205] binder: 24193:24205 BC_INCREFS_DONE u0000000000000000 no match 11:53:22 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:22 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95)=0x8, 0xffffff2f) 11:53:22 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x6, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:22 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x4000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:22 executing program 1: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) [ 691.506945][T24194] binder: BINDER_SET_CONTEXT_MGR already set [ 691.557349][T24205] binder: 24193:24205 unknown command 536871040 [ 691.567846][T24194] binder: 24193:24194 ioctl 40046207 0 returned -16 11:53:22 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 691.616585][T24205] binder: 24193:24205 ioctl c0306201 20000440 returned -22 11:53:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x300000000000000}], 0x0, 0x0, &(0x7f0000000780)}) 11:53:22 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x7, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:22 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x5800]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:22 executing program 1: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:22 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x58, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:22 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 691.784744][T24239] binder: 24236:24239 unknown command 536871040 [ 691.816898][T24239] binder: 24236:24239 ioctl c0306201 20000440 returned -22 11:53:22 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x1000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 691.854156][T24239] binder: 24236:24239 BC_INCREFS_DONE u0000000000000000 no match [ 691.912392][T24253] binder: 24236:24253 unknown command 536871040 [ 691.967320][T24253] binder: 24236:24253 ioctl c0306201 20000440 returned -22 11:53:23 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000018c0)='/dev/usbmon#\x00', 0x8001, 0x10000) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000001900)={0x2, 0xffff}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_netdev_private(r2, 0x89f3, &(0x7f0000000000)="21f7c21e2698e9f886515b8997e3ec2d430bd42e52bcbb79fab05080ddc9b74528d86a7294caa0989500ae5c26aa9daaf425a7752df79787b2874194ca7354724ada7fddcadee4d4427f79bcecfab0ee627a55c5356e999142576feae607d84057b901d1b83b9b5df6c96d3921a3ff7b7a6de88e56c8c61e86d7e72066dce4465384f64a4023b20c01f174ac4ce1b6c81a607acb75c3cea3517e26b3e9a306657f94e24d76dfe70d88ba26740ed746b1cc8ab855b49b142eec55af775301a1e55a189b991f59c4a3f67d817ede0896") fcntl$getownex(r2, 0x10, &(0x7f0000000100)={0x0, 0x0}) process_vm_readv(r3, &(0x7f0000001680)=[{&(0x7f0000000240)=""/122, 0x7a}, {&(0x7f00000002c0)=""/45, 0x2d}, {&(0x7f0000000380)=""/175, 0xaf}, {&(0x7f0000000300)=""/38, 0x26}, {&(0x7f0000000440)=""/216, 0xd8}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/232, 0xe8}, {&(0x7f0000001640)=""/46, 0x2e}, {&(0x7f0000002040)=""/4096, 0x1000}], 0x9, &(0x7f0000001780)=[{&(0x7f0000001740)=""/47, 0x2f}], 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000001940)='/dev/snd/midiC#D#\x00', 0x2, 0x40200) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000017c0)='/dev/dlm-monitor\x00', 0x80, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000001840)={0x0, 0x70, 0xff, 0x3, 0x1, 0x7, 0x0, 0x2538, 0x43, 0x8, 0x7, 0x100, 0xffffffffffffffb1, 0x5, 0x0, 0x1000, 0x5, 0xfa99, 0x4, 0x7, 0x0, 0xd72, 0xfff, 0x2, 0x5, 0x7, 0x5, 0x4, 0x9, 0x10000, 0xfffffffffffffe01, 0x3f, 0x3f, 0x101, 0x4, 0x6, 0x1, 0x3, 0x0, 0x1000, 0x4, @perf_bp={&(0x7f0000001800), 0x8}, 0x0, 0x1, 0x7, 0x0, 0x7, 0x1ff, 0xffffffffffffff96}) 11:53:23 executing program 1: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r1, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:23 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x60, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x400000000000000}], 0x0, 0x0, &(0x7f0000000780)}) 11:53:23 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:23 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x2000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:23 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x3000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:23 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:23 executing program 1: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) [ 692.399242][T24273] binder: 24272:24273 unknown command 536871040 [ 692.433877][T24273] binder: 24272:24273 ioctl c0306201 20000440 returned -22 11:53:23 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x300, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:23 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) [ 692.511416][T24282] binder: 24272:24282 BC_INCREFS_DONE u0000000000000000 no match 11:53:23 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x6000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x500000000000000}], 0x0, 0x0, &(0x7f0000000780)}) 11:53:23 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 692.596001][T24282] binder: 24272:24282 unknown command 536871040 [ 692.602672][T24282] binder: 24272:24282 ioctl c0306201 20000440 returned -22 11:53:23 executing program 1: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:23 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x600, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 692.723233][T24300] binder: 24299:24300 unknown command 536871040 [ 692.754367][T24300] binder: 24299:24300 ioctl c0306201 20000440 returned -22 11:53:23 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x7000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:23 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 692.776203][T24309] binder: 24299:24309 BC_INCREFS_DONE u0000000000000000 no match [ 692.795881][T24309] binder: 24299:24309 unknown command 536871040 11:53:23 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x700, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:23 executing program 1: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) [ 692.820991][T24309] binder: 24299:24309 ioctl c0306201 20000440 returned -22 11:53:23 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:23 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x3f00, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:24 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x2}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x3, 0x841) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x3}) r4 = fcntl$getown(r2, 0x9) fcntl$lock(r2, 0x7, &(0x7f0000000240)={0x2, 0x3, 0xbad, 0x0, r4}) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000000c0)={r3, 0x80000, r5}) 11:53:24 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x40000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x600000000000000}], 0x0, 0x0, &(0x7f0000000780)}) 11:53:24 executing program 1: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:24 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x4000, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:24 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:24 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8d]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 693.469436][T24336] binder: 24335:24336 unknown command 536871040 [ 693.488068][T24336] binder: 24335:24336 ioctl c0306201 20000440 returned -22 11:53:24 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x58000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:24 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x5800, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 693.526804][T24348] binder: 24335:24348 unknown command 536871040 11:53:24 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x2) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) connect$l2tp(r0, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @local}, 0x0, 0x0, 0x0, 0x4}}, 0x2e) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f00000000c0)={'team_slave_0\x00', {0x2, 0x4e23, @local}}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$P9_RXATTRCREATE(r0, &(0x7f00000002c0)={0xfffffffffffffe8f, 0x21, 0x100000001}, 0x7) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000080)={0x29, @local, 0x4e21, 0x3, 'fo\x00', 0x21, 0xb9, 0x27}, 0x2c) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:53:24 executing program 1: socket$nl_route(0x10, 0x3, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:24 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 693.601568][T24348] binder: 24335:24348 ioctl c0306201 20000440 returned -22 11:53:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x700000000000000}], 0x0, 0x0, &(0x7f0000000780)}) 11:53:24 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x8dffffff]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:24 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x6000, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:24 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 693.790876][T24415] binder: 24413:24415 unknown command 536871040 [ 693.831023][T24415] binder: 24413:24415 ioctl c0306201 20000440 returned -22 [ 693.870100][T24479] binder_thread_write: 1 callbacks suppressed 11:53:24 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x1000000, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:24 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0xf5ffffff]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 693.870116][T24479] binder: 24413:24479 BC_INCREFS_DONE u0000000000000000 no match 11:53:24 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:24 executing program 1: socket$nl_route(0x10, 0x3, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) [ 693.953827][T24479] binder: 24413:24479 unknown command 536871040 [ 693.986672][T24479] binder: 24413:24479 ioctl c0306201 20000440 returned -22 11:53:24 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0xffffff8d]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:25 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xa0) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000040)={0xa, 0x1ff, 0x5a58f431}) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:53:25 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x1000000000000000}], 0x0, 0x0, &(0x7f0000000780)}) 11:53:25 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x2000000, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:25 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:25 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0xfffffff5]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:25 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x3000000, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 694.529643][T24504] binder: 24503:24504 unknown command 536871040 [ 694.535945][T24504] binder: 24503:24504 ioctl c0306201 20000440 returned -22 11:53:25 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:25 executing program 1: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) [ 694.594325][T24514] binder: 24503:24514 BC_INCREFS_DONE u0000000000000000 no match 11:53:25 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x100000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:25 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x4000000, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 694.668778][T24504] binder: BINDER_SET_CONTEXT_MGR already set [ 694.677632][T24514] binder: 24503:24514 unknown command 536871040 [ 694.700523][T24514] binder: 24503:24514 ioctl c0306201 20000440 returned -22 [ 694.705485][T24504] binder: 24503:24504 ioctl 40046207 0 returned -16 11:53:25 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:26 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7fffffff, 0x400) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:53:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x2000000000000000}], 0x0, 0x0, &(0x7f0000000780)}) 11:53:26 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x200000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:26 executing program 1: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:26 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x6000000, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:26 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 695.401812][T24545] binder: 24544:24545 unknown command 536871040 [ 695.426524][T24545] binder: 24544:24545 ioctl c0306201 20000440 returned -22 11:53:26 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x300000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:26 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x7000000, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:26 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 695.450512][T24552] binder: 24544:24552 BC_INCREFS_DONE u0000000000000000 no match 11:53:26 executing program 1: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) [ 695.494475][T24552] binder: 24544:24552 unknown command 536871040 11:53:26 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x3f000000, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:26 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x600000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 695.542540][T24552] binder: 24544:24552 ioctl c0306201 20000440 returned -22 11:53:26 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f00000000c0)=0x5) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:53:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x3f00000000000000}], 0x0, 0x0, &(0x7f0000000780)}) 11:53:26 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:26 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:26 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x40000000, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:26 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x700000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:27 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x58000000, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:27 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff00000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:27 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x4000000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:27 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) [ 696.280587][T24588] binder: 24586:24588 unknown command 536871040 [ 696.294874][T24588] binder: 24586:24588 ioctl c0306201 20000440 returned -22 [ 696.314320][T24588] binder: 24586:24588 BC_INCREFS_DONE u0000000000000000 no match [ 696.394008][T24601] binder: 24586:24601 unknown command 536871040 11:53:27 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:27 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x60000000, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 696.438315][T24601] binder: 24586:24601 ioctl c0306201 20000440 returned -22 11:53:27 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000012000/0x4000)=nil, 0x4000, 0x3000006, 0x7a9b5d776e68deb7, r0, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:53:27 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x5800000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:27 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x4800000000000000}], 0x0, 0x0, &(0x7f0000000780)}) 11:53:27 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x8dffffff, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:27 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:27 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:27 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x8dffffff00000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:27 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0xf5ffffff, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 697.148948][T24627] binder: 24625:24627 unknown command 536871040 [ 697.178989][T24627] binder: 24625:24627 ioctl c0306201 20000440 returned -22 [ 697.205897][T24627] binder: 24625:24627 BC_INCREFS_DONE u0000000000000000 no match 11:53:28 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) [ 697.288796][T24741] binder: 24625:24741 unknown command 536871040 [ 697.304092][T24741] binder: 24625:24741 ioctl c0306201 20000440 returned -22 11:53:28 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:28 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0xf5ffffff00000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:28 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0x20000221}], 0x1) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x8000, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x20000, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000040)=0x4, 0x33b) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000080)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:53:28 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0xffffff8d, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x4c00000000000000}], 0x0, 0x0, &(0x7f0000000780)}) 11:53:28 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0xffffffff00000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:28 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:28 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:28 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:28 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 697.978053][T24865] binder: 24856:24865 unknown command 536871040 [ 698.014499][T24865] binder: 24856:24865 ioctl c0306201 20000440 returned -22 11:53:28 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x10, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:28 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:28 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0xfffffff5, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 698.073039][T24865] binder: 24856:24865 BC_INCREFS_DONE u0000000000000000 no match 11:53:28 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:28 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x2]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:28 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x0, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) [ 698.198071][T24865] binder: BINDER_SET_CONTEXT_MGR already set [ 698.214353][T24885] binder: 24856:24885 unknown command 536871040 [ 698.307417][T24865] binder: 24856:24865 ioctl 40046207 0 returned -16 [ 698.327646][T24885] binder: 24856:24885 ioctl c0306201 20000440 returned -22 11:53:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x6000000000000000}], 0x0, 0x0, &(0x7f0000000780)}) 11:53:29 executing program 3: r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) setpgid(r0, 0x0) 11:53:29 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x100000000000000, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:29 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:29 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x3]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:29 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x0, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:29 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x200000000000000, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:29 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x6]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:29 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 698.495253][T24913] binder: 24911:24913 unknown command 536871040 [ 698.520633][T24913] binder: 24911:24913 ioctl c0306201 20000440 returned -22 11:53:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") move_pages(0x0, 0xf, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil], &(0x7f00000000c0)=[0x1], &(0x7f0000000180), 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x13) 11:53:29 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x0, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) [ 698.568891][T24913] binder: 24911:24913 BC_INCREFS_DONE u0000000000000000 no match 11:53:29 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x300000000000000, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 698.643698][T24927] binder: 24911:24927 unknown command 536871040 [ 698.684088][T24927] binder: 24911:24927 ioctl c0306201 20000440 returned -22 11:53:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x6800000000000000}], 0x0, 0x0, &(0x7f0000000780)}) 11:53:29 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:29 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x7]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:29 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x0, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:29 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x200000000000000, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:29 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x58]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:29 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x400000000000000, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 698.879035][T24948] binder: 24947:24948 unknown command 536871040 11:53:29 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:29 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x0, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:29 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000040)='l', 0x1}], 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x82b, 0x7, 0x7ff, 0x7}, 0x14) [ 698.973278][T24948] binder: 24947:24948 ioctl c0306201 20000440 returned -22 [ 698.973347][T24956] binder: 24947:24956 BC_INCREFS_DONE u0000000000000000 no match 11:53:29 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x600000000000000, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:29 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x300]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 699.063927][T24948] binder: 24947:24948 unknown command 536871040 [ 699.119826][T24948] binder: 24947:24948 ioctl c0306201 20000440 returned -22 11:53:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x6c00000000000000}], 0x0, 0x0, &(0x7f0000000780)}) 11:53:30 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:30 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x0, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x802, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0xab05) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) setrlimit(0x400000000000007, &(0x7f0000000000)) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa1cd, 0xfffffffffffffffe}) 11:53:30 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x700000000000000, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:30 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x600]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:30 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:30 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x3f00000000000000, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:30 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x700]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:30 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) [ 699.345245][T24990] binder: 24989:24990 unknown command 536871040 [ 699.367683][T24990] binder: 24989:24990 ioctl c0306201 20000440 returned -22 11:53:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x802, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0xab05) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) setrlimit(0x400000000000007, &(0x7f0000000000)) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa1cd, 0xfffffffffffffffe}) [ 699.420136][T24995] binder: 24989:24995 BC_INCREFS_DONE u0000000000000000 no match 11:53:30 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x4000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x7400000000000000}], 0x0, 0x0, &(0x7f0000000780)}) 11:53:30 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x4000000000000000, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:30 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:30 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 699.643705][T25018] binder: 25017:25018 unknown command 536871040 11:53:30 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x3, 0x0) ioctl(r0, 0x2000c0884127, &(0x7f0000000080)="d096161e4f4a") mq_timedsend(r0, &(0x7f0000000000)="9fc5911b010b62e56190b6bf5e02381f9245da030c5f62e67279610dec3ec856ec965a54d6d841d2948d61da4daee868d1ebd77d610e76074f7744a7a0f1d687cae86db83c3e62db414a0d49bc81fdc8ed5d5a791099deecb10037a72ad42aa11c1faba55e8f9c82a7e011c36f949c2fbdb6545b40e2f19b84ad1f91f4", 0x7d, 0x7, &(0x7f00000000c0)) fchdir(r0) 11:53:30 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x5800000000000000, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:30 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 699.691071][T25018] binder: 25017:25018 ioctl c0306201 20000440 returned -22 11:53:30 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x5800]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:30 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) [ 699.751639][T25025] binder: 25017:25025 BC_INCREFS_DONE u0000000000000000 no match 11:53:30 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 699.817749][T25025] binder: 25017:25025 unknown command 536871040 [ 699.850359][T25025] binder: 25017:25025 ioctl c0306201 20000440 returned -22 11:53:30 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x80, 0x0) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f00000000c0)=0x2) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:hugetlbfs_t:s0\x00', 0x21, 0x3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 11:53:30 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x6000000000000000, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0x7a00000000000000}], 0x0, 0x0, &(0x7f0000000780)}) 11:53:30 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, 0x0, 0x0) 11:53:30 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:30 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:30 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x8dffffff00000000, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 700.087940][T25060] binder: 25051:25060 unknown command 536871040 11:53:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x16) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00000000c0)=""/121) 11:53:30 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, 0x0, 0x0) 11:53:30 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 700.146691][T25060] binder: 25051:25060 ioctl c0306201 20000440 returned -22 11:53:30 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 700.200953][T25068] binder: 25051:25068 BC_INCREFS_DONE u0000000000000000 no match 11:53:31 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0xf5ffffff00000000, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 700.284054][T25060] binder: BINDER_SET_CONTEXT_MGR already set [ 700.300821][T25068] binder: 25051:25068 unknown command 536871040 11:53:31 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:31 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, 0x0, 0x0) [ 700.328186][T25060] binder: 25051:25060 ioctl 40046207 0 returned -16 [ 700.361746][T25068] binder: 25051:25068 ioctl c0306201 20000440 returned -22 11:53:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x0, 0xfdfdffff00000000}], 0x0, 0x0, &(0x7f0000000780)}) 11:53:31 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:31 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={r0, 0x0, 0x5, 0x20, 0x7}) r2 = fcntl$getown(r0, 0x9) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f00000001c0)) sched_getscheduler(r2) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7c, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = semget(0x0, 0x3, 0x10) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000000)=""/62) 11:53:31 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0xffffffff00000000, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:31 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:31 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0x0, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:31 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 700.587168][T25104] input: syz1 as /devices/virtual/input/input5 [ 700.610187][T25110] binder: 25108:25110 unknown command 536871040 11:53:31 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:31 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 700.639707][T25110] binder: 25108:25110 ioctl c0306201 20000440 returned -22 11:53:31 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0x0, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) [ 700.713502][T25119] binder: 25108:25119 BC_INCREFS_DONE u0000000000000000 no match [ 700.749663][T25119] binder: 25108:25119 unknown command 536871040 11:53:31 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x2, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:31 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 700.766008][T25111] input: syz1 as /devices/virtual/input/input6 [ 700.797229][T25119] binder: 25108:25119 ioctl c0306201 20000440 returned -22 11:53:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x2, 0x0, &(0x7f0000000780)}) 11:53:31 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:31 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={r0, 0x0, 0x5, 0x20, 0x7}) r2 = fcntl$getown(r0, 0x9) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f00000001c0)) sched_getscheduler(r2) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7c, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = semget(0x0, 0x3, 0x10) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000000)=""/62) 11:53:31 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0x0, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:31 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x3, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:31 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:31 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 701.048606][T25148] input: syz1 as /devices/virtual/input/input7 [ 701.060969][T25151] binder: 25144:25151 unknown command 536871040 [ 701.087704][T25151] binder: 25144:25151 ioctl c0306201 20000440 returned -22 11:53:31 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:31 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x0, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) [ 701.103367][T25151] binder: 25144:25151 BC_INCREFS_DONE u0000000000000000 no match 11:53:31 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x4, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:31 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x58000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:31 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8d]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x3, 0x0, &(0x7f0000000780)}) 11:53:32 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={r0, 0x0, 0x5, 0x20, 0x7}) r2 = fcntl$getown(r0, 0x9) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f00000001c0)) sched_getscheduler(r2) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7c, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = semget(0x0, 0x3, 0x10) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000000)=""/62) 11:53:32 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x0, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:32 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x6, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:32 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x8dffffff]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:32 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 701.849577][T25151] binder: 25144:25151 unknown command 536871040 [ 701.856032][T25151] binder: 25144:25151 ioctl c0306201 20000440 returned -22 [ 701.911314][T25185] input: syz1 as /devices/virtual/input/input8 11:53:32 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:32 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 701.963590][T25189] binder: 25180:25189 unknown command 536871040 [ 701.979835][T25189] binder: 25180:25189 ioctl c0306201 20000440 returned -22 11:53:32 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x7, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:32 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x0, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) [ 702.050431][T25195] binder: 25180:25195 BC_INCREFS_DONE u0000000000000000 no match 11:53:32 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={r0, 0x0, 0x5, 0x20, 0x7}) r2 = fcntl$getown(r0, 0x9) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f00000001c0)) sched_getscheduler(r2) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7c, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = semget(0x0, 0x3, 0x10) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000000)=""/62) 11:53:32 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 702.226173][T25208] input: syz1 as /devices/virtual/input/input9 11:53:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x4, 0x0, &(0x7f0000000780)}) 11:53:33 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0xffffff8d]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:33 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x58, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:33 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x0, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:33 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 702.368180][T25225] binder: 25224:25225 unknown command 536871040 [ 702.404855][T25225] binder: 25224:25225 ioctl c0306201 20000440 returned -22 11:53:33 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0xfffffff5]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:33 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x60, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:33 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x0, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) [ 702.404902][T25228] binder: 25224:25228 BC_INCREFS_DONE u0000000000000000 no match 11:53:33 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:33 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={r0, 0x0, 0x5, 0x20, 0x7}) r2 = fcntl$getown(r0, 0x9) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f00000001c0)) sched_getscheduler(r2) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7c, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) semget(0x0, 0x3, 0x10) 11:53:33 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:33 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 702.575460][T25243] input: syz1 as /devices/virtual/input/input10 [ 702.600250][T25228] binder: 25224:25228 unknown command 536871040 [ 702.606625][T25228] binder: 25224:25228 ioctl c0306201 20000440 returned -22 11:53:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x5, 0x0, &(0x7f0000000780)}) 11:53:33 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x300, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:33 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x0, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:33 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:33 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={r0, 0x0, 0x5, 0x20, 0x7}) r2 = fcntl$getown(r0, 0x9) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f00000001c0)) sched_getscheduler(r2) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7c, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) semget(0x0, 0x3, 0x10) 11:53:33 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 702.839281][T25265] binder: 25264:25265 unknown command 536871040 [ 702.877254][T25265] binder: 25264:25265 ioctl c0306201 20000440 returned -22 11:53:33 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x0, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) [ 702.906426][T25271] binder: 25264:25271 BC_INCREFS_DONE u0000000000000000 no match [ 702.916786][T25270] input: syz1 as /devices/virtual/input/input11 11:53:33 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x600, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:33 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 702.963932][T25271] binder: 25264:25271 unknown command 536871040 11:53:33 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 703.026762][T25265] binder: 25264:25265 BC_INCREFS_DONE u0000000000000000 no match [ 703.057601][T25271] binder: 25264:25271 ioctl c0306201 20000440 returned -22 11:53:33 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={r0, 0x0, 0x5, 0x20, 0x7}) r2 = fcntl$getown(r0, 0x9) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f00000001c0)) sched_getscheduler(r2) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7c, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 11:53:33 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x6, 0x0, &(0x7f0000000780)}) 11:53:33 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x700, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:33 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 703.196683][T25394] input: syz1 as /devices/virtual/input/input12 11:53:34 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x0, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) [ 703.243615][T25399] binder: 25395:25399 unknown command 536871040 [ 703.280985][T25399] binder: 25395:25399 ioctl c0306201 20000440 returned -22 11:53:34 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:34 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff00000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 703.308099][T25405] binder: 25395:25405 unknown command 536871040 [ 703.320291][T25405] binder: 25395:25405 ioctl c0306201 20000440 returned -22 11:53:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x7, 0x0, &(0x7f0000000780)}) 11:53:34 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x3f00, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:34 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={r0, 0x0, 0x5, 0x20, 0x7}) r2 = fcntl$getown(r0, 0x9) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f00000001c0)) sched_getscheduler(r2) ioctl$UI_DEV_DESTROY(r0, 0x5502) 11:53:34 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 703.464275][T25417] binder: 25416:25417 unknown command 536871040 11:53:34 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x0, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:34 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 703.517348][T25417] binder: 25416:25417 ioctl c0306201 20000440 returned -22 11:53:34 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x4000, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:34 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 703.573825][T25426] input: syz1 as /devices/virtual/input/input13 [ 703.598934][T25430] binder: 25416:25430 unknown command 536871040 [ 703.663251][T25430] binder: 25416:25430 ioctl c0306201 20000440 returned -22 11:53:34 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x5800, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:34 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x5800000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:34 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={r0, 0x0, 0x5, 0x20, 0x7}) r2 = fcntl$getown(r0, 0x9) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f00000001c0)) sched_getscheduler(r2) ioctl$UI_DEV_DESTROY(r0, 0x5502) 11:53:34 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x10, 0x0, &(0x7f0000000780)}) 11:53:34 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:34 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x6000, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 703.885048][T25554] binder: 25553:25554 unknown command 536871040 [ 703.902400][T25555] input: syz1 as /devices/virtual/input/input14 [ 703.914310][T25554] binder: 25553:25554 ioctl c0306201 20000440 returned -22 11:53:34 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:34 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x8dffffff00000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 703.957388][T25560] binder: 25553:25560 unknown command 536871040 [ 704.019059][T25560] binder: 25553:25560 ioctl c0306201 20000440 returned -22 11:53:34 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x1000000, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:34 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={r0, 0x0, 0x5, 0x20, 0x7}) r2 = fcntl$getown(r0, 0x9) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f00000001c0)) sched_getscheduler(r2) ioctl$UI_DEV_DESTROY(r0, 0x5502) 11:53:34 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x48, 0x0, &(0x7f0000000780)}) 11:53:34 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:34 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x2000000, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:34 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 704.191175][T25581] binder: 25580:25581 unknown command 536871040 [ 704.224711][T25579] input: syz1 as /devices/virtual/input/input15 [ 704.278034][T25581] binder: 25580:25581 ioctl c0306201 20000440 returned -22 11:53:35 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:35 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 704.327288][T25590] binder_thread_write: 3 callbacks suppressed [ 704.327304][T25590] binder: 25580:25590 BC_INCREFS_DONE u0000000000000000 no match 11:53:35 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x3000000, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:35 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:35 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={r0, 0x0, 0x5, 0x20, 0x7}) fcntl$getown(r0, 0x9) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f00000001c0)) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7c, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 704.394194][T25590] binder: 25580:25590 unknown command 536871040 [ 704.442782][T25590] binder: 25580:25590 ioctl c0306201 20000440 returned -22 11:53:35 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 704.511135][T25609] input: syz1 as /devices/virtual/input/input16 11:53:35 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x4000000, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:35 executing program 1 (fault-call:2 fault-nth:0): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x4c, 0x0, &(0x7f0000000780)}) 11:53:35 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:35 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={r0, 0x0, 0x5, 0x20, 0x7}) fcntl$getown(r0, 0x9) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7c, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 704.693162][T25627] binder: 25620:25627 unknown command 536871040 11:53:35 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:35 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 704.738580][T25627] binder: 25620:25627 ioctl c0306201 20000440 returned -22 [ 704.778092][T25630] input: syz1 as /devices/virtual/input/input17 11:53:35 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:35 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x6000000, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 704.800044][T25631] binder: 25620:25631 BC_INCREFS_DONE u0000000000000000 no match [ 704.853939][T25631] binder: 25620:25631 unknown command 536871040 11:53:35 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:35 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={r0, 0x0, 0x5, 0x20, 0x7}) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7c, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 704.903564][T25631] binder: 25620:25631 ioctl c0306201 20000440 returned -22 11:53:35 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:35 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:35 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x7000000, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x60, 0x0, &(0x7f0000000780)}) [ 705.027278][T25654] input: syz1 as /devices/virtual/input/input18 11:53:35 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:35 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 705.110995][T25665] binder: 25662:25665 unknown command 536871040 11:53:35 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x3f000000, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 705.155630][T25665] binder: 25662:25665 ioctl c0306201 20000440 returned -22 [ 705.193425][T25686] binder: 25662:25686 BC_INCREFS_DONE u0000000000000000 no match 11:53:35 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7c, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 705.227909][T25686] binder: 25662:25686 unknown command 536871040 [ 705.243058][T25686] binder: 25662:25686 ioctl c0306201 20000440 returned -22 11:53:36 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:36 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x40000000, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:36 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x68, 0x0, &(0x7f0000000780)}) [ 705.342889][T25750] input: syz1 as /devices/virtual/input/input19 11:53:36 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x3, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:36 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 705.482968][T25792] binder: 25791:25792 unknown command 536871040 [ 705.520420][T25792] binder: 25791:25792 ioctl c0306201 20000440 returned -22 11:53:36 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:36 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x58000000, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 705.529317][T25795] binder: 25791:25795 BC_INCREFS_DONE u0000000000000000 no match 11:53:36 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7c, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 11:53:36 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:36 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x60000000, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 705.621651][T25792] binder: BINDER_SET_CONTEXT_MGR already set [ 705.661658][T25795] binder: 25791:25795 unknown command 536871040 11:53:36 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 705.723720][T25792] binder: 25791:25792 ioctl 40046207 0 returned -16 [ 705.731624][T25795] binder: 25791:25795 ioctl c0306201 20000440 returned -22 11:53:36 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x4, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:36 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x8dffffff, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 705.781841][T25898] input: syz1 as /devices/virtual/input/input20 11:53:36 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x6c, 0x0, &(0x7f0000000780)}) 11:53:36 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:36 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7c, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 11:53:36 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 705.997849][T25937] binder: 25932:25937 unknown command 536871040 11:53:36 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0xf5ffffff, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 706.040471][T25937] binder: 25932:25937 ioctl c0306201 20000440 returned -22 [ 706.063322][T25988] input: syz1 as /devices/virtual/input/input21 [ 706.081959][T26007] binder: 25932:26007 BC_INCREFS_DONE u0000000000000000 no match 11:53:36 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:36 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x5, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:36 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 706.151182][T26007] binder: 25932:26007 unknown command 536871040 [ 706.179928][T26007] binder: 25932:26007 ioctl c0306201 20000440 returned -22 11:53:36 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0xffffff8d, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:36 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:37 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7c, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 11:53:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x74, 0x0, &(0x7f0000000780)}) 11:53:37 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0xfffffff5, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:37 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5800]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:37 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 706.372422][T26065] input: syz1 as /devices/virtual/input/input22 [ 706.406411][T26081] binder: 26080:26081 unknown command 536871040 [ 706.462040][T26081] binder: 26080:26081 ioctl c0306201 20000440 returned -22 [ 706.494952][T26125] binder: 26080:26125 BC_INCREFS_DONE u0000000000000000 no match 11:53:37 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x6, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:37 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 706.572280][T26125] binder: 26080:26125 unknown command 536871040 [ 706.585694][T26125] binder: 26080:26125 ioctl c0306201 20000440 returned -22 11:53:37 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x100000000000000, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:37 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7c, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 11:53:37 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x7a, 0x0, &(0x7f0000000780)}) 11:53:37 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:37 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x200000000000000, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:37 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x7, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) [ 706.947933][T26305] input: syz1 as /devices/virtual/input/input23 [ 706.973110][T26304] binder: 26303:26304 unknown command 536871040 11:53:37 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:37 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 706.999153][T26304] binder: 26303:26304 ioctl c0306201 20000440 returned -22 11:53:37 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x300000000000000, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 707.059905][T26367] binder: 26303:26367 BC_INCREFS_DONE u0000000000000000 no match 11:53:37 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7c, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 707.113082][T26367] binder: 26303:26367 unknown command 536871040 [ 707.139567][T26367] binder: 26303:26367 ioctl c0306201 20000440 returned -22 11:53:37 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x400000000000000, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:37 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x300, 0x0, &(0x7f0000000780)}) 11:53:37 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x8, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:38 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 707.231628][T26428] input: syz1 as /devices/virtual/input/input24 [ 707.340785][T26443] binder: 26440:26443 unknown command 536871040 11:53:38 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x600000000000000, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:38 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 707.384513][T26443] binder: 26440:26443 ioctl c0306201 20000440 returned -22 11:53:38 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:38 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7c, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 707.443597][T26443] binder: 26440:26443 BC_INCREFS_DONE u0000000000000000 no match 11:53:38 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x700000000000000, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:38 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:38 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x9, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:38 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:38 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x500, 0x0, &(0x7f0000000780)}) 11:53:38 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x3f00000000000000, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:38 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7c, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 11:53:38 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:38 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:38 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0xa, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) [ 708.125980][T26683] binder: 26440:26683 unknown command 536871040 [ 708.132435][T26683] binder: 26440:26683 ioctl c0306201 20000440 returned -22 11:53:38 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x4000000000000000, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 708.208469][T26697] binder: 26695:26697 unknown command 536871040 11:53:39 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:39 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 708.263340][T26697] binder: 26695:26697 ioctl c0306201 20000440 returned -22 11:53:39 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7c, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 708.326389][T26717] binder: 26695:26717 BC_INCREFS_DONE u0000000000000000 no match 11:53:39 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x5800000000000000, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 708.378673][T26717] binder: 26695:26717 unknown command 536871040 11:53:39 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8d]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 708.437710][T26717] binder: 26695:26717 ioctl c0306201 20000440 returned -22 11:53:39 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0xb, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x600, 0x0, &(0x7f0000000780)}) 11:53:39 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8d]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:39 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:39 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x6000000000000000, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:39 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7c, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 11:53:39 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 708.654414][T26835] binder: 26830:26835 unknown command 536871040 [ 708.681491][T26835] binder: 26830:26835 ioctl c0306201 20000440 returned -22 11:53:39 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:39 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x8dffffff00000000, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 708.746237][T26922] binder: 26830:26922 BC_INCREFS_DONE u0000000000000000 no match 11:53:39 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0xc, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:39 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:39 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7c, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 708.838813][T26922] binder: 26830:26922 unknown command 536871040 [ 708.877381][T26922] binder: 26830:26922 ioctl c0306201 20000440 returned -22 11:53:39 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x700, 0x0, &(0x7f0000000780)}) 11:53:39 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0xf5ffffff00000000, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:39 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 709.052569][T26999] binder: 26980:26999 unknown command 536871040 11:53:39 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0xffffffff00000000, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:39 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:39 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:39 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7c, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 709.138107][T26999] binder: 26980:26999 ioctl c0306201 20000440 returned -22 11:53:39 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0xd, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) [ 709.209395][T27054] binder: 26980:27054 unknown command 536871040 11:53:40 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:40 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:40 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 709.308636][T27054] binder: 26980:27054 ioctl c0306201 20000440 returned -22 11:53:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x2000, 0x0, &(0x7f0000000780)}) 11:53:40 executing program 3: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7c, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 11:53:40 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:40 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:40 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x2, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 709.474701][T27203] binder: 27189:27203 unknown command 536871040 11:53:40 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0xe, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) [ 709.523336][T27203] binder: 27189:27203 ioctl c0306201 20000440 returned -22 [ 709.523979][T27215] binder_thread_write: 1 callbacks suppressed [ 709.523993][T27215] binder: 27189:27215 BC_INCREFS_DONE u0000000000000000 no match 11:53:40 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:40 executing program 3: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7c, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 11:53:40 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:40 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x3, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:40 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:40 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0xf, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) [ 709.830364][T27215] binder: 27189:27215 unknown command 536871040 [ 709.870818][T27215] binder: 27189:27215 ioctl c0306201 20000440 returned -22 11:53:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x3f00, 0x0, &(0x7f0000000780)}) 11:53:40 executing program 3: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7c, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 11:53:40 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5800000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:40 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x4, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:40 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:40 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff00000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 710.059334][T27427] binder: 27423:27427 unknown command 536871040 11:53:40 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff00000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:40 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x10, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:40 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x6, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:40 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7c, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 710.132774][T27427] binder: 27423:27427 ioctl c0306201 20000440 returned -22 [ 710.135464][T27469] binder: 27423:27469 BC_INCREFS_DONE u0000000000000000 no match 11:53:40 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:41 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x7, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 710.361774][T27508] binder: 27423:27508 unknown command 536871040 [ 710.461525][T27508] binder: 27423:27508 ioctl c0306201 20000440 returned -22 11:53:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x4800, 0x0, &(0x7f0000000780)}) 11:53:41 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:41 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:41 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7c, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 11:53:41 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x58, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:41 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x11, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) [ 710.592647][T27610] binder: 27609:27610 unknown command 536871040 [ 710.619937][T27610] binder: 27609:27610 ioctl c0306201 20000440 returned -22 11:53:41 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:41 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7c, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 11:53:41 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 710.639621][T27610] binder: 27609:27610 BC_INCREFS_DONE u0000000000000000 no match 11:53:41 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x60, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:41 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:41 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x12, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x4c00, 0x0, &(0x7f0000000780)}) 11:53:42 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:42 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x300, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:42 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7c, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 11:53:42 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:42 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x13, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) [ 711.379816][T27839] binder: 27609:27839 unknown command 536871040 [ 711.386117][T27839] binder: 27609:27839 ioctl c0306201 20000440 returned -22 11:53:42 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x600, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:42 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:42 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 711.469556][T27852] binder: 27849:27852 unknown command 536871040 [ 711.504958][T27852] binder: 27849:27852 ioctl c0306201 20000440 returned -22 [ 711.567470][T27907] binder: 27849:27907 BC_INCREFS_DONE u0000000000000000 no match 11:53:42 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7c, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 11:53:42 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:42 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:42 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x700, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x6000, 0x0, &(0x7f0000000780)}) 11:53:42 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x14, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:42 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:42 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x3f00, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 711.822857][T27985] binder: 27984:27985 unknown command 536871040 [ 711.866376][T27985] binder: 27984:27985 ioctl c0306201 20000440 returned -22 11:53:42 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:42 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7c, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 711.951587][T27985] binder: 27984:27985 BC_INCREFS_DONE u0000000000000000 no match 11:53:42 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x15, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:42 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:42 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:42 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x4000, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:42 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:42 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7c, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 11:53:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x6800, 0x0, &(0x7f0000000780)}) 11:53:43 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:43 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x5800, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:43 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:43 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x18, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:43 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7c, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 712.619061][T27985] binder: 27984:27985 unknown command 536871040 [ 712.625347][T27985] binder: 27984:27985 ioctl c0306201 20000440 returned -22 11:53:43 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 712.710514][T28242] binder: 28230:28242 unknown command 536871040 11:53:43 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:43 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x6000, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 712.757747][T28242] binder: 28230:28242 ioctl c0306201 20000440 returned -22 [ 712.796108][T28284] binder: 28230:28284 BC_INCREFS_DONE u0000000000000000 no match 11:53:43 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7c, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 11:53:43 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x2f, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:43 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x1000000, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 712.902533][T28357] binder: 28230:28357 unknown command 536871040 [ 712.963738][T28357] binder: 28230:28357 ioctl c0306201 20000440 returned -22 11:53:43 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x6c00, 0x0, &(0x7f0000000780)}) 11:53:43 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:43 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x2000000, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:43 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7c, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 11:53:43 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 713.131385][T28476] binder: 28475:28476 unknown command 536871040 [ 713.146436][T28476] binder: 28475:28476 ioctl c0306201 20000440 returned -22 11:53:43 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x300, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:43 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x3000000, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:43 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 713.193937][T28476] binder: 28475:28476 BC_INCREFS_DONE u0000000000000000 no match 11:53:44 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:44 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:44 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7c, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 11:53:44 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x4000000, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x7400, 0x0, &(0x7f0000000780)}) 11:53:44 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5800]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:44 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:44 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7c, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 11:53:44 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x6000000, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:44 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x500, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) [ 713.925743][T28618] binder: 28475:28618 unknown command 536871040 [ 713.932100][T28618] binder: 28475:28618 ioctl c0306201 20000440 returned -22 11:53:44 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:44 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:44 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x7000000, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 714.021658][T28632] binder: 28631:28632 unknown command 536871040 [ 714.054389][T28632] binder: 28631:28632 ioctl c0306201 20000440 returned -22 11:53:44 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7c, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 714.108327][T28699] binder: 28631:28699 BC_INCREFS_DONE u0000000000000000 no match 11:53:44 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 714.188773][T28746] binder: 28631:28746 unknown command 536871040 [ 714.206928][T28748] input: syz1 as /devices/virtual/input/input40 11:53:44 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x3f000000, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 714.273695][T28746] binder: 28631:28746 ioctl c0306201 20000440 returned -22 11:53:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x7a00, 0x0, &(0x7f0000000780)}) 11:53:45 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x600, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:45 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:45 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x7c, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 11:53:45 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:45 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x40000000, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 714.460307][T28765] input: syz1 as /devices/virtual/input/input41 11:53:45 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:45 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x58000000, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 714.521131][T28794] binder: 28792:28794 unknown command 536871040 11:53:45 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:45 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x7c, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 714.582638][T28853] binder: 28792:28853 BC_INCREFS_DONE u0000000000000000 no match [ 714.582652][T28794] binder: 28792:28794 ioctl c0306201 20000440 returned -22 11:53:45 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x700, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) [ 714.659787][T28853] binder: 28792:28853 unknown command 536871040 [ 714.699128][T28886] input: syz1 as /devices/virtual/input/input42 11:53:45 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 714.709144][T28853] binder: 28792:28853 ioctl c0306201 20000440 returned -22 11:53:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x1000000, 0x0, &(0x7f0000000780)}) 11:53:45 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x60000000, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:45 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:45 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x7c, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 11:53:45 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:45 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x8dffffff, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:45 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 714.939218][T28951] input: syz1 as /devices/virtual/input/input43 [ 714.953226][T28955] binder: 28930:28955 unknown command 536871040 11:53:45 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 715.041291][T28955] binder: 28930:28955 ioctl c0306201 20000440 returned -22 [ 715.041718][T29016] binder: 28930:29016 BC_INCREFS_DONE u0000000000000000 no match 11:53:45 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 11:53:45 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x900, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:45 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0xf5ffffff, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:45 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x2000000, 0x0, &(0x7f0000000780)}) 11:53:45 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 715.224771][T29027] input: syz1 as /devices/virtual/input/input44 11:53:46 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:46 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0xffffff8d, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 715.303993][T29054] binder: 29050:29054 unknown command 536871040 11:53:46 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 11:53:46 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8d]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 715.373155][T29054] binder: 29050:29054 ioctl c0306201 20000440 returned -22 [ 715.373637][T29096] binder: 29050:29096 BC_INCREFS_DONE u0000000000000000 no match [ 715.443897][T29054] binder: BINDER_SET_CONTEXT_MGR already set [ 715.478394][T29153] input: syz1 as /devices/virtual/input/input45 11:53:46 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0xa00, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:46 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0xfffffff5, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:46 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 715.501761][T29054] binder: 29050:29054 ioctl 40046207 0 returned -16 11:53:46 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x3000000, 0x0, &(0x7f0000000780)}) 11:53:46 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 11:53:46 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x100000000000000, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:46 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 715.673863][T29174] binder: 29170:29174 unknown command 536871040 [ 715.729502][T29174] binder: 29170:29174 ioctl c0306201 20000440 returned -22 11:53:46 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 715.769772][T29229] input: syz1 as /devices/virtual/input/input46 [ 715.778620][T29215] binder: 29170:29215 BC_INCREFS_DONE u0000000000000000 no match 11:53:46 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7c, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) [ 715.829841][T29174] binder: BINDER_SET_CONTEXT_MGR already set [ 715.852398][T29215] binder: 29170:29215 unknown command 536871040 11:53:46 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x200000000000000, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:46 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 715.877254][T29174] binder: 29170:29174 ioctl 40046207 0 returned -16 [ 715.884237][T29215] binder: 29170:29215 ioctl c0306201 20000440 returned -22 11:53:46 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0xb00, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) [ 715.940095][T29295] input: syz1 as /devices/virtual/input/input47 11:53:46 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8d]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x4000000, 0x0, &(0x7f0000000780)}) 11:53:46 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x300000000000000, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:46 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 716.081144][T29307] binder: 29305:29307 unknown command 536871040 11:53:46 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7c, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 11:53:46 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 716.131370][T29307] binder: 29305:29307 ioctl c0306201 20000440 returned -22 [ 716.183610][T29312] binder: 29305:29312 BC_INCREFS_DONE u0000000000000000 no match [ 716.220560][T29364] input: syz1 as /devices/virtual/input/input48 11:53:46 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x400000000000000, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 716.240407][T29312] binder: 29305:29312 unknown command 536871040 11:53:47 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:47 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0xc00, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) [ 716.316088][T29312] binder: 29305:29312 ioctl c0306201 20000440 returned -22 11:53:47 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:47 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7c, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 11:53:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x5000000, 0x0, &(0x7f0000000780)}) 11:53:47 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:47 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x600000000000000, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 716.473880][T29438] input: syz1 as /devices/virtual/input/input49 11:53:47 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 716.544867][T29466] binder: 29458:29466 unknown command 536871040 [ 716.588799][T29466] binder: 29458:29466 ioctl c0306201 20000440 returned -22 [ 716.613242][T29534] binder: 29458:29534 BC_INCREFS_DONE u0000000000000000 no match 11:53:47 executing program 3: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:47 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:47 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0xd00, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:47 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x700000000000000, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 716.696480][T29534] binder: 29458:29534 unknown command 536871040 11:53:47 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 716.763848][T29534] binder: 29458:29534 ioctl c0306201 20000440 returned -22 11:53:47 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:47 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7c, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 11:53:47 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x3f00000000000000, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x6000000, 0x0, &(0x7f0000000780)}) 11:53:47 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 716.930666][T29633] binder: 29631:29633 unknown command 536871040 [ 716.968791][T29635] input: syz1 as /devices/virtual/input/input50 11:53:47 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:47 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0xe00, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) [ 717.021419][T29633] binder: 29631:29633 ioctl c0306201 20000440 returned -22 11:53:47 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x4000000000000000, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 717.080298][T29682] binder: 29631:29682 BC_INCREFS_DONE u0000000000000000 no match 11:53:47 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:47 executing program 3 (fault-call:5 fault-nth:0): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7c, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 11:53:47 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff00000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 717.149271][T29633] binder: BINDER_SET_CONTEXT_MGR already set [ 717.184368][T29682] binder: 29631:29682 unknown command 536871040 11:53:47 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x5800000000000000, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 717.247390][T29633] binder: 29631:29633 ioctl 40046207 0 returned -16 [ 717.283548][T29742] input: syz1 as /devices/virtual/input/input51 [ 717.306632][T29682] binder: 29631:29682 ioctl c0306201 20000440 returned -22 11:53:48 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:48 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 717.380894][T29742] FAULT_INJECTION: forcing a failure. [ 717.380894][T29742] name failslab, interval 1, probability 0, space 0, times 0 [ 717.407444][T29742] CPU: 0 PID: 29742 Comm: syz-executor.3 Not tainted 5.1.0-rc6 #80 [ 717.415409][T29742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 717.425617][T29742] Call Trace: [ 717.428932][T29742] dump_stack+0x172/0x1f0 [ 717.433291][T29742] should_fail.cold+0xa/0x15 [ 717.437915][T29742] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 717.443743][T29742] ? ___might_sleep+0x163/0x280 [ 717.448619][T29742] __should_failslab+0x121/0x190 [ 717.453574][T29742] should_failslab+0x9/0x14 [ 717.458090][T29742] __kmalloc_track_caller+0x2d8/0x740 [ 717.463484][T29742] ? pointer+0xa30/0xa30 [ 717.467743][T29742] ? debug_smp_processor_id+0x3c/0x280 [ 717.473221][T29742] ? kasprintf+0xbb/0xf0 11:53:48 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x7000000, 0x0, &(0x7f0000000780)}) 11:53:48 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x6000000000000000, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:48 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0xf00, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) [ 717.477510][T29742] kvasprintf+0xc8/0x170 [ 717.481764][T29742] ? bust_spinlocks+0xe0/0xe0 [ 717.486464][T29742] ? debug_check_no_obj_freed+0x200/0x464 [ 717.492206][T29742] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 717.498479][T29742] kasprintf+0xbb/0xf0 [ 717.498507][T29742] ? kvasprintf_const+0x190/0x190 [ 717.498529][T29742] ? perf_trace_lock+0xeb/0x510 [ 717.498561][T29742] ? __lockdep_free_key_range+0x120/0x120 [ 717.498610][T29742] ? input_default_getkeycode+0x520/0x520 [ 717.498647][T29742] input_devnode+0x4c/0x90 [ 717.528505][T29742] device_get_devnode+0x175/0x2e0 [ 717.533549][T29742] ? refcount_sub_and_test_checked+0x154/0x200 [ 717.533574][T29742] devtmpfs_delete_node+0xaa/0x1a0 [ 717.533592][T29742] ? devtmpfs_create_node+0x250/0x250 [ 717.533617][T29742] ? __device_link_free_srcu+0x120/0x120 [ 717.533640][T29742] ? refcount_dec_and_test_checked+0x1b/0x20 [ 717.559693][T29821] binder: 29814:29821 unknown command 536871040 [ 717.562079][T29742] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 717.562096][T29742] ? kobject_put+0x84/0xe0 [ 717.562118][T29742] ? __device_link_free_srcu+0x120/0x120 [ 717.562135][T29742] ? klist_children_put+0x4a/0x60 [ 717.562155][T29742] ? klist_put+0xdc/0x180 [ 717.594324][T29742] device_del+0x8b4/0xc40 [ 717.594352][T29742] ? __device_links_no_driver+0x250/0x250 [ 717.594369][T29742] ? mark_held_locks+0xa4/0xf0 [ 717.594385][T29742] ? _raw_spin_unlock_irq+0x28/0x90 [ 717.594409][T29742] ? __input_unregister_device+0x153/0x4a0 [ 717.615098][T29824] binder: 29814:29824 BC_INCREFS_DONE u0000000000000000 no match 11:53:48 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x8dffffff00000000, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 717.620230][T29742] ? _raw_spin_unlock_irq+0x28/0x90 [ 717.620255][T29742] cdev_device_del+0x1a/0x80 [ 717.620275][T29742] evdev_disconnect+0x42/0xb0 [ 717.620297][T29742] __input_unregister_device+0x200/0x4a0 [ 717.620315][T29742] input_unregister_device+0xc5/0x110 [ 717.620329][T29742] uinput_destroy_device+0x1f4/0x250 [ 717.620351][T29742] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 717.620365][T29742] ? tomoyo_domain+0xc5/0x160 [ 717.620381][T29742] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 717.620400][T29742] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 11:53:48 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 717.620413][T29742] ? tomoyo_path_number_perm+0x263/0x520 [ 717.620428][T29742] ? __lockdep_free_key_range+0x120/0x120 [ 717.620442][T29742] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 717.620454][T29742] ? __lockdep_free_key_range+0x120/0x120 [ 717.620479][T29742] ? __fget+0x35a/0x550 [ 717.620501][T29742] uinput_ioctl+0x4a/0x60 [ 717.659094][T29742] ? uinput_compat_ioctl+0x90/0x90 [ 717.659115][T29742] do_vfs_ioctl+0xd6e/0x1390 [ 717.659137][T29742] ? ioctl_preallocate+0x210/0x210 [ 717.659153][T29742] ? __fget+0x381/0x550 [ 717.659173][T29742] ? ksys_dup3+0x3e0/0x3e0 [ 717.659197][T29742] ? tomoyo_file_ioctl+0x23/0x30 [ 717.659213][T29742] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 717.659230][T29742] ? security_file_ioctl+0x93/0xc0 [ 717.659249][T29742] ksys_ioctl+0xab/0xd0 [ 717.659271][T29742] __x64_sys_ioctl+0x73/0xb0 [ 717.721727][T29821] binder: 29814:29821 ioctl c0306201 20000440 returned -22 [ 717.723538][T29742] do_syscall_64+0x103/0x610 [ 717.723563][T29742] entry_SYSCALL_64_after_hwframe+0x49/0xbe 11:53:48 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5800000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 717.723576][T29742] RIP: 0033:0x458c29 [ 717.723599][T29742] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 717.742530][T29742] RSP: 002b:00007f7784fa8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 717.742547][T29742] RAX: ffffffffffffffda RBX: 00007f7784fa8c90 RCX: 0000000000458c29 [ 717.742556][T29742] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 717.742566][T29742] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 717.742577][T29742] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7784fa96d4 [ 717.742586][T29742] R13: 00000000004c349c R14: 00000000004d6950 R15: 0000000000000005 [ 717.801735][T29824] binder: 29814:29824 unknown command 536871040 [ 717.869214][T29824] binder: 29814:29824 ioctl c0306201 20000440 returned -22 11:53:48 executing program 3 (fault-call:5 fault-nth:1): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7c, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 11:53:48 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff00000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:48 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0xf5ffffff00000000, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:48 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:48 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x1100, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x10000000, 0x0, &(0x7f0000000780)}) 11:53:48 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:48 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 718.131378][T29950] binder: 29947:29950 unknown command 536871040 [ 718.152263][T29952] input: syz1 as /devices/virtual/input/input52 [ 718.162697][T29950] binder: 29947:29950 ioctl c0306201 20000440 returned -22 11:53:48 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0xffffffff00000000, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 718.212987][T29952] FAULT_INJECTION: forcing a failure. [ 718.212987][T29952] name failslab, interval 1, probability 0, space 0, times 0 [ 718.241493][T30038] binder: 29947:30038 BC_INCREFS_DONE u0000000000000000 no match 11:53:49 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x1200, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) [ 718.314727][T29952] CPU: 0 PID: 29952 Comm: syz-executor.3 Not tainted 5.1.0-rc6 #80 [ 718.322946][T29952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 718.333019][T29952] Call Trace: [ 718.336353][T29952] dump_stack+0x172/0x1f0 [ 718.340711][T29952] should_fail.cold+0xa/0x15 [ 718.345610][T29952] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 718.351798][T29952] ? ___might_sleep+0x163/0x280 [ 718.357076][T29952] __should_failslab+0x121/0x190 [ 718.360065][T30064] binder: 29947:30064 unknown command 536871040 [ 718.362031][T29952] should_failslab+0x9/0x14 [ 718.362051][T29952] kmem_cache_alloc_trace+0x2d1/0x760 [ 718.362079][T29952] ? mutex_trylock+0x1e0/0x1e0 [ 718.383209][T29952] ? kasan_check_write+0x14/0x20 [ 718.384945][T30064] binder: 29947:30064 ioctl c0306201 20000440 returned -22 [ 718.388193][T29952] kobject_uevent_env+0x2fb/0x1030 [ 718.388214][T29952] ? wait_for_completion+0x440/0x440 [ 718.388236][T29952] kobject_uevent+0x20/0x26 [ 718.388261][T29952] device_del+0x758/0xc40 11:53:49 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 718.388314][T29952] ? __device_links_no_driver+0x250/0x250 [ 718.388352][T29952] ? _raw_spin_unlock_irq+0x28/0x90 [ 718.410457][T29952] ? __input_unregister_device+0x153/0x4a0 [ 718.431581][T29952] ? _raw_spin_unlock_irq+0x28/0x90 [ 718.431604][T29952] cdev_device_del+0x1a/0x80 [ 718.431623][T29952] evdev_disconnect+0x42/0xb0 [ 718.431641][T29952] __input_unregister_device+0x200/0x4a0 [ 718.431661][T29952] input_unregister_device+0xc5/0x110 [ 718.431676][T29952] uinput_destroy_device+0x1f4/0x250 [ 718.431696][T29952] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 718.431711][T29952] ? tomoyo_domain+0xc5/0x160 [ 718.431727][T29952] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 718.431751][T29952] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 718.486835][T29952] ? tomoyo_path_number_perm+0x263/0x520 [ 718.486852][T29952] ? __lockdep_free_key_range+0x120/0x120 [ 718.486868][T29952] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 718.486891][T29952] ? __lockdep_free_key_range+0x120/0x120 [ 718.486918][T29952] ? __fget+0x35a/0x550 [ 718.486940][T29952] uinput_ioctl+0x4a/0x60 [ 718.510034][T29952] ? uinput_compat_ioctl+0x90/0x90 [ 718.510055][T29952] do_vfs_ioctl+0xd6e/0x1390 [ 718.510078][T29952] ? ioctl_preallocate+0x210/0x210 [ 718.510092][T29952] ? __fget+0x381/0x550 [ 718.510114][T29952] ? ksys_dup3+0x3e0/0x3e0 [ 718.510138][T29952] ? tomoyo_file_ioctl+0x23/0x30 [ 718.510154][T29952] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 718.510172][T29952] ? security_file_ioctl+0x93/0xc0 [ 718.510197][T29952] ksys_ioctl+0xab/0xd0 [ 718.562749][T29952] __x64_sys_ioctl+0x73/0xb0 [ 718.567356][T29952] do_syscall_64+0x103/0x610 [ 718.571970][T29952] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 718.577884][T29952] RIP: 0033:0x458c29 [ 718.581790][T29952] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 718.602135][T29952] RSP: 002b:00007f7784fa8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 11:53:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x20000000, 0x0, &(0x7f0000000780)}) [ 718.610571][T29952] RAX: ffffffffffffffda RBX: 00007f7784fa8c90 RCX: 0000000000458c29 [ 718.618578][T29952] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 718.626589][T29952] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 718.634581][T29952] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7784fa96d4 [ 718.642679][T29952] R13: 00000000004c349c R14: 00000000004d6950 R15: 0000000000000005 [ 718.704963][T30149] binder: 30148:30149 unknown command 536871040 [ 718.728955][T30149] binder: 30148:30149 ioctl c0306201 20000440 returned -22 [ 718.744233][T30149] binder: 30148:30149 BC_INCREFS_DONE u0000000000000000 no match 11:53:49 executing program 3 (fault-call:5 fault-nth:2): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7c, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 11:53:49 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0xffffffffffffffff, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:49 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:49 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:49 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x1300, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:49 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:49 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x2, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:49 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 718.856929][T30191] input: syz1 as /devices/virtual/input/input53 [ 718.946830][T30191] FAULT_INJECTION: forcing a failure. [ 718.946830][T30191] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 718.960193][T30191] CPU: 0 PID: 30191 Comm: syz-executor.3 Not tainted 5.1.0-rc6 #80 [ 718.968090][T30191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 718.979121][T30191] Call Trace: [ 718.982443][T30191] dump_stack+0x172/0x1f0 [ 718.986855][T30191] should_fail.cold+0xa/0x15 [ 718.991477][T30191] ? fault_create_debugfs_attr+0x1e0/0x1e0 11:53:49 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 718.997293][T30191] ? debug_smp_processor_id+0x3c/0x280 [ 719.002767][T30191] ? perf_trace_lock+0xeb/0x510 [ 719.007635][T30191] should_fail_alloc_page+0x50/0x60 [ 719.012852][T30191] __alloc_pages_nodemask+0x1a1/0x7e0 [ 719.018287][T30191] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 719.024021][T30191] ? find_held_lock+0x35/0x130 [ 719.028811][T30191] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 719.034648][T30191] cache_grow_begin+0x9c/0x860 [ 719.039425][T30191] ? kobject_uevent_env+0x2fb/0x1030 11:53:49 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:49 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x3, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 719.044717][T30191] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 719.051070][T30191] kmem_cache_alloc_trace+0x67f/0x760 [ 719.056456][T30191] ? mutex_trylock+0x1e0/0x1e0 [ 719.061238][T30191] ? kasan_check_write+0x14/0x20 [ 719.066209][T30191] kobject_uevent_env+0x2fb/0x1030 [ 719.071336][T30191] ? wait_for_completion+0x440/0x440 [ 719.076671][T30191] kobject_uevent+0x20/0x26 [ 719.089731][T30191] device_del+0x758/0xc40 [ 719.094692][T30191] ? __device_links_no_driver+0x250/0x250 [ 719.100437][T30191] ? _raw_spin_unlock_irq+0x28/0x90 [ 719.105698][T30191] ? __input_unregister_device+0x153/0x4a0 [ 719.111523][T30191] ? _raw_spin_unlock_irq+0x28/0x90 [ 719.116753][T30191] cdev_device_del+0x1a/0x80 [ 719.121362][T30191] evdev_disconnect+0x42/0xb0 [ 719.126059][T30191] __input_unregister_device+0x200/0x4a0 [ 719.131718][T30191] input_unregister_device+0xc5/0x110 [ 719.137367][T30191] uinput_destroy_device+0x1f4/0x250 [ 719.142673][T30191] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 719.148574][T30191] ? tomoyo_domain+0xc5/0x160 [ 719.153266][T30191] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 719.159382][T30191] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 719.166336][T30191] ? tomoyo_path_number_perm+0x263/0x520 [ 719.171989][T30191] ? __lockdep_free_key_range+0x120/0x120 [ 719.177758][T30191] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 719.183574][T30191] ? __lockdep_free_key_range+0x120/0x120 [ 719.189313][T30191] ? __fget+0x35a/0x550 [ 719.193516][T30191] uinput_ioctl+0x4a/0x60 [ 719.197965][T30191] ? uinput_compat_ioctl+0x90/0x90 [ 719.203185][T30191] do_vfs_ioctl+0xd6e/0x1390 [ 719.207991][T30191] ? ioctl_preallocate+0x210/0x210 [ 719.213136][T30191] ? __fget+0x381/0x550 [ 719.217321][T30191] ? ksys_dup3+0x3e0/0x3e0 [ 719.221776][T30191] ? tomoyo_file_ioctl+0x23/0x30 [ 719.226730][T30191] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 719.232983][T30191] ? security_file_ioctl+0x93/0xc0 [ 719.233004][T30191] ksys_ioctl+0xab/0xd0 [ 719.233023][T30191] __x64_sys_ioctl+0x73/0xb0 [ 719.233042][T30191] do_syscall_64+0x103/0x610 [ 719.233064][T30191] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 719.233075][T30191] RIP: 0033:0x458c29 [ 719.233090][T30191] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 719.233106][T30191] RSP: 002b:00007f7784fa8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 719.289752][T30191] RAX: ffffffffffffffda RBX: 00007f7784fa8c90 RCX: 0000000000458c29 [ 719.297729][T30191] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 719.305816][T30191] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 719.313791][T30191] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7784fa96d4 [ 719.321759][T30191] R13: 00000000004c349c R14: 00000000004d6950 R15: 0000000000000005 11:53:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x3f000000, 0x0, &(0x7f0000000780)}) 11:53:50 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:50 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:50 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x4, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:50 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x1400, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:50 executing program 3 (fault-call:5 fault-nth:3): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7c, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 719.492227][T30149] binder: 30148:30149 unknown command 536871040 [ 719.498712][T30149] binder: 30148:30149 ioctl c0306201 20000440 returned -22 [ 719.556541][T30318] input: syz1 as /devices/virtual/input/input54 11:53:50 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 719.598928][T30330] binder: 30327:30330 unknown command 536871040 [ 719.623117][T30340] FAULT_INJECTION: forcing a failure. [ 719.623117][T30340] name failslab, interval 1, probability 0, space 0, times 0 11:53:50 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:50 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x5, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 719.654831][T30330] binder: 30327:30330 ioctl c0306201 20000440 returned -22 [ 719.687288][T30340] CPU: 0 PID: 30340 Comm: syz-executor.3 Not tainted 5.1.0-rc6 #80 [ 719.695230][T30340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 719.705940][T30340] Call Trace: [ 719.709257][T30340] dump_stack+0x172/0x1f0 [ 719.713614][T30340] should_fail.cold+0xa/0x15 [ 719.718410][T30340] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 719.724363][T30340] ? ___might_sleep+0x163/0x280 [ 719.729231][T30340] __should_failslab+0x121/0x190 [ 719.734188][T30340] should_failslab+0x9/0x14 [ 719.738710][T30340] __kmalloc_track_caller+0x2d8/0x740 [ 719.744096][T30340] ? pointer+0xa30/0xa30 [ 719.748350][T30340] ? kasprintf+0xbb/0xf0 [ 719.749394][T30385] binder: 30327:30385 BC_INCREFS_DONE u0000000000000000 no match [ 719.752608][T30340] kvasprintf+0xc8/0x170 [ 719.764585][T30340] ? bust_spinlocks+0xe0/0xe0 [ 719.769279][T30340] ? pointer+0xa30/0xa30 [ 719.773970][T30340] kasprintf+0xbb/0xf0 [ 719.778071][T30340] ? kvasprintf_const+0x190/0x190 [ 719.783112][T30340] ? cleanup_uevent_env+0x50/0x50 [ 719.788151][T30340] ? input_default_getkeycode+0x520/0x520 [ 719.788810][T30411] binder: 30327:30411 unknown command 536871040 [ 719.793886][T30340] input_devnode+0x4c/0x90 [ 719.793905][T30340] device_get_devnode+0x175/0x2e0 [ 719.793925][T30340] dev_uevent+0x3e8/0x580 [ 719.813913][T30340] ? device_get_devnode+0x2e0/0x2e0 [ 719.819123][T30340] ? kobject_uevent_env+0x2fb/0x1030 [ 719.822115][T30411] binder: 30327:30411 ioctl c0306201 20000440 returned -22 [ 719.824418][T30340] ? rcu_read_lock_sched_held+0x110/0x130 [ 719.824451][T30340] ? device_get_devnode+0x2e0/0x2e0 [ 719.842615][T30340] kobject_uevent_env+0x487/0x1030 [ 719.847740][T30340] ? wait_for_completion+0x440/0x440 [ 719.853039][T30340] kobject_uevent+0x20/0x26 [ 719.857545][T30340] device_del+0x758/0xc40 [ 719.857570][T30340] ? __device_links_no_driver+0x250/0x250 [ 719.857587][T30340] ? _raw_spin_unlock_irq+0x28/0x90 [ 719.857603][T30340] ? __input_unregister_device+0x153/0x4a0 [ 719.857615][T30340] ? _raw_spin_unlock_irq+0x28/0x90 [ 719.857643][T30340] cdev_device_del+0x1a/0x80 [ 719.888499][T30340] evdev_disconnect+0x42/0xb0 [ 719.893195][T30340] __input_unregister_device+0x200/0x4a0 [ 719.898938][T30340] input_unregister_device+0xc5/0x110 11:53:50 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x48000000, 0x0, &(0x7f0000000780)}) [ 719.904337][T30340] uinput_destroy_device+0x1f4/0x250 [ 719.909742][T30340] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 719.915659][T30340] ? tomoyo_domain+0xc5/0x160 [ 719.920362][T30340] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 719.926451][T30340] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 719.932718][T30340] ? tomoyo_path_number_perm+0x263/0x520 [ 719.939238][T30340] ? __lockdep_free_key_range+0x120/0x120 [ 719.944983][T30340] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 719.945001][T30340] ? __lockdep_free_key_range+0x120/0x120 [ 719.945035][T30340] ? __fget+0x35a/0x550 [ 719.960903][T30340] uinput_ioctl+0x4a/0x60 [ 719.960918][T30340] ? uinput_compat_ioctl+0x90/0x90 [ 719.960941][T30340] do_vfs_ioctl+0xd6e/0x1390 [ 719.974982][T30340] ? ioctl_preallocate+0x210/0x210 [ 719.980107][T30340] ? __fget+0x381/0x550 [ 719.984286][T30340] ? ksys_dup3+0x3e0/0x3e0 [ 719.988730][T30340] ? tomoyo_file_ioctl+0x23/0x30 [ 719.993684][T30340] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 719.999944][T30340] ? security_file_ioctl+0x93/0xc0 11:53:50 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 720.005080][T30340] ksys_ioctl+0xab/0xd0 [ 720.009284][T30340] __x64_sys_ioctl+0x73/0xb0 [ 720.013905][T30340] do_syscall_64+0x103/0x610 [ 720.018515][T30340] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 720.024510][T30340] RIP: 0033:0x458c29 [ 720.028435][T30340] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 720.048229][T30340] RSP: 002b:00007f7784f87c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 11:53:50 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x1500, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) [ 720.048246][T30340] RAX: ffffffffffffffda RBX: 00007f7784f87c90 RCX: 0000000000458c29 [ 720.048253][T30340] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 720.048260][T30340] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 720.048268][T30340] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7784f886d4 [ 720.048276][T30340] R13: 00000000004c349c R14: 00000000004d6950 R15: 0000000000000005 11:53:50 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:50 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x7, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 720.117884][T30444] binder: 30443:30444 unknown command 536871040 [ 720.124202][T30444] binder: 30443:30444 ioctl c0306201 20000440 returned -22 [ 720.134554][T30444] binder: 30443:30444 BC_INCREFS_DONE u0000000000000000 no match 11:53:50 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:51 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0xb, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:51 executing program 3 (fault-call:5 fault-nth:4): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7c, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 11:53:51 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:51 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 720.373574][T30547] input: syz1 as /devices/virtual/input/input55 11:53:51 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x1800, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) [ 720.417842][T30547] FAULT_INJECTION: forcing a failure. [ 720.417842][T30547] name failslab, interval 1, probability 0, space 0, times 0 [ 720.475257][T30547] CPU: 0 PID: 30547 Comm: syz-executor.3 Not tainted 5.1.0-rc6 #80 [ 720.483213][T30547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 720.493386][T30547] Call Trace: [ 720.496714][T30547] dump_stack+0x172/0x1f0 [ 720.501095][T30547] should_fail.cold+0xa/0x15 [ 720.505732][T30547] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 720.511568][T30547] ? ___might_sleep+0x163/0x280 [ 720.516447][T30547] __should_failslab+0x121/0x190 [ 720.521402][T30547] should_failslab+0x9/0x14 [ 720.525937][T30547] kmem_cache_alloc_node+0x264/0x710 [ 720.531266][T30547] ? find_held_lock+0x35/0x130 [ 720.536065][T30547] __alloc_skb+0xd5/0x5e0 [ 720.540418][T30547] ? skb_trim+0x190/0x190 [ 720.544780][T30547] ? kasan_check_read+0x11/0x20 [ 720.549664][T30547] alloc_uevent_skb+0x83/0x1e2 [ 720.554550][T30547] kobject_uevent_env+0xa63/0x1030 [ 720.559683][T30547] ? wait_for_completion+0x440/0x440 [ 720.564993][T30547] kobject_uevent+0x20/0x26 [ 720.569505][T30547] device_del+0x758/0xc40 11:53:51 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 720.573856][T30547] ? __device_links_no_driver+0x250/0x250 [ 720.579600][T30547] ? _raw_spin_unlock_irq+0x28/0x90 [ 720.584923][T30547] ? __input_unregister_device+0x153/0x4a0 [ 720.590752][T30547] ? _raw_spin_unlock_irq+0x28/0x90 [ 720.595979][T30547] cdev_device_del+0x1a/0x80 [ 720.600593][T30547] evdev_disconnect+0x42/0xb0 [ 720.605288][T30547] __input_unregister_device+0x200/0x4a0 [ 720.610945][T30547] input_unregister_device+0xc5/0x110 [ 720.616366][T30547] uinput_destroy_device+0x1f4/0x250 [ 720.621845][T30547] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 720.627763][T30547] ? tomoyo_domain+0xc5/0x160 [ 720.632455][T30547] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 720.638548][T30547] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 720.644807][T30547] ? tomoyo_path_number_perm+0x263/0x520 [ 720.650459][T30547] ? __lockdep_free_key_range+0x120/0x120 [ 720.656202][T30547] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 720.662039][T30547] ? __lockdep_free_key_range+0x120/0x120 [ 720.667780][T30547] ? __fget+0x35a/0x550 [ 720.671960][T30547] uinput_ioctl+0x4a/0x60 [ 720.676333][T30547] ? uinput_compat_ioctl+0x90/0x90 [ 720.681493][T30547] do_vfs_ioctl+0xd6e/0x1390 [ 720.686102][T30547] ? ioctl_preallocate+0x210/0x210 [ 720.691225][T30547] ? __fget+0x381/0x550 [ 720.695405][T30547] ? ksys_dup3+0x3e0/0x3e0 [ 720.699864][T30547] ? tomoyo_file_ioctl+0x23/0x30 [ 720.704832][T30547] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 720.711208][T30547] ? security_file_ioctl+0x93/0xc0 [ 720.716688][T30547] ksys_ioctl+0xab/0xd0 [ 720.720862][T30547] __x64_sys_ioctl+0x73/0xb0 [ 720.725792][T30547] do_syscall_64+0x103/0x610 [ 720.730405][T30547] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 720.736290][T30547] RIP: 0033:0x458c29 [ 720.740184][T30547] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 720.760060][T30547] RSP: 002b:00007f7784fa8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 720.768493][T30547] RAX: ffffffffffffffda RBX: 00007f7784fa8c90 RCX: 0000000000458c29 [ 720.776475][T30547] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 720.784438][T30547] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 720.792403][T30547] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7784fa96d4 [ 720.800495][T30547] R13: 00000000004c349c R14: 00000000004d6950 R15: 0000000000000005 [ 720.811051][T30447] binder: BINDER_SET_CONTEXT_MGR already set [ 720.820084][T30447] binder: 30443:30447 ioctl 40046207 0 returned -16 11:53:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x4c000000, 0x0, &(0x7f0000000780)}) 11:53:51 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:51 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x57, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:51 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x2f00, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:51 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 720.826935][T30681] binder: 30443:30681 unknown command 536871040 [ 720.833883][T30681] binder: 30443:30681 ioctl c0306201 20000440 returned -22 11:53:51 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5800]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:51 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x2, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:51 executing program 3 (fault-call:5 fault-nth:5): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7c, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 720.952696][T30714] binder: 30710:30714 unknown command 536871040 11:53:51 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 721.007615][T30714] binder: 30710:30714 ioctl c0306201 20000440 returned -22 [ 721.018432][T30734] binder: 30710:30734 BC_INCREFS_DONE u0000000000000000 no match [ 721.070357][T30743] input: syz1 as /devices/virtual/input/input56 [ 721.080131][T30734] binder: 30710:30734 unknown command 536871040 11:53:51 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:51 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:51 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x3, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 721.114399][T30734] binder: 30710:30734 ioctl c0306201 20000440 returned -22 [ 721.129990][T30743] FAULT_INJECTION: forcing a failure. [ 721.129990][T30743] name failslab, interval 1, probability 0, space 0, times 0 [ 721.174427][T30743] CPU: 0 PID: 30743 Comm: syz-executor.3 Not tainted 5.1.0-rc6 #80 [ 721.182457][T30743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 721.192535][T30743] Call Trace: [ 721.195854][T30743] dump_stack+0x172/0x1f0 [ 721.200219][T30743] should_fail.cold+0xa/0x15 [ 721.205025][T30743] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 721.211147][T30743] ? ___might_sleep+0x163/0x280 [ 721.216019][T30743] __should_failslab+0x121/0x190 11:53:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x60000000, 0x0, &(0x7f0000000780)}) 11:53:51 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x1000000, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) [ 721.220979][T30743] should_failslab+0x9/0x14 [ 721.225509][T30743] kmem_cache_alloc_node+0x264/0x710 [ 721.230832][T30743] ? find_held_lock+0x35/0x130 [ 721.235640][T30743] __alloc_skb+0xd5/0x5e0 [ 721.239994][T30743] ? skb_trim+0x190/0x190 [ 721.244370][T30743] ? kasan_check_read+0x11/0x20 [ 721.249251][T30743] alloc_uevent_skb+0x83/0x1e2 [ 721.254040][T30743] kobject_uevent_env+0xa63/0x1030 [ 721.259210][T30743] ? wait_for_completion+0x440/0x440 [ 721.264526][T30743] kobject_uevent+0x20/0x26 [ 721.269052][T30743] device_del+0x758/0xc40 [ 721.273419][T30743] ? __device_links_no_driver+0x250/0x250 [ 721.274132][T30819] binder: 30818:30819 unknown command 536871040 [ 721.279161][T30743] ? _raw_spin_unlock_irq+0x28/0x90 [ 721.279275][T30743] ? __input_unregister_device+0x153/0x4a0 [ 721.279288][T30743] ? _raw_spin_unlock_irq+0x28/0x90 [ 721.279310][T30743] cdev_device_del+0x1a/0x80 [ 721.279326][T30743] evdev_disconnect+0x42/0xb0 [ 721.279341][T30743] __input_unregister_device+0x200/0x4a0 [ 721.279360][T30743] input_unregister_device+0xc5/0x110 11:53:52 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x4, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 721.279394][T30743] uinput_destroy_device+0x1f4/0x250 [ 721.300414][T30819] binder: 30818:30819 ioctl c0306201 20000440 returned -22 [ 721.301944][T30743] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 721.301962][T30743] ? tomoyo_domain+0xc5/0x160 [ 721.301980][T30743] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 721.302003][T30743] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 721.313305][T30819] binder: 30818:30819 BC_INCREFS_DONE u0000000000000000 no match [ 721.316965][T30743] ? tomoyo_path_number_perm+0x263/0x520 11:53:52 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 721.316984][T30743] ? __lockdep_free_key_range+0x120/0x120 [ 721.317001][T30743] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 721.317014][T30743] ? __lockdep_free_key_range+0x120/0x120 [ 721.317040][T30743] ? __fget+0x35a/0x550 [ 721.392875][T30743] uinput_ioctl+0x4a/0x60 [ 721.397268][T30743] ? uinput_compat_ioctl+0x90/0x90 [ 721.402402][T30743] do_vfs_ioctl+0xd6e/0x1390 [ 721.407016][T30743] ? ioctl_preallocate+0x210/0x210 [ 721.412152][T30743] ? __fget+0x381/0x550 [ 721.416336][T30743] ? ksys_dup3+0x3e0/0x3e0 [ 721.420773][T30743] ? tomoyo_file_ioctl+0x23/0x30 [ 721.425727][T30743] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 721.432019][T30743] ? security_file_ioctl+0x93/0xc0 [ 721.437163][T30743] ksys_ioctl+0xab/0xd0 [ 721.441379][T30743] __x64_sys_ioctl+0x73/0xb0 [ 721.446007][T30743] do_syscall_64+0x103/0x610 [ 721.450656][T30743] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 721.456570][T30743] RIP: 0033:0x458c29 11:53:52 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x6, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 721.460474][T30743] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 721.480181][T30743] RSP: 002b:00007f7784fa8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 721.488635][T30743] RAX: ffffffffffffffda RBX: 00007f7784fa8c90 RCX: 0000000000458c29 [ 721.496627][T30743] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 721.504736][T30743] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 721.512928][T30743] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7784fa96d4 11:53:52 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 721.520955][T30743] R13: 00000000004c349c R14: 00000000004d6950 R15: 0000000000000005 11:53:52 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x7, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:52 executing program 3 (fault-call:5 fault-nth:6): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7c, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 11:53:52 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:52 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:52 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x2000000, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:52 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x58, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 721.818193][T30947] input: syz1 as /devices/virtual/input/input57 [ 721.887589][T30952] FAULT_INJECTION: forcing a failure. [ 721.887589][T30952] name failslab, interval 1, probability 0, space 0, times 0 [ 721.948077][T30952] CPU: 0 PID: 30952 Comm: syz-executor.3 Not tainted 5.1.0-rc6 #80 [ 721.956034][T30952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 721.966117][T30952] Call Trace: [ 721.969453][T30952] dump_stack+0x172/0x1f0 [ 721.973842][T30952] should_fail.cold+0xa/0x15 [ 721.978483][T30952] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 721.984336][T30952] ? ___might_sleep+0x163/0x280 [ 721.989215][T30952] __should_failslab+0x121/0x190 [ 721.994182][T30952] should_failslab+0x9/0x14 [ 721.998704][T30952] kmem_cache_alloc_node_trace+0x270/0x720 [ 722.004574][T30952] __kmalloc_node_track_caller+0x3d/0x70 [ 722.010355][T30952] __kmalloc_reserve.isra.0+0x40/0xf0 [ 722.015858][T30952] __alloc_skb+0x10b/0x5e0 [ 722.020308][T30952] ? skb_trim+0x190/0x190 [ 722.024639][T30952] ? kasan_check_read+0x11/0x20 [ 722.029513][T30952] alloc_uevent_skb+0x83/0x1e2 [ 722.034280][T30952] kobject_uevent_env+0xa63/0x1030 [ 722.039395][T30952] ? wait_for_completion+0x440/0x440 [ 722.044694][T30952] kobject_uevent+0x20/0x26 [ 722.049222][T30952] device_del+0x758/0xc40 [ 722.053602][T30952] ? __device_links_no_driver+0x250/0x250 [ 722.059337][T30952] ? _raw_spin_unlock_irq+0x28/0x90 [ 722.064549][T30952] ? __input_unregister_device+0x153/0x4a0 [ 722.070547][T30952] ? _raw_spin_unlock_irq+0x28/0x90 [ 722.075795][T30952] cdev_device_del+0x1a/0x80 [ 722.080609][T30952] evdev_disconnect+0x42/0xb0 [ 722.085390][T30952] __input_unregister_device+0x200/0x4a0 [ 722.091167][T30952] input_unregister_device+0xc5/0x110 [ 722.096631][T30952] uinput_destroy_device+0x1f4/0x250 [ 722.101925][T30952] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 722.107835][T30952] ? tomoyo_domain+0xc5/0x160 [ 722.112554][T30952] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 722.118710][T30952] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 722.126728][T30952] ? tomoyo_path_number_perm+0x263/0x520 [ 722.132419][T30952] ? __lockdep_free_key_range+0x120/0x120 [ 722.138161][T30952] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 722.144000][T30952] ? __lockdep_free_key_range+0x120/0x120 [ 722.149917][T30952] ? __fget+0x35a/0x550 [ 722.154390][T30952] uinput_ioctl+0x4a/0x60 [ 722.158739][T30952] ? uinput_compat_ioctl+0x90/0x90 [ 722.163887][T30952] do_vfs_ioctl+0xd6e/0x1390 [ 722.168483][T30952] ? ioctl_preallocate+0x210/0x210 [ 722.173710][T30952] ? __fget+0x381/0x550 [ 722.177903][T30952] ? ksys_dup3+0x3e0/0x3e0 [ 722.182499][T30952] ? tomoyo_file_ioctl+0x23/0x30 [ 722.187709][T30952] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 722.194608][T30952] ? security_file_ioctl+0x93/0xc0 [ 722.199730][T30952] ksys_ioctl+0xab/0xd0 [ 722.204006][T30952] __x64_sys_ioctl+0x73/0xb0 [ 722.208940][T30952] do_syscall_64+0x103/0x610 [ 722.213608][T30952] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 722.219518][T30952] RIP: 0033:0x458c29 [ 722.225568][T30952] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 722.247234][T30952] RSP: 002b:00007f7784f87c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 722.256722][T30952] RAX: ffffffffffffffda RBX: 00007f7784f87c90 RCX: 0000000000458c29 [ 722.266513][T30952] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 722.274819][T30952] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 722.290753][T30952] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7784f886d4 [ 722.304045][T30952] R13: 00000000004c349c R14: 00000000004d6950 R15: 0000000000000005 [ 722.334261][T31059] binder: 30818:31059 unknown command 536871040 [ 722.334265][T30819] binder: BINDER_SET_CONTEXT_MGR already set 11:53:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x68000000, 0x0, &(0x7f0000000780)}) 11:53:53 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:53 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:53 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x60, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:53 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x3000000, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) [ 722.334284][T30819] binder: 30818:30819 ioctl 40046207 0 returned -16 [ 722.355885][T31059] binder: 30818:31059 ioctl c0306201 20000440 returned -22 11:53:53 executing program 3 (fault-call:5 fault-nth:7): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7c, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 11:53:53 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 722.479253][T31074] binder: 31073:31074 unknown command 536871040 [ 722.485872][T31074] binder: 31073:31074 ioctl c0306201 20000440 returned -22 11:53:53 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x300, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:53 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 722.571675][T31113] input: syz1 as /devices/virtual/input/input58 [ 722.585568][T31148] binder: 31073:31148 BC_INCREFS_DONE u0000000000000000 no match [ 722.671746][T31148] binder: 31073:31148 unknown command 536871040 [ 722.679176][T31113] FAULT_INJECTION: forcing a failure. [ 722.679176][T31113] name failslab, interval 1, probability 0, space 0, times 0 [ 722.707468][T31113] CPU: 1 PID: 31113 Comm: syz-executor.3 Not tainted 5.1.0-rc6 #80 [ 722.718142][T31113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 722.728523][T31113] Call Trace: [ 722.728556][T31113] dump_stack+0x172/0x1f0 [ 722.728587][T31113] should_fail.cold+0xa/0x15 [ 722.728615][T31113] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 722.736706][T31113] ? ___might_sleep+0x163/0x280 [ 722.736729][T31113] __should_failslab+0x121/0x190 [ 722.736749][T31113] should_failslab+0x9/0x14 [ 722.765135][T31113] kmem_cache_alloc+0x2b2/0x6f0 [ 722.770280][T31113] ? refcount_dec_and_mutex_lock+0x90/0x90 [ 722.776562][T31113] ? lock_downgrade+0x880/0x880 [ 722.781543][T31113] skb_clone+0x150/0x3b0 [ 722.786956][T31113] netlink_broadcast_filtered+0x870/0xb20 [ 722.793531][T31113] netlink_broadcast+0x3a/0x50 [ 722.795086][T31148] binder: 31073:31148 ioctl c0306201 20000440 returned -22 [ 722.798682][T31113] kobject_uevent_env+0xa94/0x1030 [ 722.798702][T31113] ? wait_for_completion+0x440/0x440 [ 722.798727][T31113] kobject_uevent+0x20/0x26 [ 722.798743][T31113] device_del+0x758/0xc40 [ 722.798766][T31113] ? __device_links_no_driver+0x250/0x250 [ 722.798783][T31113] ? _raw_spin_unlock_irq+0x28/0x90 [ 722.798807][T31113] ? __input_unregister_device+0x153/0x4a0 [ 722.846002][T31113] ? _raw_spin_unlock_irq+0x28/0x90 [ 722.851686][T31113] cdev_device_del+0x1a/0x80 [ 722.856735][T31113] evdev_disconnect+0x42/0xb0 [ 722.861913][T31113] __input_unregister_device+0x200/0x4a0 11:53:53 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:53 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:53 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 722.868402][T31113] input_unregister_device+0xc5/0x110 [ 722.875249][T31113] uinput_destroy_device+0x1f4/0x250 [ 722.881712][T31113] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 722.889476][T31113] ? tomoyo_domain+0xc5/0x160 [ 722.895948][T31113] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 722.902915][T31113] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 722.909470][T31113] ? tomoyo_path_number_perm+0x263/0x520 [ 722.916156][T31113] ? __lockdep_free_key_range+0x120/0x120 11:53:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x6c000000, 0x0, &(0x7f0000000780)}) 11:53:53 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8d]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 722.922317][T31113] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 722.928662][T31113] ? __lockdep_free_key_range+0x120/0x120 [ 722.935114][T31113] ? __fget+0x35a/0x550 [ 722.939957][T31113] uinput_ioctl+0x4a/0x60 [ 722.944408][T31113] ? uinput_compat_ioctl+0x90/0x90 [ 722.947696][T31200] binder: 31199:31200 unknown command 536871040 [ 722.949641][T31113] do_vfs_ioctl+0xd6e/0x1390 [ 722.949666][T31113] ? ioctl_preallocate+0x210/0x210 [ 722.949683][T31113] ? __fget+0x381/0x550 [ 722.949711][T31113] ? ksys_dup3+0x3e0/0x3e0 [ 722.956741][T31200] binder: 31199:31200 ioctl c0306201 20000440 returned -22 [ 722.961294][T31113] ? tomoyo_file_ioctl+0x23/0x30 [ 722.961313][T31113] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 722.961330][T31113] ? security_file_ioctl+0x93/0xc0 [ 722.961351][T31113] ksys_ioctl+0xab/0xd0 [ 722.961380][T31113] __x64_sys_ioctl+0x73/0xb0 [ 722.961403][T31113] do_syscall_64+0x103/0x610 [ 722.970512][T31200] binder: 31199:31200 BC_INCREFS_DONE u0000000000000000 no match [ 722.971387][T31113] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 722.971401][T31113] RIP: 0033:0x458c29 [ 722.971432][T31113] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 723.060967][T31113] RSP: 002b:00007f7784fa8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 11:53:53 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x600, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:53 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x4000000, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:53 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}, [], "800000e77f000400"}}}}}}}, 0x0) [ 723.071069][T31113] RAX: ffffffffffffffda RBX: 00007f7784fa8c90 RCX: 0000000000458c29 [ 723.080610][T31113] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 723.089107][T31113] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 723.098016][T31113] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7784fa96d4 [ 723.107238][T31113] R13: 00000000004c349c R14: 00000000004d6950 R15: 0000000000000005 11:53:53 executing program 3 (fault-call:5 fault-nth:8): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7c, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 11:53:53 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:53 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:53 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x700, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:54 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x5000000, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 11:53:54 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:54 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x3f00, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 723.330396][T31315] input: syz1 as /devices/virtual/input/input59 [ 723.397739][T31315] FAULT_INJECTION: forcing a failure. [ 723.397739][T31315] name failslab, interval 1, probability 0, space 0, times 0 [ 723.435450][T31315] CPU: 0 PID: 31315 Comm: syz-executor.3 Not tainted 5.1.0-rc6 #80 [ 723.444980][T31315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 723.456676][T31315] Call Trace: [ 723.460461][T31315] dump_stack+0x172/0x1f0 [ 723.465355][T31315] should_fail.cold+0xa/0x15 [ 723.470294][T31315] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 723.477936][T31315] ? ___might_sleep+0x163/0x280 [ 723.482981][T31315] __should_failslab+0x121/0x190 [ 723.488047][T31315] should_failslab+0x9/0x14 [ 723.493202][T31315] __kmalloc+0x2dc/0x740 [ 723.497802][T31315] ? kobject_uevent_env+0x2fb/0x1030 [ 723.503641][T31315] ? rcu_read_lock_sched_held+0x110/0x130 [ 723.503659][T31315] ? kobject_get_path+0xc4/0x1b0 [ 723.503678][T31315] kobject_get_path+0xc4/0x1b0 [ 723.503705][T31315] kobject_uevent_env+0x31f/0x1030 [ 723.514863][T31315] ? wait_for_completion+0x440/0x440 [ 723.514897][T31315] kobject_uevent+0x20/0x26 [ 723.514914][T31315] device_del+0x758/0xc40 [ 723.514939][T31315] ? __device_links_no_driver+0x250/0x250 [ 723.514962][T31315] ? trace_hardirqs_on+0x67/0x230 [ 723.525302][T31315] __input_unregister_device+0x3a4/0x4a0 [ 723.525325][T31315] input_unregister_device+0xc5/0x110 [ 723.525341][T31315] uinput_destroy_device+0x1f4/0x250 [ 723.525368][T31315] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 723.535867][T31315] ? tomoyo_domain+0xc5/0x160 [ 723.535898][T31315] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 723.535919][T31315] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 723.535932][T31315] ? tomoyo_path_number_perm+0x263/0x520 [ 723.535954][T31315] ? __lockdep_free_key_range+0x120/0x120 [ 723.577591][T31315] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 723.589494][T31315] ? __lockdep_free_key_range+0x120/0x120 [ 723.589523][T31315] ? __fget+0x35a/0x550 [ 723.589543][T31315] uinput_ioctl+0x4a/0x60 [ 723.589555][T31315] ? uinput_compat_ioctl+0x90/0x90 [ 723.589572][T31315] do_vfs_ioctl+0xd6e/0x1390 [ 723.589591][T31315] ? ioctl_preallocate+0x210/0x210 [ 723.589616][T31315] ? __fget+0x381/0x550 [ 723.649480][T31315] ? ksys_dup3+0x3e0/0x3e0 [ 723.653975][T31315] ? tomoyo_file_ioctl+0x23/0x30 [ 723.659210][T31315] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 723.666016][T31315] ? security_file_ioctl+0x93/0xc0 [ 723.671493][T31315] ksys_ioctl+0xab/0xd0 [ 723.675698][T31315] __x64_sys_ioctl+0x73/0xb0 [ 723.680423][T31315] do_syscall_64+0x103/0x610 [ 723.685060][T31315] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 723.691320][T31315] RIP: 0033:0x458c29 [ 723.695335][T31315] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 723.716045][T31315] RSP: 002b:00007f7784fa8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 723.725366][T31315] RAX: ffffffffffffffda RBX: 00007f7784fa8c90 RCX: 0000000000458c29 [ 723.733810][T31315] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 723.742122][T31315] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 723.750159][T31315] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7784fa96d4 [ 723.758738][T31315] R13: 00000000004c349c R14: 00000000004d6950 R15: 0000000000000005 [ 723.775597][T31422] binder: 31199:31422 unknown command 536871040 [ 723.783923][T31422] binder: 31199:31422 ioctl c0306201 20000440 returned -22 [ 723.817687][T31314] ================================================================== [ 723.827106][T31314] BUG: KASAN: use-after-free in string+0x208/0x230 [ 723.833760][T31314] Read of size 1 at addr ffff88808b724180 by task syz-executor.3/31314 [ 723.842774][T31314] [ 723.845129][T31314] CPU: 0 PID: 31314 Comm: syz-executor.3 Not tainted 5.1.0-rc6 #80 [ 723.853543][T31314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 723.864712][T31314] Call Trace: [ 723.868125][T31314] dump_stack+0x172/0x1f0 [ 723.873040][T31314] ? string+0x208/0x230 [ 723.873072][T31314] print_address_description.cold+0x7c/0x20d [ 723.873086][T31314] ? string+0x208/0x230 [ 723.873106][T31314] ? string+0x208/0x230 [ 723.893759][T31314] kasan_report.cold+0x1b/0x40 [ 723.899423][T31314] ? string+0x208/0x230 [ 723.899443][T31314] __asan_report_load1_noabort+0x14/0x20 [ 723.899458][T31314] string+0x208/0x230 [ 723.899473][T31314] ? widen_string+0x2e0/0x2e0 [ 723.899488][T31314] ? console_unlock+0x68b/0xed0 [ 723.899503][T31314] ? find_held_lock+0x35/0x130 [ 723.899524][T31314] vsnprintf+0xbfc/0x1af0 [ 723.899545][T31314] ? pointer+0xa30/0xa30 [ 723.899561][T31314] ? string+0x1cc/0x230 [ 723.899583][T31314] add_uevent_var+0x14d/0x310 [ 723.949918][T31314] ? cleanup_uevent_env+0x50/0x50 [ 723.949936][T31314] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 723.949964][T31314] ? input_dev_uevent+0x110/0x890 11:53:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627300010000c8"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x74000000, 0x0, &(0x7f0000000780)}) 11:53:54 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:54 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x4, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x4000, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 11:53:54 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000099f8c)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, [0xe80]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff84, 0x0, @loopback, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff]}, [], "800000e77f000400"}}}}}}}, 0x0) 11:53:54 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x6000000, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x2f, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) [ 723.960461][T31429] binder: 31428:31429 unknown command 536871040 [ 723.961339][T31314] input_dev_uevent+0x163/0x890 [ 723.961356][T31314] ? input_add_uevent_bm_var+0x150/0x150 [ 723.961391][T31314] dev_uevent+0x312/0x580 [ 723.978325][T31314] ? device_get_devnode+0x2e0/0x2e0 [ 723.978341][T31314] ? kobject_uevent_env+0x2fb/0x1030 [ 723.978357][T31314] ? rcu_read_lock_sched_held+0x110/0x130 [ 723.978375][T31314] ? kobject_uevent_env+0x37d/0x1030 [ 723.978388][T31314] ? device_get_devnode+0x2e0/0x2e0 [ 723.978403][T31314] kobject_uevent_env+0x487/0x1030 [ 723.978417][T31314] ? release_nodes+0x548/0x9c0 [ 723.978446][T31314] kobject_uevent+0x20/0x26 [ 723.993528][T31429] binder: 31428:31429 ioctl c0306201 20000440 returned -22 [ 723.994263][T31314] kobject_put.cold+0x177/0x2ec [ 723.994284][T31314] ? evdev_handle_set_keycode_v2+0x140/0x140 [ 723.994310][T31314] put_device+0x20/0x30 [ 724.017289][T31431] binder: 31428:31431 BC_INCREFS_DONE u0000000000000000 no match [ 724.021789][T31314] evdev_free+0x51/0x70 [ 724.021811][T31314] device_release+0x7d/0x210 [ 724.021876][T31314] kobject_put.cold+0x28f/0x2ec [ 724.021899][T31314] cdev_default_release+0x41/0x50 [ 724.021920][T31314] kobject_put.cold+0x28f/0x2ec [ 724.075633][T31429] binder: 31428:31429 unknown command 536871040 [ 724.077910][T31314] cdev_put.part.0+0x39/0x50 [ 724.077927][T31314] cdev_put+0x20/0x30 [ 724.077941][T31314] __fput+0x6df/0x8d0 [ 724.077963][T31314] ____fput+0x16/0x20 [ 724.077976][T31314] task_work_run+0x14a/0x1c0 [ 724.077999][T31314] exit_to_usermode_loop+0x273/0x2c0 [ 724.078018][T31314] do_syscall_64+0x52d/0x610 [ 724.078038][T31314] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 724.078050][T31314] RIP: 0033:0x4129e1 [ 724.078074][T31314] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 1a 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 724.095429][T31429] binder: 31428:31429 ioctl c0306201 20000440 returned -22 [ 724.100198][T31314] RSP: 002b:0000000000a4fbd0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 724.100212][T31314] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00000000004129e1 [ 724.100219][T31314] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 724.100229][T31314] RBP: 000000000073c900 R08: 00000000dd70df62 R09: 00000000dd70df66 [ 724.100238][T31314] R10: 0000000000a4fca0 R11: 0000000000000293 R12: 0000000000000001 [ 724.100247][T31314] R13: 000000000073c900 R14: 00000000000b09bf R15: 000000000073bf0c [ 724.100270][T31314] [ 724.100278][T31314] Allocated by task 31315: [ 724.100300][T31314] save_stack+0x45/0xd0 [ 724.100315][T31314] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 724.100328][T31314] kasan_kmalloc+0x9/0x10 [ 724.100340][T31314] __kmalloc_track_caller+0x158/0x740 [ 724.100350][T31314] kstrndup+0x5f/0xf0 [ 724.100362][T31314] uinput_dev_setup+0x1d4/0x310 [ 724.100374][T31314] uinput_ioctl_handler.isra.0+0x12b8/0x1cc0 [ 724.100384][T31314] uinput_ioctl+0x4a/0x60 [ 724.100405][T31314] do_vfs_ioctl+0xd6e/0x1390 [ 724.229064][T31314] ksys_ioctl+0xab/0xd0 [ 724.249950][T31314] __x64_sys_ioctl+0x73/0xb0 [ 724.249965][T31314] do_syscall_64+0x103/0x610 [ 724.249979][T31314] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 724.249984][T31314] [ 724.249992][T31314] Freed by task 31315: [ 724.250008][T31314] save_stack+0x45/0xd0 [ 724.250022][T31314] __kasan_slab_free+0x102/0x150 [ 724.250034][T31314] kasan_slab_free+0xe/0x10 [ 724.250046][T31314] kfree+0xcf/0x230 [ 724.250058][T31314] uinput_destroy_device+0xf8/0x250 [ 724.250069][T31314] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 724.250078][T31314] uinput_ioctl+0x4a/0x60 [ 724.250090][T31314] do_vfs_ioctl+0xd6e/0x1390 [ 724.250102][T31314] ksys_ioctl+0xab/0xd0 [ 724.250113][T31314] __x64_sys_ioctl+0x73/0xb0 [ 724.250124][T31314] do_syscall_64+0x103/0x610 [ 724.250136][T31314] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 724.250140][T31314] [ 724.250151][T31314] The buggy address belongs to the object at ffff88808b724180 [ 724.250151][T31314] which belongs to the cache kmalloc-32 of size 32 [ 724.250163][T31314] The buggy address is located 0 bytes inside of [ 724.250163][T31314] 32-byte region [ffff88808b724180, ffff88808b7241a0) [ 724.250167][T31314] The buggy address belongs to the page: [ 724.250180][T31314] page:ffffea00022dc900 count:1 mapcount:0 mapping:ffff88812c3f01c0 index:0xffff88808b724fc1 [ 724.250192][T31314] flags: 0x1fffc0000000200(slab) [ 724.250210][T31314] raw: 01fffc0000000200 ffffea000290ffc8 ffffea0002747908 ffff88812c3f01c0 [ 724.250226][T31314] raw: ffff88808b724fc1 ffff88808b724000 000000010000003f 0000000000000000 [ 724.434960][T31314] page dumped because: kasan: bad access detected [ 724.441573][T31314] [ 724.443966][T31314] Memory state around the buggy address: [ 724.450097][T31314] ffff88808b724080: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 724.458400][T31314] ffff88808b724100: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 724.458411][T31314] >ffff88808b724180: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 724.458416][T31314] ^ [ 724.458425][T31314] ffff88808b724200: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 724.458435][T31314] ffff88808b724280: 00 fc fc fc fc fc fc fc fb fb fb fb fc fc fc fc [ 724.458440][T31314] ================================================================== [ 724.458445][T31314] Disabling lock debugging due to kernel taint [ 724.471691][T31314] Kernel panic - not syncing: panic_on_warn set ... [ 724.492995][ T3876] kobject: 'loop4' (0000000075139de5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 724.496700][T31314] CPU: 0 PID: 31314 Comm: syz-executor.3 Tainted: G B 5.1.0-rc6 #80 [ 724.496708][T31314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 724.496713][T31314] Call Trace: [ 724.496736][T31314] dump_stack+0x172/0x1f0 [ 724.496759][T31314] panic+0x2cb/0x65c [ 724.509957][ T3876] kobject: 'loop1' (00000000c82e9417): kobject_uevent_env [ 724.511533][T31314] ? __warn_printk+0xf3/0xf3 [ 724.511550][T31314] ? string+0x208/0x230 [ 724.511572][T31314] ? preempt_schedule+0x4b/0x60 [ 724.520438][ T3876] kobject: 'loop1' (00000000c82e9417): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 724.531775][T31314] ? ___preempt_schedule+0x16/0x18 [ 724.531791][T31314] ? trace_hardirqs_on+0x5e/0x230 [ 724.531808][T31314] ? string+0x208/0x230 [ 724.531820][T31314] end_report+0x47/0x4f [ 724.531875][T31314] ? string+0x208/0x230 [ 724.531887][T31314] kasan_report.cold+0xe/0x40 [ 724.531901][T31314] ? string+0x208/0x230 [ 724.531916][T31314] __asan_report_load1_noabort+0x14/0x20 [ 724.531927][T31314] string+0x208/0x230 [ 724.531942][T31314] ? widen_string+0x2e0/0x2e0 [ 724.531956][T31314] ? console_unlock+0x68b/0xed0 [ 724.531969][T31314] ? find_held_lock+0x35/0x130 [ 724.531992][T31314] vsnprintf+0xbfc/0x1af0 [ 724.627577][ T3876] kobject: 'loop0' (000000004490c68a): kobject_uevent_env [ 724.631162][T31314] ? pointer+0xa30/0xa30 [ 724.631185][T31314] ? string+0x1cc/0x230 [ 724.643303][ T3876] kobject: 'loop0' (000000004490c68a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 724.646246][T31314] add_uevent_var+0x14d/0x310 [ 724.646266][T31314] ? cleanup_uevent_env+0x50/0x50 [ 724.698366][T31314] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 724.705193][T31314] ? input_dev_uevent+0x110/0x890 [ 724.710517][T31314] input_dev_uevent+0x163/0x890 [ 724.715565][T31314] ? input_add_uevent_bm_var+0x150/0x150 [ 724.721239][T31314] dev_uevent+0x312/0x580 [ 724.725794][T31314] ? device_get_devnode+0x2e0/0x2e0 [ 724.731483][T31314] ? kobject_uevent_env+0x2fb/0x1030 [ 724.737443][T31314] ? rcu_read_lock_sched_held+0x110/0x130 [ 724.743561][T31314] ? kobject_uevent_env+0x37d/0x1030 [ 724.749323][T31314] ? device_get_devnode+0x2e0/0x2e0 [ 724.754976][T31314] kobject_uevent_env+0x487/0x1030 [ 724.760307][T31314] ? release_nodes+0x548/0x9c0 [ 724.765107][T31314] kobject_uevent+0x20/0x26 [ 724.769787][T31314] kobject_put.cold+0x177/0x2ec [ 724.774752][T31314] ? evdev_handle_set_keycode_v2+0x140/0x140 [ 724.781155][T31314] put_device+0x20/0x30 [ 724.786052][T31314] evdev_free+0x51/0x70 [ 724.790613][T31314] device_release+0x7d/0x210 [ 724.795932][T31314] kobject_put.cold+0x28f/0x2ec [ 724.801042][T31314] cdev_default_release+0x41/0x50 [ 724.806285][T31314] kobject_put.cold+0x28f/0x2ec [ 724.811265][T31314] cdev_put.part.0+0x39/0x50 [ 724.815971][T31314] cdev_put+0x20/0x30 [ 724.820273][T31314] __fput+0x6df/0x8d0 [ 724.824387][T31314] ____fput+0x16/0x20 [ 724.828485][T31314] task_work_run+0x14a/0x1c0 [ 724.833108][T31314] exit_to_usermode_loop+0x273/0x2c0 [ 724.838748][T31314] do_syscall_64+0x52d/0x610 [ 724.843615][T31314] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 724.849878][T31314] RIP: 0033:0x4129e1 [ 724.854162][T31314] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 1a 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 724.874413][T31314] RSP: 002b:0000000000a4fbd0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 724.884653][T31314] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00000000004129e1 [ 724.893251][T31314] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 724.903271][T31314] RBP: 000000000073c900 R08: 00000000dd70df62 R09: 00000000dd70df66 [ 724.911383][T31314] R10: 0000000000a4fca0 R11: 0000000000000293 R12: 0000000000000001 [ 724.919620][T31314] R13: 000000000073c900 R14: 00000000000b09bf R15: 000000000073bf0c [ 724.929223][T31314] Kernel Offset: disabled [ 724.933690][T31314] Rebooting in 86400 seconds..