220 [ 880.364258][T15015] tomoyo_realpath_from_path+0x98/0x3b0 [ 880.369918][T15015] tomoyo_path_number_perm+0xc1/0x2d0 [ 880.375292][T15015] ? __rcu_read_unlock+0x51/0x220 [ 880.380791][T15015] tomoyo_file_ioctl+0x1c/0x20 [ 880.385704][T15015] security_file_ioctl+0x45/0x90 [ 880.390658][T15015] __se_sys_ioctl+0x48/0x140 [ 880.395772][T15015] __x64_sys_ioctl+0x3f/0x50 [ 880.400449][T15015] do_syscall_64+0x39/0x80 [ 880.405259][T15015] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 880.411576][T15015] RIP: 0033:0x45deb9 [ 880.416093][T15015] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 880.435789][T15015] RSP: 002b:00007f6902cfdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 880.444225][T15015] RAX: ffffffffffffffda RBX: 0000000000008a40 RCX: 000000000045deb9 [ 880.452218][T15015] RDX: 0000000020000400 RSI: 00000000c0306201 RDI: 0000000000000003 [ 880.461342][T15015] RBP: 00007f6902cfdca0 R08: 0000000000000000 R09: 0000000000000000 [ 880.469312][T15015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 880.477833][T15015] R13: 00007ffc8204749f R14: 00007f6902cfe9c0 R15: 000000000118bf2c 21:06:16 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x10, 0x0}) [ 880.506133][T15024] binder: 15021:15024 ioctl c0306201 20000400 returned -14 21:06:16 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 880.581458][T15027] binder: 15026:15027 ioctl c0306201 20000400 returned -14 [ 880.605772][T15029] binder: 15028:15029 ioctl c0306201 0 returned -14 [ 880.628302][T15029] binder: 15028:15029 ioctl 941c 0 returned -22 [ 880.659724][T15029] binder: 15028:15029 ioctl c0306201 0 returned -14 [ 880.671134][T15032] binder: 15028:15032 ioctl 941c 0 returned -22 [ 880.873893][T15015] ERROR: Out of memory at tomoyo_realpath_from_path. [ 880.876301][T10131] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 880.887082][T15015] binder: 15011:15015 unknown command 0 [ 880.903056][T14994] ERROR: Out of memory at tomoyo_realpath_from_path. [ 880.917935][T15015] binder: 15011:15015 ioctl c0306201 20000400 returned -22 [ 880.919221][T10131] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 880.927373][T14994] binder: 14990:14994 unknown command 0 [ 880.949834][T10131] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.954029][T14994] binder: 14990:14994 ioctl c0306201 20000400 returned -22 [ 880.977514][T10131] usb 3-1: config 0 descriptor?? [ 881.452191][T10131] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 881.465773][T10131] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0008/input/input12 [ 881.543888][T10131] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 882.215244][ T42] usb 3-1: USB disconnect, device number 11 21:06:18 executing program 2: r0 = socket(0x29, 0x4, 0xc2) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000)=0x68f49f2d, 0x4) syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x1800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = fcntl$dupfd(r2, 0xe6fcc172bac07660, r3) setsockopt$llc_int(r4, 0x10c, 0x8, &(0x7f0000004880)=0xaf2d, 0x4) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) syz_usb_ep_write(r6, 0x0, 0x59, &(0x7f0000000180)="9ae33c5fd8b0c0eac100b89d5246d4f3636253383b4b3e90230cdf0301cd07f86de78251c2ffff1f9d090000000000000079ce9a135f5638456c2a0123f06fea7f1c07df6daeda54d0de1bded60cbd1432516949e075165cc0") 21:06:18 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x11, 0x0}) 21:06:18 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x1802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:06:18 executing program 1 (fault-call:4 fault-nth:1): r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:18 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 882.773600][T15087] binder: 15082:15087 ioctl c0306201 20000400 returned -14 [ 882.785087][T15088] FAULT_INJECTION: forcing a failure. [ 882.785087][T15088] name failslab, interval 1, probability 0, space 0, times 0 [ 882.813094][T15090] binder: 15085:15090 unknown command 0 21:06:18 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x12, 0x0}) 21:06:18 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x2, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 882.814244][T15089] binder: 15083:15089 ioctl c0306201 0 returned -14 [ 882.818656][T15090] binder: 15085:15090 ioctl c0306201 20000400 returned -22 [ 882.886891][T15088] CPU: 0 PID: 15088 Comm: syz-executor.1 Not tainted 5.10.0-rc1-syzkaller #0 [ 882.888633][T15097] binder: 15096:15097 ioctl c0306201 20000400 returned -14 [ 882.895711][T15088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 882.895714][T15088] Call Trace: [ 882.895734][T15088] dump_stack+0x116/0x15d [ 882.895745][T15088] should_fail+0x231/0x240 [ 882.895757][T15088] __should_failslab+0x81/0x90 [ 882.895767][T15088] should_failslab+0x5/0x20 [ 882.895777][T15088] slab_pre_alloc_hook+0x20/0xb0 [ 882.895785][T15088] __kmalloc+0x73/0x2c0 [ 882.895817][T15088] ? tomoyo_encode2+0x1d3/0x350 [ 882.895828][T15088] tomoyo_encode2+0x1d3/0x350 [ 882.895840][T15088] tomoyo_realpath_from_path+0x35e/0x3b0 [ 882.895859][T15088] tomoyo_path_number_perm+0xc1/0x2d0 [ 882.967489][T15088] ? __rcu_read_unlock+0x51/0x220 [ 882.972534][T15088] tomoyo_file_ioctl+0x1c/0x20 [ 882.977320][T15088] security_file_ioctl+0x45/0x90 [ 882.982319][T15088] __se_sys_ioctl+0x48/0x140 [ 882.987341][T15088] __x64_sys_ioctl+0x3f/0x50 [ 882.991955][T15088] do_syscall_64+0x39/0x80 [ 882.996365][T15088] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 883.004255][T15088] RIP: 0033:0x45deb9 [ 883.008160][T15088] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 883.028324][T15088] RSP: 002b:00007f6902cfdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 883.036732][T15088] RAX: ffffffffffffffda RBX: 0000000000008a40 RCX: 000000000045deb9 [ 883.045642][T15088] RDX: 0000000020000400 RSI: 00000000c0306201 RDI: 0000000000000003 [ 883.053645][T15088] RBP: 00007f6902cfdca0 R08: 0000000000000000 R09: 0000000000000000 [ 883.063015][T15088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 883.071080][T15088] R13: 00007ffc8204749f R14: 00007f6902cfe9c0 R15: 000000000118bf2c 21:06:19 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x21, 0x0}) [ 883.112770][T15089] binder: 15083:15089 ioctl c0306201 0 returned -14 21:06:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x10, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:19 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x5) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x1) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x38c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000012) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000140)=0x10000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000800)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xf0, r1, 0x20, 0x70bd2c, 0x25dfdbff, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x10}, 0x4010) r2 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) sendmsg$rds(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)=""/88, 0x58}], 0x1, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{0x0, 0x50b}, &(0x7f0000000240)=0x47, &(0x7f0000000280)=0x9, 0x17c, 0xc4d8, 0x8, 0x9, 0x2c, 0xfffffffffffffffe}}], 0x58, 0x400}, 0x800) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000100)=0x1, 0x4) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) [ 883.198458][T15106] binder: 15105:15106 ioctl c0306201 20000400 returned -14 21:06:19 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x25, 0x0}) [ 883.241375][T15108] binder: 15107:15108 ioctl 10 20000400 returned -22 [ 883.251597][ T42] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 883.266603][T15113] binder: 15112:15113 ioctl c0306201 0 returned -14 21:06:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x1277, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 883.330977][T15117] binder: 15115:15117 ioctl c0306201 20000400 returned -14 [ 883.369839][T15119] binder: 15118:15119 ioctl 1277 20000400 returned -22 [ 883.552196][T15088] ERROR: Out of memory at tomoyo_realpath_from_path. [ 883.568234][T15088] binder: 15084:15088 unknown command 0 [ 883.575210][T15088] binder: 15084:15088 ioctl c0306201 20000400 returned -22 [ 883.683591][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 883.700082][ T42] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 883.727207][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.762504][ T42] usb 3-1: config 0 descriptor?? [ 884.252047][ T42] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 884.263854][ T42] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0009/input/input13 [ 884.363126][ T42] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 884.894653][ T9699] usb 3-1: USB disconnect, device number 12 21:06:21 executing program 2: r0 = socket(0x29, 0x4, 0xc2) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000)=0x68f49f2d, 0x4) syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x1800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = fcntl$dupfd(r2, 0xe6fcc172bac07660, r3) setsockopt$llc_int(r4, 0x10c, 0x8, &(0x7f0000004880)=0xaf2d, 0x4) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:06:21 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x48, 0x0}) 21:06:21 executing program 0: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x5, 0x576, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000000), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x11, 0x2f, 0x6102, 'caif0\x00', 'veth0_to_batadv\x00', 'veth1_to_team\x00', 'macvtap0\x00', @dev={[], 0x2d}, [0x0, 0x0, 0xff, 0x0, 0x101], @multicast, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0xd6, 0x106, [], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x432}}}, @common=@dnat={'dnat\x00', 0x10, {{@remote, 0x10}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x30, 0x883e, 'wlan1\x00', 'virt_wifi0\x00', 'veth0_to_bridge\x00', 'netpci0\x00', @remote, [0xff, 0x0, 0x0, 0x0, 0xff], @broadcast, [0x0, 0xff, 0xff, 0xff], 0x6e, 0xb6, 0x106, [], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3, 0x2, {0xfffffffffffffff8}}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0xcebc, 'syz1\x00', {0x7ff}}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x3, 0x40, 0x805, 'macvlan1\x00', 'xfrm0\x00', 'caif0\x00', 'geneve1\x00', @random="2911f7d6c64b", [0xff, 0x0, 0x0, 0xff], @broadcast, [0x0, 0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xbe, [], [], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0xbbd3, 'syz0\x00', {0x7fff}}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe, 0x2, [{0x9, 0x2, 0x9, 'bridge0\x00', 'ip6erspan0\x00', 'batadv_slave_1\x00', 'hsr0\x00', @empty, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0x0, 0x0, 0xff], 0x6e, 0xee, 0x11e, [], [@common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1}}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x1}}}], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffc}}}, {0x9, 0x7a, 0x7, 'lo\x00', 'batadv_slave_0\x00', 'ipvlan0\x00', 'bridge_slave_1\x00', @local, [0x0, 0xff, 0xff, 0xff, 0xff], @empty, [0xff, 0xff, 0xff, 0xff], 0x6e, 0x9e, 0xce, [], [@common=@redirect={'redirect\x00', 0x8}], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}}]}]}, 0x5ee) r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000009c0)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:06:21 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x3b66, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:21 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 885.474619][T15178] binder: 15173:15178 ioctl c0306201 20000400 returned -14 [ 885.484869][T15180] binder: 15175:15180 ioctl c0306201 0 returned -14 [ 885.494099][T15181] binder: 15176:15181 ioctl 3b66 20000400 returned -22 [ 885.502853][T15179] binder: 15177:15179 unknown command 0 [ 885.516278][T15180] binder: 15175:15180 ioctl c0306201 0 returned -14 21:06:21 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x4c, 0x0}) [ 885.536358][T15179] binder: 15177:15179 ioctl c0306201 20000400 returned -22 21:06:21 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x2, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:21 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:06:21 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x4c00, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 885.643827][T15191] binder: 15190:15191 ioctl c0306201 20000400 returned -14 21:06:21 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x5c, 0x0}) 21:06:21 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x10, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 885.685295][T15197] binder: 15194:15197 ioctl 4c00 20000400 returned -22 21:06:21 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x4c01, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 885.778360][T15207] binder: 15202:15207 ioctl c0306201 20000400 returned -14 [ 885.781450][ T5] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 885.804420][T15206] binder: 15205:15206 ioctl 10 20000400 returned -22 [ 885.854936][T15211] binder: 15209:15211 ioctl 4c01 20000400 returned -22 [ 886.181465][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 886.194023][ T5] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 886.211109][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.224915][ T5] usb 3-1: config 0 descriptor?? [ 886.701907][ T5] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 886.726192][ T5] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000A/input/input14 [ 886.813893][ T5] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 886.902844][ T5] usb 3-1: USB disconnect, device number 13 21:06:23 executing program 2: r0 = socket(0x29, 0x4, 0xc2) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000)=0x68f49f2d, 0x4) syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x1800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = fcntl$dupfd(r2, 0xe6fcc172bac07660, r3) setsockopt$llc_int(r4, 0x10c, 0x8, &(0x7f0000004880)=0xaf2d, 0x4) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) 21:06:23 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x1002) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0046209, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:06:23 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x60, 0x0}) 21:06:23 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x4c00, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:23 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x541b, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 887.504132][T15261] binder: 15259:15261 ioctl 4c00 20000400 returned -22 [ 887.508418][T15262] binder: 15256:15262 ioctl c0306201 0 returned -14 [ 887.523326][T15264] binder: 15260:15264 ioctl 541b 20000400 returned -22 [ 887.524477][T15263] binder: 15258:15263 ioctl c0306201 20000400 returned -14 21:06:23 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x68, 0x0}) 21:06:23 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x4c01, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:23 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pwritev2(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="8b7c3e75b5e9cfbcc2f7782fa43bad4d2191a4fd93564e17dede0a864702d8efa4b6182be14cc43e68e17812d8d1f23d8564187a1caddcc7d25dc338e7bbd4a962649813550552c076af22a438a3c0ee7a0ab4e79648cb8f0e85666a561d14a8cc3d6fd3062adc374b65955bad0bef88b92e4f94dc9513502cd8cceb2c1ee7e193bc77de9ca5f20a5acadb7ddc9de94397b9352f996c143126351ecde97388d966480f0d87993c3423ff9014096b55ecbaaaec34407a3f", 0xb7}, {&(0x7f0000000100)="eebdce3911853492ad69055eeeb1d255ce1ab1ae52a381a9b88440c0a36e0ce25ad87d300f7910983cb169fa28c4286d0fed656de2a2acc5c813ccf2be947fdb5d46918b973f7b1e5d7540a0aaea8c45b922d9517f9124e67c1b2d64ff6e27fdc9811cea7acae7e9c934dd535ba82c23b0e2", 0x72}], 0x2, 0xfff, 0x6, 0xf) 21:06:23 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 887.634633][T15273] binder: 15272:15273 ioctl 4c01 20000400 returned -22 [ 887.663794][T15277] binder: 15276:15277 ioctl c0306201 0 returned -14 [ 887.678250][T15279] binder: 15275:15279 ioctl c0306201 20000400 returned -14 21:06:23 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x5381, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 887.719480][T15277] binder: 15276:15277 ioctl c0306201 0 returned -14 21:06:23 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x5450, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:23 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x6c, 0x0}) [ 887.776449][T15286] binder: 15284:15286 ioctl 5381 20000400 returned -22 [ 887.791380][T11631] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 887.830855][T15293] binder: 15288:15293 ioctl c0306201 20000400 returned -14 [ 888.151563][T11631] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 888.171407][T11631] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 888.200732][T11631] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.221933][T11631] usb 3-1: config 0 descriptor?? [ 888.771294][T11631] usbhid 3-1:0.0: can't add hid device: -71 [ 888.777259][T11631] usbhid: probe of 3-1:0.0 failed with error -71 [ 888.792186][T11631] usb 3-1: USB disconnect, device number 14 21:06:25 executing program 2: r0 = socket(0x29, 0x4, 0xc2) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000)=0x68f49f2d, 0x4) syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x1800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = fcntl$dupfd(r2, 0xe6fcc172bac07660, r3) setsockopt$llc_int(r4, 0x10c, 0x8, &(0x7f0000004880)=0xaf2d, 0x4) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) 21:06:25 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0046209, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:06:25 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x541b, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:25 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x74, 0x0}) 21:06:25 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x5451, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 889.235128][T15317] binder: 15313:15317 ioctl 541b 20000400 returned -22 21:06:25 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="01d8ffcfb407e8118fcbdb374500c183", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) r2 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0046209, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:06:25 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 889.275675][T15320] binder: 15314:15320 ioctl c0306201 20000400 returned -14 21:06:25 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:25 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x7a, 0x0}) [ 889.367835][T15333] binder: 15324:15333 ioctl c0306201 0 returned -14 21:06:25 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x5460, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:25 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x5450, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 889.410353][T15338] binder: 15337:15338 ioctl c0306201 20000400 returned -14 21:06:25 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x300, 0x0}) [ 889.515862][T15349] binder: 15348:15349 ioctl c0306201 20000400 returned -14 [ 889.531305][T11631] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 889.911422][T11631] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 889.931222][T11631] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 889.960461][T11631] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.983728][T11631] usb 3-1: config 0 descriptor?? [ 890.127098][T15360] binder: 15324:15360 ioctl c0306201 0 returned -14 [ 890.521188][T11631] usbhid 3-1:0.0: can't add hid device: -71 [ 890.527162][T11631] usbhid: probe of 3-1:0.0 failed with error -71 [ 890.556935][T11631] usb 3-1: USB disconnect, device number 15 21:06:26 executing program 2: r0 = socket(0x29, 0x4, 0xc2) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000)=0x68f49f2d, 0x4) syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x1800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = fcntl$dupfd(r2, 0xe6fcc172bac07660, r3) setsockopt$llc_int(r4, 0x10c, 0x8, &(0x7f0000004880)=0xaf2d, 0x4) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) 21:06:26 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x5451, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:26 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x5501, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:26 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x500, 0x0}) 21:06:26 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:06:27 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:27 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 891.003411][T15376] binder: 15373:15376 ioctl 5501 20000400 returned -22 [ 891.006701][T15379] binder: 15374:15379 ioctl c0306201 0 returned -14 [ 891.026879][T15380] binder: 15372:15380 ioctl c0306201 20000400 returned -14 [ 891.030632][T15379] binder: 15374:15379 ioctl c0306201 0 returned -14 21:06:27 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x5460, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:27 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x5509, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:27 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x600, 0x0}) 21:06:27 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x1, 0x1, 0x200}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb, 0x77, 0x1, 0x4}, 0xb) [ 891.119462][T15390] binder: 15389:15390 ioctl c0306201 0 returned -14 [ 891.135582][T15390] binder: 15389:15390 ioctl c0306201 0 returned -14 21:06:27 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x5501, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 891.184803][T15399] binder: 15394:15399 ioctl c0306201 20000400 returned -14 [ 891.209459][T15402] binder: 15397:15402 ioctl 5509 20000400 returned -22 [ 891.210618][T15403] binder: 15401:15403 ioctl c0306201 0 returned -14 [ 891.259746][T15406] binder: 15401:15406 ioctl c020f509 20000000 returned -22 [ 891.276925][T15403] binder: 15401:15403 ioctl c0306201 0 returned -14 [ 891.284564][T15406] binder: 15401:15406 ioctl c020f509 20000000 returned -22 [ 891.294500][T15408] binder: 15407:15408 ioctl 5501 20000400 returned -22 [ 891.331204][ T9699] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 891.761180][ T9699] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 891.781142][ T9699] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 891.790687][ T9699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.822659][ T9699] usb 3-1: config 0 descriptor?? [ 892.371081][ T9699] usbhid 3-1:0.0: can't add hid device: -71 [ 892.377071][ T9699] usbhid: probe of 3-1:0.0 failed with error -71 [ 892.391858][ T9699] usb 3-1: USB disconnect, device number 16 21:06:28 executing program 2: r0 = socket(0x29, 0x4, 0xc2) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000)=0x68f49f2d, 0x4) syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x1800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = fcntl$dupfd(r2, 0xe6fcc172bac07660, r3) setsockopt$llc_int(r4, 0x10c, 0x8, &(0x7f0000004880)=0xaf2d, 0x4) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:06:28 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x700, 0x0}) 21:06:28 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x6364, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:28 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$befs(&(0x7f0000000000)='befs\x00', &(0x7f0000000040)='./file0\x00', 0x400, 0x1, &(0x7f0000000140)=[{&(0x7f0000000080)="ef7cce916942d2f8ec492ffccaab21764d946ce45cd1d615adb890f9ae8a56ba90a09630125da0b38bb5799879150f671c6d3c67efe168de0edf5f1ff6730f7120933a1cbf9e22de751d6333d36054bb64130c6944831ef144a91f180393da1bbc6d0db949d2fa69380068adf70dcfefc5c3a254e62a5b44f11dbc12fb3de9b6ffa1184540bd31efeacfc3488a354616fd20df4737fbc6f7828531c4", 0x9c, 0x4}], 0x28405, &(0x7f0000000180)={[{'/\b\x00\x00@\x00\x00\x00\x01er`\xc4'}, {'*:\\^(\\'}, {'/dev/binder#\x00'}], [{@euid_eq={'euid'}}, {@appraise_type='appraise_type=imasig'}, {@context={'context', 0x3d, 'staff_u'}}, {@hash='hash'}]}) 21:06:28 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x5509, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 892.878033][T15435] binder: 15431:15435 ioctl c0306201 20000400 returned -14 [ 892.891039][T15437] binder: 15433:15437 ioctl c0306201 0 returned -14 [ 892.898929][T15439] binder: 15434:15439 ioctl 5509 20000400 returned -22 [ 892.909855][T15438] binder: 15432:15438 ioctl 6364 20000400 returned -22 [ 892.964083][T15437] binder: 15433:15437 ioctl c0306201 0 returned -14 21:06:29 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x8912, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:29 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000080)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) signalfd(r2, &(0x7f0000000100)={[0x100]}, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0046209, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r4, r1, 0xe}, 0x10) 21:06:29 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x6364, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:29 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x900, 0x0}) [ 893.065537][T15451] binder: 15450:15451 ioctl 8912 20000400 returned -22 [ 893.085462][T15454] binder: 15452:15454 ioctl c0306201 0 returned -14 21:06:29 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x8913, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 893.111098][T15456] binder: 15453:15456 ioctl c0306201 20000400 returned -14 [ 893.118379][T15458] binder: 15455:15458 ioctl 6364 20000400 returned -22 21:06:29 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x8912, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:29 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0xa00, 0x0}) [ 893.201089][ T42] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 893.225820][T15466] binder: 15465:15466 ioctl 8913 20000400 returned -22 [ 893.231595][T15468] binder: 15467:15468 ioctl 8912 20000400 returned -22 [ 893.291346][T15474] binder: 15471:15474 ioctl c0306201 20000400 returned -14 [ 893.582700][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 893.601032][ T42] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 893.610150][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.635006][ T42] usb 3-1: config 0 descriptor?? [ 894.200998][ T42] usbhid 3-1:0.0: can't add hid device: -71 [ 894.207115][ T42] usbhid: probe of 3-1:0.0 failed with error -71 [ 894.221621][ T42] usb 3-1: USB disconnect, device number 17 21:06:30 executing program 2: r0 = socket(0x29, 0x4, 0xc2) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000)=0x68f49f2d, 0x4) syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x1800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = fcntl$dupfd(r2, 0xe6fcc172bac07660, r3) setsockopt$llc_int(r4, 0x10c, 0x8, &(0x7f0000004880)=0xaf2d, 0x4) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:06:30 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='svcsock_tcp_recv_short\x00'}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:06:30 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x8913, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:30 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x8914, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:30 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0xb00, 0x0}) [ 894.671566][T15497] binder: 15495:15497 ioctl c0306201 20000400 returned -14 [ 894.682352][T15499] binder: 15493:15499 ioctl c0306201 0 returned -14 [ 894.697163][T15500] binder: 15494:15500 ioctl 8913 20000400 returned -22 [ 894.704541][T15504] binder: 15493:15504 ioctl c0306201 0 returned -14 [ 894.720824][T15501] binder: 15496:15501 ioctl 8914 20000400 returned -22 21:06:30 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0xc00, 0x0}) 21:06:30 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000300), 0x4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x80000000}}, 0x2e) r3 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0046209, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:06:30 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x8914, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:30 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x8933, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 894.849268][T15518] binder: 15517:15518 ioctl c0306201 0 returned -14 [ 894.866603][T15519] binder: 15516:15519 ioctl c0306201 20000400 returned -14 [ 894.892729][T15522] binder: 15517:15522 ioctl c0306201 0 returned -14 [ 894.910523][T15524] binder: 15520:15524 ioctl 8914 20000400 returned -22 [ 894.912525][T15523] binder: 15521:15523 ioctl 8933 20000400 returned -22 21:06:30 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0xd00, 0x0}) 21:06:30 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8044010}, 0x81) 21:06:31 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x8933, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 895.021025][ T42] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 895.037693][T15536] binder: 15532:15536 ioctl c0306201 20000400 returned -14 [ 895.056961][T15537] binder: 15534:15537 ioctl c0306201 0 returned -14 [ 895.085670][T15537] binder: 15534:15537 ioctl c0306201 0 returned -14 [ 895.097892][T15540] binder: 15538:15540 ioctl 8933 20000400 returned -22 [ 895.434096][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 895.454109][ T42] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 895.481977][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.501677][ T42] usb 3-1: config 0 descriptor?? [ 896.090909][ T42] usbhid 3-1:0.0: can't add hid device: -71 [ 896.096923][ T42] usbhid: probe of 3-1:0.0 failed with error -71 [ 896.112156][ T42] usb 3-1: USB disconnect, device number 18 21:06:32 executing program 2: r0 = socket(0x29, 0x4, 0xc2) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000)=0x68f49f2d, 0x4) syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x1800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = fcntl$dupfd(r2, 0xe6fcc172bac07660, r3) setsockopt$llc_int(r4, 0x10c, 0x8, &(0x7f0000004880)=0xaf2d, 0x4) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:06:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x8934, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:32 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0xe00, 0x0}) 21:06:32 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchmodat(r2, &(0x7f0000000000)='./file0\x00', 0x8) 21:06:32 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x89ed, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 896.554685][T15565] binder: 15560:15565 ioctl c0306201 0 returned -14 [ 896.564699][T15566] binder: 15561:15566 ioctl 8934 20000400 returned -22 [ 896.589308][T15567] binder: 15562:15567 ioctl 89ed 20000400 returned -22 [ 896.603002][T15570] binder: 15563:15570 ioctl c0306201 20000400 returned -14 21:06:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x400448c9, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:32 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xae01, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:32 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x1100, 0x0}) [ 896.727002][T15583] binder: 15579:15583 ioctl 400448c9 20000400 returned -22 [ 896.743906][T15584] binder: 15581:15584 ioctl c0306201 20000400 returned -14 [ 896.758790][T15585] binder: 15582:15585 ioctl ae01 20000400 returned -22 21:06:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x400448dd, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:32 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x1200, 0x0}) 21:06:32 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xae41, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 896.841617][T15593] binder: 15591:15593 ioctl 400448dd 20000400 returned -22 21:06:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x40045402, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 896.885581][T15596] binder: 15592:15596 ioctl c0306201 20000400 returned -14 [ 896.896981][T15597] binder: 15594:15597 ioctl ae41 20000400 returned -22 [ 896.942217][T11631] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 896.965639][T15602] binder: 15600:15602 ioctl 40045402 20000400 returned -22 [ 897.302524][T11631] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 897.318899][T11631] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 897.347049][T11631] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.374274][T11631] usb 3-1: config 0 descriptor?? [ 897.920829][T11631] usbhid 3-1:0.0: can't add hid device: -71 [ 897.926897][T11631] usbhid: probe of 3-1:0.0 failed with error -71 [ 897.948243][T11631] usb 3-1: USB disconnect, device number 19 21:06:34 executing program 2: r0 = socket(0x29, 0x4, 0xc2) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000)=0x68f49f2d, 0x4) syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x1800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = fcntl$dupfd(r2, 0xe6fcc172bac07660, r3) setsockopt$llc_int(r4, 0x10c, 0x8, &(0x7f0000004880)=0xaf2d, 0x4) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:06:34 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x40044145, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:34 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x1901, 0x0}) 21:06:34 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x400454ca, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:34 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x2000, 0x0}) [ 898.441238][T15623] binder: 15621:15623 ioctl c0306201 20000400 returned -14 [ 898.462489][T15625] binder: 15620:15625 ioctl 40044145 20000400 returned -22 [ 898.475841][T15626] binder: 15622:15626 ioctl 400454ca 20000400 returned -22 21:06:34 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x400448c9, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:34 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x4004550a, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 898.539838][T15633] binder: 15632:15633 ioctl c0306201 20000400 returned -14 21:06:34 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x2500, 0x0}) 21:06:34 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x400448dd, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 898.608675][T15637] binder: 15635:15637 ioctl 400448c9 20000400 returned -22 [ 898.640806][T15638] binder: 15636:15638 ioctl 4004550a 20000400 returned -22 [ 898.675369][T15641] binder: 15640:15641 ioctl c0306201 20000400 returned -14 21:06:34 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:34 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x4000, 0x0}) [ 898.721131][T15647] binder: 15643:15647 ioctl 400448dd 20000400 returned -22 21:06:34 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x400454ca, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 898.820966][T15654] binder: 15651:15654 ioctl c0306201 20000400 returned -14 [ 898.858733][T15656] binder: 15653:15656 ioctl 400454ca 20000400 returned -22 21:06:34 executing program 2: r0 = socket(0x29, 0x4, 0xc2) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000)=0x68f49f2d, 0x4) syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x1800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = fcntl$dupfd(r2, 0xe6fcc172bac07660, r3) setsockopt$llc_int(r4, 0x10c, 0x8, &(0x7f0000004880)=0xaf2d, 0x4) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:06:34 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:34 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x4800, 0x0}) 21:06:34 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x40045506, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 899.023232][T15665] binder: 15662:15665 ioctl c0306201 20000400 returned -14 [ 899.028695][T15666] binder: 15663:15666 ioctl 40045506 20000400 returned -22 21:06:35 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x40046208, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x4004550a, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:35 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x4c00, 0x0}) 21:06:35 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x40049409, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 899.170981][T15675] binder: 15673:15675 ioctl 4004550a 20000400 returned -22 [ 899.205520][T15679] binder: 15678:15679 ioctl c0306201 20000400 returned -14 21:06:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x40045567, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:35 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x40085503, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:35 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x5901, 0x0}) [ 899.336186][T15691] binder: 15689:15691 ioctl 40085503 20000400 returned -22 [ 899.352415][T15688] binder: 15687:15688 ioctl 40045567 20000400 returned -22 21:06:35 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 899.375045][T15693] binder: 15690:15693 ioctl c0306201 20000400 returned -14 21:06:35 executing program 2: r0 = socket(0x29, 0x4, 0xc2) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000)=0x68f49f2d, 0x4) syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x1800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = fcntl$dupfd(r2, 0xe6fcc172bac07660, r3) setsockopt$llc_int(r4, 0x10c, 0x8, &(0x7f0000004880)=0xaf2d, 0x4) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:06:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:35 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x5c00, 0x0}) 21:06:35 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x40186366, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 899.623525][T15706] binder: 15704:15706 ioctl 40186366 20000400 returned -22 [ 899.636714][T15707] binder: 15703:15707 ioctl c0306201 20000400 returned -14 21:06:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:35 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x6000, 0x0}) 21:06:35 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x4020565a, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x40046208, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 899.747797][T15719] binder: 15715:15719 ioctl c0306201 20000400 returned -14 [ 899.776820][T15722] binder: 15721:15722 ioctl 4020565a 20000400 returned -22 21:06:35 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x60ff, 0x0}) 21:06:35 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x4020940d, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x40049409, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 899.886176][T15733] binder: 15729:15733 ioctl c0306201 20000400 returned -14 21:06:35 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x6800, 0x0}) [ 899.996359][T15740] binder: 15739:15740 ioctl c0306201 20000400 returned -14 21:06:36 executing program 2: r0 = socket(0x29, 0x4, 0xc2) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000)=0x68f49f2d, 0x4) syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x1800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = fcntl$dupfd(r2, 0xe6fcc172bac07660, r3) setsockopt$llc_int(r4, 0x10c, 0x8, &(0x7f0000004880)=0xaf2d, 0x4) socket(0x1000000010, 0x80002, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:06:36 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x41015500, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:36 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x40085503, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:36 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x6c00, 0x0}) [ 900.303806][T15751] binder: 15748:15751 ioctl 41015500 20000400 returned -22 [ 900.317206][T15753] binder: 15750:15753 ioctl c0306201 20000400 returned -14 [ 900.317428][T15754] binder: 15749:15754 ioctl 40085503 20000400 returned -22 21:06:36 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x800442d3, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:36 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x7400, 0x0}) 21:06:36 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x40085507, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:36 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x80085502, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 900.436433][T15763] binder: 15761:15763 ioctl 800442d3 20000400 returned -22 [ 900.455551][T15765] binder: 15762:15765 ioctl c0306201 20000400 returned -14 [ 900.476065][T15766] binder: 15764:15766 ioctl 40085507 20000400 returned -22 21:06:36 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x7500, 0x0}) 21:06:36 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x4008ae73, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 900.553665][T15773] binder: 15772:15773 ioctl 80085502 20000400 returned -22 [ 900.560637][T11631] usb 3-1: new high-speed USB device number 20 using dummy_hcd 21:06:36 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x80086301, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:36 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x7a00, 0x0}) [ 900.616548][T15777] binder: 15774:15777 ioctl c0306201 20000400 returned -14 [ 900.636324][T15778] binder: 15776:15778 ioctl 4008ae73 20000400 returned -22 [ 900.719787][T15783] binder: 15781:15783 ioctl 80086301 20000400 returned -22 [ 900.739530][T15785] binder: 15784:15785 ioctl c0306201 20000400 returned -14 [ 900.920819][T11631] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 900.941612][T11631] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 900.970199][T11631] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.999476][T11631] usb 3-1: config 0 descriptor?? [ 901.491191][T11631] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 901.513971][T11631] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000B/input/input15 [ 901.611940][T11631] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 901.691888][ T42] usb 3-1: USB disconnect, device number 20 21:06:38 executing program 2: r0 = socket(0x29, 0x4, 0xc2) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000)=0x68f49f2d, 0x4) syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x1800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = fcntl$dupfd(r2, 0xe6fcc172bac07660, r3) setsockopt$llc_int(r4, 0x10c, 0x8, &(0x7f0000004880)=0xaf2d, 0x4) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:06:38 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x4008ae8a, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:38 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x400000, 0x0}) [ 902.282085][T15834] binder: 15830:15834 ioctl 4008ae8a 20000400 returned -22 [ 902.294974][T15836] binder: 15832:15836 ioctl c0306201 20000400 returned -14 21:06:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:38 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x548000, 0x0}) 21:06:38 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x40095505, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 902.393799][T15845] binder: 15844:15845 ioctl c0306201 20000400 returned -14 [ 902.432200][T15850] binder: 15847:15850 ioctl 40095505 20000400 returned -22 21:06:38 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x707400, 0x0}) 21:06:38 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0085504, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 902.524855][T15856] binder: 15853:15856 ioctl c0306201 20000400 returned -14 [ 902.540512][ T5] usb 3-1: new high-speed USB device number 21 using dummy_hcd 21:06:38 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x747000, 0x0}) [ 902.599621][T15864] binder: 15863:15864 ioctl c0085504 20000400 returned -22 [ 902.654236][T15867] binder: 15866:15867 ioctl c0306201 20000400 returned -14 [ 902.920548][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 902.933400][ T5] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 902.950276][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.966307][ T5] usb 3-1: config 0 descriptor?? [ 903.450898][ T5] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor [ 903.471990][ T5] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000C/input/input16 [ 903.572329][ T5] keytouch 0003:0926:3333.000C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 903.654648][ T42] usb 3-1: USB disconnect, device number 21 21:06:40 executing program 2: r0 = socket(0x29, 0x4, 0xc2) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000)=0x68f49f2d, 0x4) syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x1800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$dupfd(r2, 0xe6fcc172bac07660, r3) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:06:40 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x40186366, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:40 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:40 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x750000, 0x0}) 21:06:40 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty}, @vsock={0x28, 0x0, 0xffffd8ef, @local}, @nl=@unspec, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='veth0_to_bridge\x00', 0x9, 0x8, 0x101}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000015c0)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f00000000c0)=r4) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000080)=r4) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000280)={{}, r4, 0xc, @inherit={0x70, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000500000000000000f506000000070000080000000000001f00000000000000000400000000000000061000000000000007000000000000000300000000000000c606000000000000000000000014000000000000e1e9afa5747c2f3670320df61a6ed9d3004f7130ff3d609d18e9244b500000007921e151c6e331a0e37ddebe068b38005e5356c16ba34dcbae88eb38fca7d11ba02e2406fc1a9530c041fcdf0eb99f57f26388be"]}, @subvolid=0x3ff}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000540)={{}, r4, 0x10, @inherit={0x60, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000300000000000000ff01000000007a32bc13000000000000100000000000000002000000000000000700000000000000010400000000000004000000000000002000000000000000d9000000000000ec0000000000000000"]}, @subvolid=0x4}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000040)=r4) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x410000, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r5}, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r8, 0x1, 0x0, 0x0, {0x3}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_DEBUG={0x8}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f0000001800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001540)={0x44, r8, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x44}}, 0x4040) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, r4, 0x2, @unused=[0xfffffffffffffffe, 0x3, 0x3f, 0x4], @subvolid=0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 904.239545][T15918] binder: 15915:15918 ioctl 40186366 20000400 returned -22 [ 904.249614][T15917] binder: 15913:15917 ioctl c0306201 20000400 returned -14 [ 904.264191][T15921] binder: 15914:15921 ioctl c0306201 0 returned -14 21:06:40 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x4020940d, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:40 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:40 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x805400, 0x0}) [ 904.301175][T15921] binder: 15914:15921 ioctl c0306201 0 returned -14 21:06:40 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x4020ae46, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 904.381860][T15934] binder: 15929:15934 ioctl c018620c 20000400 returned -22 [ 904.409810][T15936] binder: 15932:15936 ioctl c0306201 20000400 returned -14 21:06:40 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0189436, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:40 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x1000000, 0x0}) [ 904.500400][T11631] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 904.509411][T15942] binder: 15941:15942 ioctl 4020ae46 20000400 returned -22 21:06:40 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x40305839, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 904.546412][T15945] binder: 15944:15945 ioctl c0306201 20000400 returned -14 [ 904.638185][T15953] binder: 15951:15953 ioctl 40305839 20000400 returned -22 [ 904.870710][T11631] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 904.888699][T11631] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 904.926024][T11631] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.949868][T11631] usb 3-1: config 0 descriptor?? [ 905.450761][T11631] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor [ 905.460279][T11631] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000D/input/input17 [ 905.573700][T11631] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 905.652864][T11631] usb 3-1: USB disconnect, device number 22 21:06:42 executing program 2: r0 = socket(0x29, 0x4, 0xc2) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000)=0x68f49f2d, 0x4) syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x1800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:06:42 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc018aa3f, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:42 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x1190000, 0x0}) 21:06:42 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x41015500, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 906.268931][T16004] binder: 16000:16004 ioctl c018aa3f 20000400 returned -22 [ 906.273173][T16003] binder: 16002:16003 ioctl 41015500 20000400 returned -22 [ 906.280369][T16005] binder: 16001:16005 ioctl c0306201 20000400 returned -14 21:06:42 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc020660b, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:42 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x80085502, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:42 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x1590000, 0x0}) 21:06:42 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306202, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:42 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x80086301, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 906.405667][T16015] binder: 16013:16015 ioctl 80085502 20000400 returned -22 [ 906.428307][T16018] binder: 16016:16018 ioctl c0306201 20000400 returned -14 [ 906.489474][T16022] binder: 16021:16022 ioctl c0306202 20000400 returned -22 [ 906.496951][T10131] usb 3-1: new high-speed USB device number 23 using dummy_hcd 21:06:42 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x2000000, 0x0}) 21:06:42 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x801c581f, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 906.532133][T16026] binder: 16023:16026 ioctl 80086301 20000400 returned -22 [ 906.602035][T16030] binder: 16029:16030 ioctl c0306201 20000400 returned -14 21:06:42 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306203, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 906.645564][T16032] binder: 16031:16032 ioctl 801c581f 20000400 returned -22 [ 906.737373][T16038] binder: 16036:16038 ioctl c0306203 20000400 returned -22 [ 906.911629][T10131] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 906.928330][T10131] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 906.958308][T10131] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.983652][T10131] usb 3-1: config 0 descriptor?? [ 907.470890][T10131] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor [ 907.485977][T10131] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000E/input/input18 [ 907.603709][T10131] keytouch 0003:0926:3333.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 907.673324][T11631] usb 3-1: USB disconnect, device number 23 21:06:44 executing program 2: r0 = socket(0x29, 0x4, 0xc2) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000)=0x68f49f2d, 0x4) syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x1800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$xdp(0x2c, 0x3, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:06:44 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x3000000, 0x0}) 21:06:44 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x90044802, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:44 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306205, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:44 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc030620a, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 908.253156][T16088] binder: 16085:16088 ioctl c0306205 20000400 returned -22 [ 908.270811][T16089] binder: 16086:16089 ioctl 90044802 20000400 returned -22 [ 908.288218][T16090] binder: 16084:16090 ioctl c0306201 20000400 returned -14 21:06:44 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x4000000, 0x0}) 21:06:44 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 908.353668][T16096] binder: 16094:16096 ioctl c030620a 20000400 returned -22 21:06:44 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306225, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 908.402609][T16100] binder: 16099:16100 ioctl c0306201 20000400 returned -14 21:06:44 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 908.455401][T16106] binder: 16105:16106 ioctl c0306225 20000400 returned -22 21:06:44 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x5000000, 0x0}) [ 908.514871][T11631] usb 3-1: new high-speed USB device number 24 using dummy_hcd 21:06:44 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306264, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:44 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 908.555270][T16115] binder: 16113:16115 ioctl c0306201 20000400 returned -14 [ 908.619816][T16118] binder: 16117:16118 ioctl c0306264 20000400 returned -22 [ 908.880195][T11631] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.900176][T11631] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 908.909243][T11631] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.950852][T11631] usb 3-1: config 0 descriptor?? [ 909.430579][T11631] keytouch 0003:0926:3333.000F: fixing up Keytouch IEC report descriptor [ 909.440016][T11631] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000F/input/input19 [ 909.542026][T11631] keytouch 0003:0926:3333.000F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 909.634244][T11631] usb 3-1: USB disconnect, device number 24 21:06:46 executing program 2: r0 = socket(0x29, 0x4, 0xc2) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000)=0x68f49f2d, 0x4) syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x1800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:06:46 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x6000000, 0x0}) 21:06:46 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0085504, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:46 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0485619, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 910.214260][T16169] binder: 16166:16169 ioctl c0306201 20000400 returned -14 [ 910.225626][T16170] binder: 16167:16170 ioctl c0485619 20000400 returned -22 [ 910.234044][T16171] binder: 16168:16171 ioctl c0085504 20000400 returned -22 21:06:46 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x7000000, 0x0}) 21:06:46 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:46 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x2, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:46 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 910.355044][T16182] binder: 16179:16182 ioctl c0306201 20000400 returned -14 21:06:46 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x3, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:46 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x8000000, 0x0}) 21:06:46 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 910.486129][T16195] binder: 16191:16195 ioctl c018620c 20000400 returned -22 [ 910.494890][T11631] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 910.495257][T16196] binder: 16194:16196 ioctl c0306201 20000400 returned -14 21:06:46 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0189436, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 910.860275][T11631] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 910.881713][T11631] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 910.903035][T11631] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.922137][T11631] usb 3-1: config 0 descriptor?? [ 911.410508][T11631] keytouch 0003:0926:3333.0010: fixing up Keytouch IEC report descriptor [ 911.441222][T11631] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0010/input/input20 [ 911.532729][T11631] keytouch 0003:0926:3333.0010: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 911.612773][T10131] usb 3-1: USB disconnect, device number 25 21:06:48 executing program 2: r0 = socket(0x29, 0x4, 0xc2) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000)=0x68f49f2d, 0x4) syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x1800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:06:48 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x9000000, 0x0}) 21:06:48 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x5, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:48 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc020660b, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 912.215367][T16255] binder: 16248:16255 ioctl c0306201 20000400 returned -14 21:06:48 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x6, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:48 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc020f509, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:48 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0xa000000, 0x0}) [ 912.342625][T16265] binder: 16264:16265 ioctl c020f509 20000400 returned -22 21:06:48 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x7, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:48 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306202, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 912.393879][T16270] binder: 16267:16270 ioctl c0306201 20000400 returned -14 21:06:48 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0xb000000, 0x0}) 21:06:48 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:48 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306203, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 912.489560][T16277] binder: 16276:16277 ioctl c0306202 20000400 returned -22 [ 912.499992][T10131] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 912.517689][T16280] binder: 16278:16280 ioctl c0306201 20000400 returned -14 [ 912.621878][T16287] binder: 16286:16287 ioctl c0306203 20000400 returned -22 [ 912.891667][T10131] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 912.908076][T10131] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 912.929942][T10131] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.950452][T10131] usb 3-1: config 0 descriptor?? [ 913.430386][T10131] keytouch 0003:0926:3333.0011: fixing up Keytouch IEC report descriptor [ 913.450423][T10131] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0011/input/input21 [ 913.544187][T10131] keytouch 0003:0926:3333.0011: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 913.631673][T10131] usb 3-1: USB disconnect, device number 26 21:06:50 executing program 2: r0 = socket(0x29, 0x4, 0xc2) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000)=0x68f49f2d, 0x4) syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x1800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:06:50 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x9, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:50 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0xc000000, 0x0}) 21:06:50 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306205, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 914.215427][T16336] binder: 16333:16336 ioctl c0306205 20000400 returned -22 [ 914.224895][T16335] binder: 16331:16335 ioctl c0306201 20000400 returned -14 [ 914.233979][T16337] binder: 16330:16337 unknown command 0 [ 914.249953][T16337] binder: 16330:16337 ioctl c0306201 20000400 returned -22 21:06:50 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0xd000000, 0x0}) 21:06:50 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc030620a, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:50 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xa, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 914.375323][T16348] binder: 16345:16348 ioctl c030620a 20000400 returned -22 [ 914.375541][T16347] binder: 16344:16347 ioctl c0306201 20000400 returned -14 [ 914.392764][T16349] binder: 16346:16349 unknown command 0 [ 914.398463][T16349] binder: 16346:16349 ioctl c0306201 20000400 returned -22 21:06:50 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306225, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:50 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xb, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:50 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0xe000000, 0x0}) [ 914.461392][T11631] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 914.523941][T16356] binder: 16355:16356 ioctl c0306225 20000400 returned -22 [ 914.545385][T16359] binder: 16357:16359 unknown command 0 [ 914.557709][T16359] binder: 16357:16359 ioctl c0306201 20000400 returned -22 [ 914.563368][T16360] binder: 16358:16360 ioctl c0306201 20000400 returned -14 21:06:50 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306264, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:50 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xc, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 914.681458][T16367] binder: 16365:16367 ioctl c0306264 20000400 returned -22 [ 914.684505][T16368] binder: 16366:16368 unknown command 0 [ 914.708124][T16368] binder: 16366:16368 ioctl c0306201 20000400 returned -22 [ 914.821519][T11631] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 914.837878][T11631] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 914.850404][T11631] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.861711][T11631] usb 3-1: config 0 descriptor?? [ 915.341611][T11631] keytouch 0003:0926:3333.0012: fixing up Keytouch IEC report descriptor [ 915.362900][T11631] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0012/input/input22 [ 915.482223][T11631] keytouch 0003:0926:3333.0012: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 915.541798][ T42] usb 3-1: USB disconnect, device number 27 21:06:52 executing program 2: r0 = socket(0x29, 0x4, 0xc2) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000)=0x68f49f2d, 0x4) syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x1800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:06:52 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x10000000, 0x0}) 21:06:52 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0445624, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:52 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xd, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 916.139304][T16418] binder: 16414:16418 ioctl c0306201 20000400 returned -14 [ 916.148261][T16421] binder: 16417:16421 unknown command 0 [ 916.152281][T16420] binder: 16415:16420 ioctl c0445624 20000400 returned -22 [ 916.164388][T16421] binder: 16417:16421 ioctl c0306201 20000400 returned -22 21:06:52 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc1205531, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:52 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x11000000, 0x0}) 21:06:52 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xe, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 916.291805][T16430] binder: 16428:16430 ioctl c0306201 20000400 returned -14 [ 916.298264][T16432] binder: 16429:16432 ioctl c1205531 20000400 returned -22 [ 916.330567][T16433] binder: 16431:16433 unknown command 0 21:06:52 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x2, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 916.336148][T16433] binder: 16431:16433 ioctl c0306201 20000400 returned -22 21:06:52 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x12000000, 0x0}) [ 916.419767][T10131] usb 3-1: new high-speed USB device number 28 using dummy_hcd 21:06:52 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x11, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:52 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x3, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 916.460019][T16443] binder: 16441:16443 ioctl c0306201 20000400 returned -14 21:06:52 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x20000000, 0x0}) [ 916.511084][T16449] binder: 16446:16449 unknown command 0 [ 916.516666][T16449] binder: 16446:16449 ioctl c0306201 20000400 returned -22 [ 916.589276][T16455] binder: 16454:16455 ioctl c0306201 20000400 returned -14 [ 916.809969][T10131] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 916.826335][T10131] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 916.859853][T10131] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.878142][T10131] usb 3-1: config 0 descriptor?? [ 917.361715][T10131] keytouch 0003:0926:3333.0013: fixing up Keytouch IEC report descriptor [ 917.383103][T10131] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0013/input/input23 [ 917.492647][T10131] keytouch 0003:0926:3333.0013: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 917.563063][T10131] usb 3-1: USB disconnect, device number 28 21:06:54 executing program 2: r0 = socket(0x29, 0x4, 0xc2) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000)=0x68f49f2d, 0x4) syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x1800) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:06:54 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:54 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x12, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:54 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x21000000, 0x0}) 21:06:54 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x5, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 918.130533][T16503] binder: 16499:16503 ioctl c0306201 20000400 returned -14 [ 918.131084][T16502] binder: 16498:16502 unknown command 0 21:06:54 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x25000000, 0x0}) [ 918.188093][T16502] binder: 16498:16502 ioctl c0306201 20000400 returned -22 21:06:54 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x29, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 918.235527][T16513] binder: 16508:16513 ioctl c0306201 20000400 returned -14 21:06:54 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x6, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:54 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x48000000, 0x0}) [ 918.323506][T16519] binder: 16518:16519 unknown command 0 [ 918.353343][T16519] binder: 16518:16519 ioctl c0306201 20000400 returned -22 21:06:54 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x7, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:54 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20000400, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 918.396317][T16525] binder: 16524:16525 ioctl c0306201 20000400 returned -14 [ 918.409882][ T5] usb 3-1: new high-speed USB device number 29 using dummy_hcd 21:06:54 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x4c000000, 0x0}) [ 918.497463][T16533] binder: 16530:16533 unknown command 0 [ 918.511124][T16533] binder: 16530:16533 ioctl c0306201 20000400 returned -22 [ 918.537252][T16536] binder: 16535:16536 ioctl c0306201 20000400 returned -14 [ 918.779871][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 918.797698][ T5] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 918.817855][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.837640][ T5] usb 3-1: config 0 descriptor?? [ 919.331269][ T5] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor [ 919.353247][ T5] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0014/input/input24 [ 919.442499][ T5] keytouch 0003:0926:3333.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 919.533428][T10131] usb 3-1: USB disconnect, device number 29 21:06:56 executing program 2: r0 = socket(0x29, 0x4, 0xc2) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000)=0x68f49f2d, 0x4) syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x1800) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:06:56 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:56 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xc0306201, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:56 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x5c000000, 0x0}) 21:06:56 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x9, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 920.132191][T16587] binder: 16584:16587 ioctl c0306201 20000400 returned -14 [ 920.140489][T16586] binder: 16583:16586 unknown command 0 [ 920.167033][T16586] binder: 16583:16586 ioctl c0306201 20000400 returned -22 21:06:56 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x60000000, 0x0}) [ 920.229228][T16595] binder: 16593:16595 unknown command 0 [ 920.244488][T16595] binder: 16593:16595 ioctl c0306201 20000400 returned -22 21:06:56 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:56 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xa, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 920.291302][T16598] binder: 16596:16598 ioctl c0306201 20000400 returned -14 21:06:56 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x68000000, 0x0}) [ 920.346547][T16601] binder: 16600:16601 unknown command 16388 [ 920.352563][T11631] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 920.358031][T16604] binder: 16602:16604 unknown command 0 [ 920.369413][T16604] binder: 16602:16604 ioctl c0306201 20000400 returned -22 [ 920.376697][T16601] binder: 16600:16601 ioctl c0306201 20000400 returned -22 21:06:56 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xb, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:56 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 920.444246][T16608] binder: 16607:16608 ioctl c0306201 20000400 returned -14 21:06:56 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x6c000000, 0x0}) [ 920.516130][T16614] binder: 16611:16614 unknown command 0 [ 920.516995][T16613] binder: 16612:16613 unknown command 64 [ 920.536387][T16613] binder: 16612:16613 ioctl c0306201 20000400 returned -22 [ 920.538354][T16614] binder: 16611:16614 ioctl c0306201 20000400 returned -22 [ 920.621556][T16619] binder: 16618:16619 ioctl c0306201 20000400 returned -14 [ 920.719680][T11631] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 920.749532][T11631] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 920.758708][T11631] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.810349][T11631] usb 3-1: config 0 descriptor?? [ 921.290155][T11631] keytouch 0003:0926:3333.0015: fixing up Keytouch IEC report descriptor [ 921.314149][T11631] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0015/input/input25 [ 921.401439][T11631] keytouch 0003:0926:3333.0015: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 921.492770][T10131] usb 3-1: USB disconnect, device number 30 21:06:58 executing program 2: r0 = socket(0x29, 0x4, 0xc2) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000)=0x68f49f2d, 0x4) syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x1800) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:06:58 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:58 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xc, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:58 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x74000000, 0x0}) [ 922.084714][T16668] binder: 16664:16668 unknown command 0 [ 922.085756][T16669] binder: 16665:16669 unknown command 0 [ 922.096836][T16670] binder: 16666:16670 ioctl c0306201 20000400 returned -14 [ 922.106026][T16669] binder: 16665:16669 ioctl c0306201 20000400 returned -22 [ 922.106271][T16668] binder: 16664:16668 ioctl c0306201 20000400 returned -22 21:06:58 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xd, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:06:58 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x7a000000, 0x0}) 21:06:58 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 922.257512][T16678] binder: 16677:16678 unknown command 0 [ 922.273982][T16678] binder: 16677:16678 ioctl c0306201 20000400 returned -22 [ 922.275159][T16681] binder: 16679:16681 ioctl c0306201 20000400 returned -14 [ 922.306291][T16683] binder: 16680:16683 unknown command 0 21:06:58 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xe, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 922.328502][T16683] binder: 16680:16683 ioctl c0306201 20000400 returned -22 [ 922.339563][ T9699] usb 3-1: new high-speed USB device number 31 using dummy_hcd 21:06:58 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0xff600000, 0x0}) 21:06:58 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 922.425879][T16691] binder: 16688:16691 unknown command 0 [ 922.427085][T16690] binder: 16689:16690 ioctl c0306201 20000400 returned -14 [ 922.444469][T16691] binder: 16688:16691 ioctl c0306201 20000400 returned -22 21:06:58 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x2000000000, 0x0}) 21:06:58 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x11, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 922.506740][T16697] binder: 16694:16697 unknown command 0 [ 922.529501][T16697] binder: 16694:16697 ioctl c0306201 20000400 returned -22 [ 922.578226][T16700] binder: 16698:16700 ioctl c0306201 20000400 returned -14 [ 922.613939][T16704] binder: 16701:16704 unknown command 0 [ 922.633744][T16704] binder: 16701:16704 ioctl c0306201 20000400 returned -22 [ 922.742623][ T9699] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 922.759102][ T9699] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 922.795899][ T9699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.815946][ T9699] usb 3-1: config 0 descriptor?? [ 923.291084][ T9699] keytouch 0003:0926:3333.0016: fixing up Keytouch IEC report descriptor [ 923.312690][ T9699] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0016/input/input26 [ 923.422274][ T9699] keytouch 0003:0926:3333.0016: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 923.491286][T27324] usb 3-1: USB disconnect, device number 31 21:07:00 executing program 2: r0 = socket(0x29, 0x4, 0xc2) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000)=0x68f49f2d, 0x4) syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x1800) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:07:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:00 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x2100000000, 0x0}) 21:07:00 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x12, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 924.082841][T16753] binder: 16750:16753 ioctl c0306201 20000400 returned -14 [ 924.090562][T16754] binder: 16749:16754 unknown command 0 [ 924.090700][T16755] binder: 16751:16755 unknown command 0 [ 924.104169][T16754] binder: 16749:16754 ioctl c0306201 20000400 returned -22 [ 924.120622][T16755] binder: 16751:16755 ioctl c0306201 20000400 returned -22 21:07:00 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x190100000000, 0x0}) 21:07:00 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x29, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 924.233748][T16765] binder: 16762:16765 ioctl c0306201 20000400 returned -14 [ 924.249570][T16766] binder: 16763:16766 unknown command 0 [ 924.258676][T16767] binder: 16764:16767 unknown command 0 [ 924.266099][T16766] binder: 16763:16766 ioctl c0306201 20000400 returned -22 21:07:00 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x400000000000, 0x0}) 21:07:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x9, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 924.291151][T16767] binder: 16764:16767 ioctl c0306201 20000400 returned -22 [ 924.329359][T10131] usb 3-1: new high-speed USB device number 32 using dummy_hcd 21:07:00 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x5e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 924.357446][T16773] binder: 16770:16773 ioctl c0306201 20000400 returned -14 [ 924.387695][T16775] binder: 16774:16775 unknown command 0 21:07:00 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x590100000000, 0x0}) [ 924.410547][T16775] binder: 16774:16775 ioctl c0306201 20000400 returned -22 [ 924.455580][T16779] binder: 16777:16779 unknown command 0 [ 924.475241][T16779] binder: 16777:16779 ioctl c0306201 20000400 returned -22 21:07:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 924.502622][T16781] binder: 16780:16781 ioctl c0306201 20000400 returned -14 [ 924.554515][T16786] binder: 16783:16786 unknown command 0 [ 924.581081][T16786] binder: 16783:16786 ioctl c0306201 20000400 returned -22 [ 924.741225][T10131] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 924.759370][T10131] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 924.788705][T10131] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.811837][T10131] usb 3-1: config 0 descriptor?? [ 925.281526][T10131] keytouch 0003:0926:3333.0017: fixing up Keytouch IEC report descriptor [ 925.302449][T10131] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0017/input/input27 [ 925.410987][T10131] keytouch 0003:0926:3333.0017: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 925.480986][T27324] usb 3-1: USB disconnect, device number 32 21:07:02 executing program 2: r0 = socket(0x29, 0x4, 0xc2) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000)=0x68f49f2d, 0x4) syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x1800) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:07:02 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x60ffffffffff, 0x0}) 21:07:02 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20000400, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:02 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 926.087638][T16834] binder: 16831:16834 unknown command 0 [ 926.092667][T16835] binder: 16830:16835 ioctl c0306201 20000400 returned -14 [ 926.099820][T16834] binder: 16831:16834 ioctl c0306201 20000400 returned -22 [ 926.114802][T16837] binder: 16832:16837 unknown command 0 [ 926.135168][T16837] binder: 16832:16837 ioctl c0306201 20000400 returned -22 21:07:02 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xc0306201, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:02 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:02 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x750000000000, 0x0}) [ 926.245410][T16846] binder: 16844:16846 unknown command 0 [ 926.251977][T16847] binder: 16845:16847 unknown command 0 [ 926.255526][T16846] binder: 16844:16846 ioctl c0306201 20000400 returned -22 [ 926.266453][T16847] binder: 16845:16847 ioctl c0306201 20000400 returned -22 21:07:02 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 926.312227][T16851] binder: 16848:16851 ioctl c0306201 20000400 returned -14 21:07:02 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 926.356289][T11631] usb 3-1: new high-speed USB device number 33 using dummy_hcd 21:07:02 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x1000000000000, 0x0}) [ 926.407808][T16857] binder: 16855:16857 unknown command 16388 [ 926.420382][T16858] binder: 16856:16858 unknown command 0 [ 926.427095][T16858] binder: 16856:16858 ioctl c0306201 20000400 returned -22 [ 926.434303][T16857] binder: 16855:16857 ioctl c0306201 20000400 returned -22 21:07:02 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 926.491911][T16863] binder: 16859:16863 ioctl c0306201 20000400 returned -14 21:07:02 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xe, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 926.564050][T16867] binder: 16865:16867 unknown command 64 [ 926.597991][T16867] binder: 16865:16867 ioctl c0306201 20000400 returned -22 [ 926.598807][T16870] binder: 16869:16870 unknown command 0 [ 926.638091][T16870] binder: 16869:16870 ioctl c0306201 20000400 returned -22 [ 926.740863][T11631] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 926.760532][T11631] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 926.790927][T11631] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.810049][T11631] usb 3-1: config 0 descriptor?? [ 927.311159][T11631] keytouch 0003:0926:3333.0018: fixing up Keytouch IEC report descriptor [ 927.332191][T11631] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0018/input/input28 [ 927.441266][T11631] keytouch 0003:0926:3333.0018: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 927.512534][T10131] usb 3-1: USB disconnect, device number 33 21:07:04 executing program 2: r0 = socket(0x29, 0x4, 0xc2) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000)=0x68f49f2d, 0x4) syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x1800) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:07:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:04 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x70740000000000, 0x0}) 21:07:04 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 928.128858][T16921] binder: 16919:16921 ioctl c0306201 20000400 returned -14 [ 928.154701][T16923] binder: 16920:16923 unknown command 0 21:07:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 928.175892][T16923] binder: 16920:16923 ioctl c0306201 20000400 returned -22 21:07:04 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x80540000000000, 0x0}) 21:07:04 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 928.273126][T16932] binder: 16930:16932 ioctl c0306201 20000400 returned -14 21:07:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:04 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x100000000000000, 0x0}) [ 928.322360][T16936] binder: 16933:16936 unknown command 0 [ 928.349158][T16936] binder: 16933:16936 ioctl c0306201 20000400 returned -22 [ 928.359140][T11631] usb 3-1: new high-speed USB device number 34 using dummy_hcd 21:07:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 928.397904][T16942] binder: 16939:16942 ioctl c0306201 20000400 returned -14 21:07:04 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x200000000000000, 0x0}) 21:07:04 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 928.584663][T16952] binder: 16949:16952 ioctl c0306201 20000400 returned -14 [ 928.596058][T16953] binder: 16950:16953 unknown command 0 [ 928.628152][T16953] binder: 16950:16953 ioctl c0306201 20000400 returned -22 [ 928.749249][T11631] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 928.779074][T11631] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 928.788129][T11631] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.819935][T11631] usb 3-1: config 0 descriptor?? [ 929.299523][T11631] keytouch 0003:0926:3333.0019: fixing up Keytouch IEC report descriptor [ 929.331061][T11631] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0019/input/input29 [ 929.420936][T11631] keytouch 0003:0926:3333.0019: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 929.502104][T11631] usb 3-1: USB disconnect, device number 34 21:07:06 executing program 2: r0 = socket(0x29, 0x4, 0xc2) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000)=0x68f49f2d, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:07:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x25, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:06 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x300000000000000, 0x0}) 21:07:06 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:06 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x400000000000000, 0x0}) [ 930.076295][T17004] binder: 17000:17004 ioctl c0306201 20000400 returned -14 [ 930.086699][T17005] binder: 17001:17005 unknown command 0 [ 930.108448][T17005] binder: 17001:17005 ioctl c0306201 20000400 returned -22 21:07:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x48, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:06 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 930.181117][T17014] binder: 17010:17014 ioctl c0306201 20000400 returned -14 21:07:06 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x500000000000000, 0x0}) [ 930.238030][T17020] binder: 17016:17020 unknown command 0 [ 930.251531][T17020] binder: 17016:17020 ioctl c0306201 20000400 returned -22 21:07:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x4c, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:06 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x9, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 930.349065][T10131] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 930.357433][T17028] binder: 17024:17028 ioctl c0306201 20000400 returned -14 [ 930.384476][T17030] binder: 17027:17030 unknown command 0 21:07:06 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x600000000000000, 0x0}) [ 930.406671][T17030] binder: 17027:17030 ioctl c0306201 20000400 returned -22 [ 930.504818][T17039] binder: 17038:17039 ioctl c0306201 20000400 returned -14 [ 930.769178][T10131] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 930.785617][T10131] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 930.807933][T10131] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.830153][T10131] usb 3-1: config 0 descriptor?? [ 931.300751][T10131] keytouch 0003:0926:3333.001A: fixing up Keytouch IEC report descriptor [ 931.321894][T10131] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.001A/input/input30 [ 931.430484][T10131] keytouch 0003:0926:3333.001A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 931.501543][T10131] usb 3-1: USB disconnect, device number 35 21:07:08 executing program 2: socket(0x29, 0x4, 0xc2) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:07:08 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x60, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:08 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:08 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x700000000000000, 0x0}) [ 932.083066][T17088] binder: 17085:17088 unknown command 0 [ 932.090134][T17089] binder: 17087:17089 ioctl c0306201 20000400 returned -14 [ 932.096572][T17088] binder: 17085:17088 ioctl c0306201 20000400 returned -22 21:07:08 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x68, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:08 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x800000000000000, 0x0}) 21:07:08 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 932.229625][T17101] binder: 17099:17101 ioctl c0306201 20000400 returned -14 21:07:08 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:08 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x900000000000000, 0x0}) [ 932.281618][T17106] binder: 17103:17106 unknown command 0 [ 932.287188][T17106] binder: 17103:17106 ioctl c0306201 20000400 returned -22 21:07:08 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x74, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 932.348214][T17114] binder: 17110:17114 ioctl c0306201 20000400 returned -14 [ 932.349706][T27324] usb 3-1: new high-speed USB device number 36 using dummy_hcd 21:07:08 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:08 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0xa00000000000000, 0x0}) [ 932.466504][T17122] binder: 17118:17122 unknown command 0 [ 932.468160][T17123] binder: 17120:17123 ioctl c0306201 20000400 returned -14 [ 932.487090][T17122] binder: 17118:17122 ioctl c0306201 20000400 returned -22 [ 932.749060][T27324] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 932.768991][T27324] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 932.778128][T27324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.811317][T27324] usb 3-1: config 0 descriptor?? [ 933.289366][T27324] keytouch 0003:0926:3333.001B: fixing up Keytouch IEC report descriptor [ 933.309323][T27324] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.001B/input/input31 [ 933.401998][T27324] keytouch 0003:0926:3333.001B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 933.492078][T27324] usb 3-1: USB disconnect, device number 36 21:07:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:07:10 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x7a, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:10 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:10 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0xb00000000000000, 0x0}) 21:07:10 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x300, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 934.102271][T17175] binder: 17172:17175 ioctl c0306201 20000400 returned -14 [ 934.106895][T17176] binder: 17171:17176 unknown command 0 [ 934.120641][T17176] binder: 17171:17176 ioctl c0306201 20000400 returned -22 21:07:10 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xe, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:10 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0xc00000000000000, 0x0}) 21:07:10 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x500, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 934.249189][T17186] binder: 17185:17186 unknown command 0 [ 934.261234][T17186] binder: 17185:17186 ioctl c0306201 20000400 returned -22 21:07:10 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 934.293116][T17189] binder: 17188:17189 ioctl c0306201 20000400 returned -14 [ 934.320043][T27324] usb 3-1: new high-speed USB device number 37 using dummy_hcd 21:07:10 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0xd00000000000000, 0x0}) 21:07:10 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x600, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 934.408191][T17199] binder: 17197:17199 ioctl c0306201 20000400 returned -14 21:07:10 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 934.699029][T27324] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 934.718760][T27324] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 934.748027][T27324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.780178][T27324] usb 3-1: config 0 descriptor?? [ 935.259384][T27324] keytouch 0003:0926:3333.001C: fixing up Keytouch IEC report descriptor [ 935.278024][T27324] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.001C/input/input32 [ 935.372474][T27324] keytouch 0003:0926:3333.001C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 935.460062][T27324] usb 3-1: USB disconnect, device number 37 21:07:11 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:07:12 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x700, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:12 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0xe00000000000000, 0x0}) 21:07:12 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:12 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x900, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:12 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 936.061550][T17259] binder: 17254:17259 ioctl c0306201 20000400 returned -14 21:07:12 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0}) 21:07:12 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xa00, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:12 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x25, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 936.215233][T17272] binder: 17271:17272 ioctl c0306201 20000400 returned -14 21:07:12 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x48, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:12 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xb00, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:12 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x1100000000000000, 0x0}) [ 936.310255][T10131] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 936.411354][T17291] binder: 17285:17291 ioctl c0306201 20000400 returned -14 [ 936.688680][T10131] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 936.700270][T10131] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 936.709333][T10131] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.719391][T10131] usb 3-1: config 0 descriptor?? [ 937.200733][T10131] keytouch 0003:0926:3333.001D: fixing up Keytouch IEC report descriptor [ 937.217703][T10131] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.001D/input/input33 [ 937.310776][T10131] keytouch 0003:0926:3333.001D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 937.400774][T27324] usb 3-1: USB disconnect, device number 38 21:07:13 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:07:13 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x4c, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:13 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xb63, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:13 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x1200000000000000, 0x0}) 21:07:14 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:14 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xc00, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 937.988238][T17341] binder: 17337:17341 ioctl c0306201 20000400 returned -14 21:07:14 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0}) 21:07:14 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xc63, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:14 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x60, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 938.136052][T17356] binder: 17355:17356 ioctl c0306201 20000400 returned -14 21:07:14 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xd00, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:14 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x2500000000000000, 0x0}) 21:07:14 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x68, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 938.218556][T27324] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 938.252991][T17367] binder: 17365:17367 ioctl c0306201 20000400 returned -14 [ 938.588782][T27324] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 938.606714][T27324] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 938.642845][T27324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.664692][T27324] usb 3-1: config 0 descriptor?? [ 939.159098][T27324] keytouch 0003:0926:3333.001E: fixing up Keytouch IEC report descriptor [ 939.173522][T27324] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.001E/input/input34 [ 939.280631][T27324] keytouch 0003:0926:3333.001E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 939.360412][T27324] usb 3-1: USB disconnect, device number 39 21:07:15 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:07:15 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xd63, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:15 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:15 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x4800000000000000, 0x0}) [ 939.963120][T17424] binder: 17422:17424 ioctl c0306201 20000400 returned -14 21:07:16 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xe00, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:16 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x74, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:16 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x4c00000000000000, 0x0}) 21:07:16 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x7a, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 940.092823][T17437] binder: 17433:17437 ioctl c0306201 20000400 returned -14 21:07:16 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x1100, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:16 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x5c00000000000000, 0x0}) 21:07:16 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x300, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 940.198459][T27324] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 940.232449][T17449] binder: 17446:17449 ioctl c0306201 20000400 returned -14 21:07:16 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0}) [ 940.330131][T17455] binder: 17454:17455 ioctl c0306201 20000400 returned -14 [ 940.568588][T27324] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 940.584989][T27324] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 940.611219][T27324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.634832][T27324] usb 3-1: config 0 descriptor?? [ 941.128836][T27324] keytouch 0003:0926:3333.001F: fixing up Keytouch IEC report descriptor [ 941.144901][T27324] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.001F/input/input35 [ 941.240710][T27324] keytouch 0003:0926:3333.001F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 941.331608][ T42] usb 3-1: USB disconnect, device number 40 21:07:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:07:17 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x1200, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:17 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x500, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:17 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x6800000000000000, 0x0}) [ 941.942059][T17506] binder: 17503:17506 ioctl c0306201 20000400 returned -14 21:07:18 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x6c00000000000000, 0x0}) 21:07:18 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x600, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:18 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x1300, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 942.068289][T17517] binder: 17516:17517 ioctl c0306201 20000400 returned -14 21:07:18 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x700, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:18 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x2000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:18 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x7400000000000000, 0x0}) 21:07:18 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x900, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:18 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x2500, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 942.198418][T27324] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 942.221401][T17533] binder: 17530:17533 ioctl c0306201 20000400 returned -14 [ 942.558549][T27324] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 942.578332][T27324] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 942.607808][T27324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.633123][T27324] usb 3-1: config 0 descriptor?? [ 943.111585][T27324] keytouch 0003:0926:3333.0020: fixing up Keytouch IEC report descriptor [ 943.131308][T27324] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0020/input/input36 [ 943.230183][T27324] keytouch 0003:0926:3333.0020: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 943.312907][T27324] usb 3-1: USB disconnect, device number 41 21:07:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:07:19 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x7a00000000000000, 0x0}) 21:07:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x4800, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:19 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xa00, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:19 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xb00, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 943.899708][T17590] binder: 17586:17590 ioctl c0306201 20000400 returned -14 21:07:19 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0xffffffffff600000, 0x0}) 21:07:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x4c00, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:20 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xb63, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:20 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x5c00, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 944.032807][T17604] binder: 17600:17604 ioctl c0306201 20000400 returned -14 21:07:20 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:07:20 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x6000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:20 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xc00, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 944.158263][ T42] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 944.158619][T17617] binder: 17613:17617 ioctl c0306201 20000400 returned -14 [ 944.518263][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 944.534705][ T42] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 944.561314][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.585703][ T42] usb 3-1: config 0 descriptor?? [ 945.088692][ T42] keytouch 0003:0926:3333.0021: fixing up Keytouch IEC report descriptor [ 945.102677][ T42] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0021/input/input37 [ 945.220102][ T42] keytouch 0003:0926:3333.0021: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 945.292761][T11631] usb 3-1: USB disconnect, device number 42 21:07:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:07:21 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x630b, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:21 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000000000)=0x1, 0x4) r2 = dup(r1) r3 = accept4$tipc(r2, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) getsockopt(r3, 0x10001, 0x7, &(0x7f0000000100)=""/196, &(0x7f0000000200)=0xc4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:07:21 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xc63, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 945.893349][T17674] binder: 17671:17674 ioctl c0306201 20000040 returned -14 21:07:21 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xd00, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:21 executing program 4: ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000040)=ANY=[@ANYBLOB="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"]) r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000000)={0x541d, 0x1000}) 21:07:21 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x630c, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:22 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xd63, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 946.034085][T17688] binder: 17684:17688 ioctl c0306201 20000400 returned -14 21:07:22 executing program 4: getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x200900, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000300)={0x2}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fsetxattr(r1, &(0x7f0000000140)=@known='com.apple.system.Security\x00', &(0x7f0000000180)='\x00', 0x1, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x7, &(0x7f0000000340)=[{}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x280200) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x200882, 0x0) ioctl$SNAPSHOT_FREE(r6, 0x3305) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x200080, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r5, 0x7, 0xfffffffffffffffc, 0x1}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000000)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:07:22 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x630d, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 946.128143][T17290] usb 3-1: new high-speed USB device number 43 using dummy_hcd 21:07:22 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xe00, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 946.211144][T17700] binder: 17698:17700 ioctl c020f509 200000c0 returned -22 21:07:22 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x1100, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 946.548421][T17290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 946.564867][T17290] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 946.585071][T17290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.606854][T17290] usb 3-1: config 0 descriptor?? [ 947.110267][T17290] keytouch 0003:0926:3333.0022: fixing up Keytouch IEC report descriptor [ 947.131566][T17290] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0022/input/input38 [ 947.229982][T17290] keytouch 0003:0926:3333.0022: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 947.313025][T27324] usb 3-1: USB disconnect, device number 43 21:07:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:07:23 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x6800, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:23 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x1200, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:23 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r3, 0x40044145, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x29, 0x8, 0x1e, 0x8, 0x0, @mcast1, @mcast2, 0x804f, 0x1, 0x2, 0x101}}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r9, @ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004440)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x2c, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @mcast1}, @TCA_RSVP_SRC={0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x5c}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)={0x1b4, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x20}, 0x4000880) fchown(r3, r5, 0xee01) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:07:23 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x1300, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 947.905206][T17758] binder: 17755:17758 ioctl c0306201 20000400 returned -14 21:07:23 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x6c00, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:24 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x2000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:24 executing program 4: setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000140)="3bfea0678effc485fdd34fbbde6931362434eeabaadd338befa915ddda051f77118a0caa3c8400059347800fcb26f48c7ef3a5cb6dff0396a028f1f6c3913f683af5c4d420c7c3093fc8e8414958d8f3d08bdddc", 0x54) r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x1, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r3, 0x8250aea6, &(0x7f00000001c0)=""/58) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x7b, &(0x7f0000000040)=ANY=[@ANYRES32=r5, @ANYBLOB="00000080"], &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000ac0)={r5, @in={{0x2, 0x4e21, @loopback}}, 0x7, 0x9}, 0x90) dup3(r0, r2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000bc0)={@private0={0xfc, 0x0, [], 0x1}, 0x968, 0x0, 0x0, 0x0, 0xb97, 0x3f}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$btrfs(&(0x7f0000000200)='btrfs\x00', &(0x7f0000000240)='./file0\x00', 0x2, 0xa, &(0x7f00000008c0)=[{&(0x7f0000000280)="1e34193a2d17699641c9dcd6779547f32aca6a933aeed44100bc79bd6e85d2d446eef1866344421f34506f5f5a7fc1db903da17f8cac1c1fdd32df7e9bc2dea51046930296a5918a2ed625cae95718f851eb14bef63ae2be40efca9b70ca0106b33e7f582205b654a4fba2027eb1b55e815fd581b79d827e23978b4729f04cdd0ab8304da881be89dbef7cbd6cd5fade1862f48d61bfd109ab455de5558f16f5e1691ed5be1f0013c6752a7f2acb892c9edac760a5b7eb2258776e17b58eb88fd218e352d92052b0a5a3cfc49849ec", 0xcf, 0x6}, {&(0x7f0000000380)="8667826fb42d99fc841b7a0f81f5e5a16872dfce8efcd15b12a493adbb482df7cf0a2c11c06b641d059dde65061ca73d1c03910ebaddd1753c9123ddc4dcfc1a556d9569732c7d26ec12fd243cf96e48d0", 0x51, 0x7}, {&(0x7f0000000440)="75097a7f9b0e300a1946d1d3613fb871ea88f249c498a24a140d5e8187a31717a6cdd480d25a17df4a9bfeca6001cbfd72e5ac81c04dc048b49e81fc16b55d6c0a95200c2dde3f203b37c3859a6564b650b5690d5ff0165083d5ec9ad775e1a5fd2fb78b90513536112e581344dc4ea00b10fbc989800bb230915b82646a735f1fdf86c90d80654347198fce320c995de53352c3817fd805404ef708642aa7e7f88de942967241250593d9666b28c5fcc02774a8368d0737d7833bd2", 0xbc, 0x8}, {&(0x7f0000000500)="69ba2cd3182d571bf5ab6902f1d3232fa058f8cd2dfd6352ac218c9259a983918431731cabd3bd2b82047d6e10de7786e8b2e5a3bf2494367eabbd845619bd9dda00f84a83e158b7097611634fef1802", 0x50, 0x98d}, {&(0x7f0000000580)="543a19f8c96780b1a8bdbea8f186e2a0ebe9d2e6c401eebbff7280758c64da", 0x1f, 0x3}, {&(0x7f00000005c0)="1614fa3b948ab55bfaba853b2f405083129390228240708733e5f4e42692e1f20b8ceb9c33706008cb197337bf4b0e754a8e26f7c7c040047dde2e3467985cfb0f8780baed717181251dd4347466d31e062230861b97eb1532d0b1bd4fbb67922844381d5a8463e5824f8d1af3c502461a903ef3ffaee1825523d8fdbfdad98a6836974dd84082c998b78022aec014126e3e794bd42cf3cc4675d6348c1d71fef600fdb0b85055dac0c4d61a4ae97c9c", 0xb0, 0x7ff}, {&(0x7f0000000680)="479dc75b86e54686f025362927a704eaab45b9097294cc1fd0e699b2f6c1274506486d76f483c5be803ef66ef59c3af17783713fb7d72e6e9c58e5d9c1390041c0716126630aa2c6cab71ac7ee0bf6d8071ffe8325eec1ec1083430b8820beea036742b038bbd01e20c39b3cc81143e8729d65cfae842bb6a42f36b041cee28f6f318bdd8d208f47a5a5064262be0b657eaa2ca64c45debb5d48c96f8cf26d97db7b403e0a86df4be46150c2525b71af9735670e042574f1185b89a03070fdbdf7303318237c8ed66bc574052d06f5c731727809d0d5a214e8424a7d6a9c042d032bdf428e47de20eea3bc93eebcc1ff530e331abf70358076d903", 0xfb, 0x8}, {&(0x7f0000000780)="be12d8d3bf32e7172f990135dfcc240c9a8782fa8e7c13f75d0dad62792e7d4310ecb2c2fd874ca4ffc60911b6d2ae0939409924241db74e6cf4d247495b7d09dc1bc3495b5fe1b803b996edbc05bf2f823f9deaf354ab6e763f5c2589a1958c751741c2c9c2e45a072464", 0x6b, 0x5}, {&(0x7f0000000800)="c83bf3e11ec0ae0b65f91d633cadb75e981604dd5f61eddea1c7b1837a580371a28e0e4a4718267ccec799ac3d15bd1d43", 0x31, 0x9}, {&(0x7f0000000840)="24e8ec271d17ab818f8e9973dc07e39032da8e57a47c5bfaf0f63100ddb48ff901383c16312ff07e2798c61cfd638d35453284d3f665d91166cbe52995a330bbeeebc12202379f4515ac4d005075be547f03ee", 0x53}], 0x40a0, &(0x7f00000009c0)=ANY=[@ANYBLOB="646973636172642c636865636b5f696e745f646174612c6175746f6465667261672c656e6f7370635f64656275672c636f6d70726573732c626172726965722c6e6f656e6f7370635f64656275672c6e6f656e6f7370635f64656275672c6673757569643d6231c438355a38302d373961302d653538502d343465352d31363834303270342c7375626a5f757365723d7d2c6673757569643d37366162333363372d352d31663336316433662c736d61636b6673666c6f6f723d2f6465762f627367002c6f626a5f726f6c653d2f6465762f62696e64657223002c6673636f6e746578743d73797374656d5f752c00"]) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) fstatfs(r6, &(0x7f0000000000)=""/166) 21:07:24 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x7400, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:24 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x2500, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:24 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x7a00, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 948.164430][T17786] binder: 17776:17786 ioctl 8912 400200 returned -22 [ 948.178111][T17290] usb 3-1: new high-speed USB device number 44 using dummy_hcd 21:07:24 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x4800, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 948.265370][T17786] binder: 17776:17786 ioctl c0306201 20000400 returned -14 [ 948.598196][T17290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 948.614685][T17290] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 948.637133][T17290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.659398][T17290] usb 3-1: config 0 descriptor?? [ 948.909752][T17803] binder: 17776:17803 ioctl 8912 400200 returned -22 [ 948.970183][T17803] binder: 17776:17803 ioctl c0306201 20000400 returned -14 [ 949.140178][T17290] keytouch 0003:0926:3333.0023: fixing up Keytouch IEC report descriptor [ 949.159316][T17290] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0023/input/input39 [ 949.250817][T17290] keytouch 0003:0926:3333.0023: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 949.348152][T17290] usb 3-1: USB disconnect, device number 44 21:07:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:07:25 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x634040, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:25 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x4c00, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:25 executing program 4: r0 = open(&(0x7f0000000080)='./file0\x00', 0x1010c0, 0x26) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x4, 0x2d8, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x240, 0x240, 0x240, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x17}, @dev={0xac, 0x14, 0x14, 0x34}, 0x0, 0xffffff00, 'geneve0\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0x0, 0x0, 0x3}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@broadcast, @local, 0xffffffff, 0xffffffff, 'syzkaller0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16, 0x5}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, 'NV'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}, {0xffffffff, 0x7}}, @common=@socket0={{0x20, 'socket\x00'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x338) r1 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000200)={0xffff, 0x3, 0x200, 0x0, 0x10, "c4a0e7556a873b8d"}) sendmsg$can_raw(r3, &(0x7f00000001c0)={&(0x7f0000000100), 0x10, &(0x7f0000000180)={&(0x7f0000000140)=@can={{0x3, 0x1, 0x1}, 0xa0, 0x2, 0x0, 0x0, "568b2a03d809f814"}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x94) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x7ff}, &(0x7f0000000040)=0x8) r6 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) accept$alg(r0, 0x0, 0x0) 21:07:26 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x1000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:26 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x5c00, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 949.982121][T17854] binder: 17847:17854 ioctl c0306201 20000400 returned -14 21:07:26 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x1634040, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:26 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000000)) 21:07:26 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x6000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 950.151832][T17870] binder: 17867:17870 ioctl c0306201 20000400 returned -14 21:07:26 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x2000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:26 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x453, 0x100, 0x70bd2b, 0x25dfdbfd, "f7f3c2e627803b437d20ece6ce0e07ec87ce9423b2edbc", ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 950.207905][ T5] usb 3-1: new high-speed USB device number 45 using dummy_hcd 21:07:26 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x630b, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 950.285077][T17879] binder: 17878:17879 ioctl c0306201 20000400 returned -14 [ 950.577976][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 950.594338][ T5] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 950.621083][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.644763][ T5] usb 3-1: config 0 descriptor?? [ 951.139977][ T5] keytouch 0003:0926:3333.0024: fixing up Keytouch IEC report descriptor [ 951.154721][ T5] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0024/input/input40 [ 951.269751][ T5] keytouch 0003:0926:3333.0024: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 951.340771][ T42] usb 3-1: USB disconnect, device number 45 21:07:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:07:27 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x2630440, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:27 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x630c, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:27 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x3000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:27 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x630d, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:28 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x3630840, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:28 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x6800, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:28 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x4000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:28 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x6c00, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 952.187823][T17290] usb 3-1: new high-speed USB device number 46 using dummy_hcd 21:07:28 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x4630440, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:28 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x7400, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:28 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x5000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 952.579638][T17290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 952.597797][T17290] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 952.606895][T17290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.639945][T17290] usb 3-1: config 0 descriptor?? [ 953.118278][T17290] keytouch 0003:0926:3333.0025: fixing up Keytouch IEC report descriptor [ 953.147309][T17290] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0025/input/input41 [ 953.239450][T17290] keytouch 0003:0926:3333.0025: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 953.321254][T11631] usb 3-1: USB disconnect, device number 46 21:07:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:07:29 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x5630440, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:29 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x7a00, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:30 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x6000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:30 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x634040, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:30 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x6630440, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:30 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x1000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:30 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x7000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:30 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x1634040, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:30 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x7630440, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:30 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x2000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:07:30 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x8000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:30 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x2630440, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:30 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x8631040, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:30 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x3000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:30 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x9000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:30 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x3630840, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:30 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x9631040, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:30 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x4000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:30 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xa000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:30 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x4630440, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:31 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x5000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:07:31 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xa630840, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:31 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x5630440, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:31 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xb000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:31 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x6000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:31 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xb630000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:31 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x6630440, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:31 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xc000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:31 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x7000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:31 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xc630000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:31 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x7630440, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:31 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xd000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:07:31 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x8000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:31 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xd630000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:31 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x8631040, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:31 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xe000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:31 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x9000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xe630c40, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:32 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x9631040, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 956.047617][ T7] usb 3-1: new high-speed USB device number 47 using dummy_hcd 21:07:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xf630c40, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:32 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xa000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 956.247594][ T7] usb 3-1: device descriptor read/64, error 18 21:07:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x10000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:32 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xa630840, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 956.521269][ T7] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 956.717575][ T7] usb 3-1: device descriptor read/64, error 18 [ 956.837627][ T7] usb usb3-port1: attempt power cycle [ 957.547543][ T7] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 957.637713][ T7] usb 3-1: Invalid ep0 maxpacket: 0 [ 957.787606][ T7] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 957.877720][ T7] usb 3-1: Invalid ep0 maxpacket: 0 [ 957.883061][ T7] usb usb3-port1: unable to enumerate USB device 21:07:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:07:34 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x10630840, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:34 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xb000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:34 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x11000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:34 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xb630000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:35 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x11634840, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xc000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:35 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x12000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xc630000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xd000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:35 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x12634840, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 959.247419][ T7] usb 3-1: new high-speed USB device number 51 using dummy_hcd 21:07:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xd630000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 959.447410][ T7] usb 3-1: device descriptor read/64, error 18 [ 959.717409][ T7] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 959.907389][ T7] usb 3-1: device descriptor read/64, error 18 [ 960.027440][ T7] usb usb3-port1: attempt power cycle [ 960.738779][ T7] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 960.827344][ T7] usb 3-1: Invalid ep0 maxpacket: 0 [ 960.987386][ T7] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 961.077631][ T7] usb 3-1: Invalid ep0 maxpacket: 0 [ 961.082986][ T7] usb usb3-port1: unable to enumerate USB device 21:07:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:07:37 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x13000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:37 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xe000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:37 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000080)={0x3f, {{0xa, 0x4e23, 0x28, @dev={0xfe, 0x80, [], 0x40}, 0x8}}}, 0x88) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x100, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x3}, @free_buffer], 0x62, 0x0, &(0x7f0000000240)="a4e0c5f92ee23e890854e33a2d7cfe9d5760c18ada3b92e35f2cf7d05e488a2212452a15688e9b4c2c6aaa45fa4adc9c88a0598deb3eddc20302fa105f3a2b71c000a95d646e6daa8cefad51a98f90441e88355a192f6a664492fb80dcc1b4a71096"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x7, 0xd80) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000180)={0x1a2, 0xa, [], [@enc_lim={0x4, 0x1, 0x4}, @enc_lim, @calipso={0x7, 0x48, {0x3, 0x10, 0x81, 0x3, [0x100, 0xf8, 0x0, 0xffffffff, 0x401, 0x1, 0x3, 0xfffffffffffffe00]}}]}, 0x58) 21:07:37 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xe630c40, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 961.894240][T18251] binder: 18249:18251 ioctl c0306201 20000400 returned -14 21:07:37 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x20000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:38 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x7, 0x800, 0x8, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x8, 0x4, 0xfff}}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@deltclass={0x94, 0x29, 0x100, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x10, 0x5}, {0x2, 0x7}, {0xc, 0x10}}, [@tclass_kind_options=@c_atm={{0x8, 0x1, 'atm\x00'}, {0xc, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xe, 0x2}}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x49}}, @TCA_RATE={0x6, 0x5, {0x3e, 0x9}}, @tclass_kind_options=@c_prio={0x9, 0x1, 'prio\x00'}, @tclass_kind_options=@c_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x34, 0x2, [@TCA_HFSC_USC={0x10, 0x3, {0x9, 0x8, 0x8000}}, @TCA_HFSC_USC={0x10, 0x3, {0xffffffff, 0xfffff677, 0x1}}, @TCA_HFSC_FSC={0x10, 0x2, {0x40, 0x4, 0x80}}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4004000}, 0x41) 21:07:38 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xf630c40, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x25000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 962.051167][T18266] binder: 18264:18266 ioctl c0306201 20000400 returned -14 21:07:38 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r4, 0x40044145, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r4, 0x40084146, &(0x7f0000000040)=0x100000001) 21:07:38 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x10000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x40046302, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 962.230105][T18279] binder: 18276:18279 ioctl c0306201 20000000 returned -14 [ 962.287337][ T7] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 962.487239][ T7] usb 3-1: device descriptor read/64, error 18 [ 962.758953][ T7] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 962.958480][ T7] usb 3-1: device descriptor read/64, error 18 [ 963.087279][ T7] usb usb3-port1: attempt power cycle [ 963.798673][ T7] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 963.898614][ T7] usb 3-1: Invalid ep0 maxpacket: 0 [ 964.047229][ T7] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 964.147166][ T7] usb 3-1: Invalid ep0 maxpacket: 0 [ 964.152418][ T7] usb usb3-port1: unable to enumerate USB device 21:07:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:07:40 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x40046304, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:40 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x10630840, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:40 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)={0x4ec, r2, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x52}}}}, [@NL80211_ATTR_FRAME={0x4c8, 0x33, @data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x7ffc}, @device_a, @device_a, @device_a, {0x5, 0x1f}}, {0x9, 0x0, 0x0, 0x0, 0xb6}}, {@type11={{0x0, 0x2, 0xb, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x5}, @device_a, @device_b, @random="5837e0154e51", {0x3, 0xffc}}, {0xb, 0x1, 0x0, 0x1, 0x73}}}, @a_msdu=[{@device_a, @broadcast, 0xc4, "092b80bd3d54a3336657b460f9d7b0756fa846b535985b55c3ff63b930bbab0f5d95bfb3fc8f35686703805c5d4ac8566bf1982285a93497d600fbfc4d1ca0f7d0bac2f39db19a6ea204e9be6a59f5e6a609a64463aa019acf2e1a8e8dcddffa2f2a0a9aa2a219de3af1acb5ccfbb4eb44379ef797304ccb8b0bbc0f6c8a5dfce99cd22e33c28fe461cb8427845581dd0a6cfa6e01c35688092e2197e1c8a49f07e61e996ffbfa9040db3e0b7173273ef91ceeedb4b1e9ee4a97e9460354fc5b8f0ca014"}, {@device_a, @broadcast, 0x5b, "aa515c3ac8cbc523e0cb677d5404b7ab65ee18b17142b7e27d5489a863a0be5baa8db3d259641d35752e17f822a9ce7ab646469a7cb05128dc4dc63dbf7f98faae285e661e06d5f0b398c22d4d743b6f0146e10e9e0064c8905e34"}, {@device_b, @device_a, 0xe6, "5d61311da933e36612cc7eb5722d50dc3f0bdb711b0a213fe98f0a349ebf9611b73897f6adc3c754900c49ff388b8ba778262dcaf6b5579867b5795ab6fe9f1ef222d52b60115671ca5b5d868116267426b0fb0fd6baa82c2e767f9abeb181895e5747f25ec9de544dcc2a244d5914126ab55f7705a94a7ed6006a35e1f17ef2a5f4ed01d485f9edbb6d52e0e10ac96343d8c096f8fea3ecaad4744b49b98b4a6625243c59ebbf7aea4aeeab347d424034ee59e1b77bb96abe8599a2386f223854797065341c0457fd02b0a9925102ec6e7eedd88eddc16f65928ee6698aa5a6cbf0b7c11af2"}, {@device_b, @device_b, 0xba, "4111312931f5066acb4886e6ca2f56617d425d9f538b066069cf099b96a2bdff70748265be88cb693400649a22ad3143a6c10f64cb69d9c2e4e3dbba8cf9fcb954c882fd31f6661143a0093588d08011c98754dbbff2ff2c8727a2a72bc741ae6baff31153631e55db06e60b21b3078a0e5916b77f8d77a70d58599f10141ec7980444f249578a5953950ffec0ae0f0fbfc8d5e8c7b7165374cad1fb8ff1887c45cde0e28b4d20bf837aceb37f2817c508f583fbe80454f08d8c"}, {@device_a, @device_a, 0xe8, "2449cc0c7c95841755223490c7b6e8a917bc78226ec462a40cb816de373958c3d6b9f49b658ff82c667511512ed9bb0c3d1b9b1fa58ce143c8ac8a5f4bb61bba8b538043985278ef3eb537bb16164e363a6dcf7a6637638d9f58c6061152abed1021c8fb976257fff1f5791b414b537920128919d723241a33581d0659c9b757225f5b9fe4b832451f1f097e5f8b0bb4d64a7f928701962ca48f70aabe0f0b798418d3f7d4c8172ff4460e95c6a20cf3579fe280a8d5f8b1c44f72853ac9713480863f80876693be99521828637bdefaa329fc37c3da04009022500158d65351ba580ff854618f3f"}, {@broadcast, @device_b, 0x80, "2993f7a701d7fccc7f017d6ff6ebe38c25254a84744c890ba96f0fb5500064463ad9195ea3e48abdfd1fe26e9d15925aa50b367542e0c67c83d6cd5a6b301b8782b82fc440eed68ce3829d215376e6d727c7777a8ffc7d296fef251b8842825eefa3c58fff9fc9fc239ddf1462f290a7d6913880291903f8a978987cf93a7e81"}]}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x4ec}, 0x1, 0x0, 0x0, 0x44000}, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(0xffffffffffffffff, 0x40045109, &(0x7f0000000040)=0xffffff08) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000000)={0x2, 0x7, 0x81, 0x5, 0x6, 0x2, 0x7fff}) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fcntl$setsig(r3, 0xa, 0x2b) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:07:40 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x11000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:41 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x40046305, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 964.944527][T18301] binder: 18296:18301 ioctl c0306201 20000400 returned -14 21:07:41 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400, 0x1f) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000180)="1617") ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000140)={0x41, 0x1f, 0x9, 0x180, "f0d4a512b0cb0e1fe3203e2b83028f1b9ab8b2004e62418a37e6b6c2a9590357"}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="6e61740000000000000000000000000000000000000000002000000000000000020000000000000000000000000000000000000000000000feff00"/72], 0x48) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 21:07:41 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x11634840, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:41 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x40046306, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 965.081798][T18313] binder: 18312:18313 ioctl c0306201 20000400 returned -14 21:07:41 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x12000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 965.131071][T18313] binder: 18312:18313 ioctl c0306201 20000400 returned -14 21:07:41 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000440)={{0xa, 0x6, 0x0, 0x1, 'syz1\x00', 0x1000}, 0x1, [0x1, 0x3, 0x0, 0x7, 0x9, 0x9, 0x6, 0xfffffffffffffffa, 0x5, 0x35cf, 0x8000, 0x7f, 0x1d, 0x2, 0x0, 0x3, 0x6bb, 0x9, 0x9, 0x1, 0xfff, 0x200, 0x6, 0x3, 0x81, 0x80000001, 0x7ff, 0x10001, 0x1, 0x7, 0x0, 0x5, 0x400, 0x4, 0x0, 0x8001, 0xff, 0x81, 0xb8, 0x80000000, 0x7, 0x1f, 0x8, 0x1355, 0x8, 0x8, 0x101, 0x5f, 0xfffffffffffff001, 0x7, 0x4, 0x7, 0x32b6, 0x6, 0x2, 0x8001, 0x9, 0x3000000000, 0x0, 0xffffffffffffffba, 0x100000000, 0x7, 0x101, 0x907, 0x0, 0x9, 0x7, 0x7dbfc6a, 0x945eb5, 0x9, 0x1, 0x7f, 0x9, 0x80, 0x5, 0xaf2, 0x2, 0x1, 0x8, 0x3f, 0x2, 0x5, 0x3, 0x6, 0xfffffffffffffeff, 0x400, 0xfffffffffffffff7, 0x8, 0x6, 0x6, 0xfff, 0x1, 0x3f, 0xeae5, 0x7, 0x8, 0x9, 0xf067, 0x8, 0x7, 0x10001, 0x10000, 0x3, 0x7fff, 0x1, 0x8001, 0x10001, 0x200, 0x100, 0x4, 0x4, 0x5, 0x7, 0x5d00, 0x8000, 0x1, 0x2, 0x7, 0xffff, 0x4, 0xffff, 0x29, 0x0, 0x9, 0x5, 0x0, 0x8, 0xffffffff]}) 21:07:41 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x40046307, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 965.253280][T18328] binder: 18325:18328 ioctl c0306201 20000400 returned -14 [ 965.327097][ T7] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 965.717287][ T7] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 965.737089][ T7] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 965.756356][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.779179][ T7] usb 3-1: config 0 descriptor?? [ 965.819334][ T7] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 21:07:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:07:43 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x12634840, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:43 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x40086303, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:43 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="f52ebc5dc7e939715999b5bb200025bd7000fbdbdf257f0000000c0003000400000000000000ef7dfb9ef58e8942558867daf9ea67e64b3099fbb06c5dda8f6c11760549dff1561263a27a18195c51b319f1ceb8e2fd45caed35698c5d6cebe3816444b2f08386401b9c9858dc6c3bd6fb8cb383d3cc563f9d60ce511c16107f056a84d83b85dc6edf93c72e16854891efae6ddaabfd2e73a74e03251c6dcb5f905c7c8b0c95b467f6770189e130b6cde8e20740c2ec726f066bd604246433d395871c88deb240e35d28f5c68bcee6e9f3aec63f1920e2385be00b31a43eb81987"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r1 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 967.904970][ T5] usb 3-1: USB disconnect, device number 59 21:07:44 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x4008630a, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 968.037136][T18356] binder: 18352:18356 ioctl c0306201 20000400 returned -14 21:07:44 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x13000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:44 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x40086310, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:44 executing program 4: syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x400) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000040)={0xf3deaed1, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:07:44 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x20000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:44 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x400c630e, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:44 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400201) ptrace(0x4201, 0xffffffffffffffff) r2 = signalfd(r0, &(0x7f0000000000)={[0xa000000]}, 0x8) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x7]}, 0x8, 0x800) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, 0x0, 0x3, 0x0, 0x0}) [ 968.336936][ T5] usb 3-1: new high-speed USB device number 60 using dummy_hcd 21:07:44 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x25000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 968.707213][ T5] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 968.729769][ T5] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 968.758162][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.781973][ T5] usb 3-1: config 0 descriptor?? [ 968.840461][ T5] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 21:07:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) [ 970.968109][ T5] usb 3-1: USB disconnect, device number 60 21:07:47 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x400c630f, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:47 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:07:47 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x40046302, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 971.072599][T18413] binder: 18411:18413 ioctl c0306201 20000400 returned -14 21:07:47 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x40046304, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:47 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x0, 0x3, 0xff, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0xe, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x40d0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:07:47 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x40106308, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:47 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x40046305, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:47 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x40106309, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 971.284520][T18427] binder: 18422:18427 ioctl c0306201 20000400 returned -14 21:07:47 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x40046306, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:47 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x8000, 0x0, 0x81, 0x8, 0x31}, 0xc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:07:47 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x40406300, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 971.386814][ T5] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 971.422305][T18443] binder: 18440:18443 ioctl c0306201 20000400 returned -14 [ 971.747725][ T5] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 971.770955][ T5] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 971.809759][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.833877][ T5] usb 3-1: config 0 descriptor?? [ 971.890734][ T5] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 21:07:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:07:50 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x40046307, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:50 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) fremovexattr(r0, &(0x7f0000000000)=@random={'user.', '/dev/binder#\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:07:50 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x40406301, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 974.026644][ T42] usb 3-1: USB disconnect, device number 61 21:07:50 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x40486311, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 974.096595][T18474] binder: 18470:18474 ioctl c0306201 20000400 returned -14 21:07:50 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x40086303, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:50 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x40486312, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:50 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x4008630a, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:50 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x48000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:50 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x40086310, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:50 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x400c630e, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:50 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x4c000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 974.506476][ T42] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 974.896564][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 974.912990][ T42] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 974.934466][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.958680][ T42] usb 3-1: config 0 descriptor?? [ 975.010355][ T42] usbhid 3-1:0.0: can't add hid device: -22 [ 975.021442][ T42] usbhid: probe of 3-1:0.0 failed with error -22 21:07:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) [ 977.073178][ T7] usb 3-1: USB disconnect, device number 62 21:07:53 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x5c000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:53 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x400c630f, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:53 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x40106308, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:53 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x60000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:53 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x40106309, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:53 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x68000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:53 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x40406300, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:53 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x6c000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:53 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x74000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 977.536063][ T7] usb 3-1: new high-speed USB device number 63 using dummy_hcd 21:07:53 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x40406301, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:53 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x7a000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 977.906057][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 977.926007][ T7] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 977.935125][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.976722][ T7] usb 3-1: config 0 descriptor?? [ 978.018466][ T7] usbhid 3-1:0.0: can't add hid device: -22 [ 978.024472][ T7] usbhid: probe of 3-1:0.0 failed with error -22 21:07:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) [ 980.154790][T10131] usb 3-1: USB disconnect, device number 63 21:07:56 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x40486311, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:56 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x1000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:56 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x63404000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:56 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x40486312, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:56 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x100000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:56 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x48000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:56 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x4c000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:56 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x163404000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 980.605675][T10131] usb 3-1: new high-speed USB device number 64 using dummy_hcd 21:07:56 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x5c000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:56 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x200000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:56 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x60000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 980.985690][T10131] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 981.004892][T10131] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 981.027204][T10131] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.049832][T10131] usb 3-1: config 0 descriptor?? [ 981.112396][T10131] usbhid 3-1:0.0: can't add hid device: -22 [ 981.126971][T10131] usbhid: probe of 3-1:0.0 failed with error -22 21:07:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) [ 983.237869][T10131] usb 3-1: USB disconnect, device number 64 21:07:59 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x263044000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:59 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x68000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:59 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x300000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:59 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x6c000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:59 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x363084000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:59 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x74000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:59 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x7a000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:59 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x400000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:59 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x1000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 983.665238][T10131] usb 3-1: new high-speed USB device number 65 using dummy_hcd 21:07:59 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x463044000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:07:59 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x63404000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 984.055441][T10131] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 984.070023][T10131] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 984.095179][T10131] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 984.111366][T10131] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.138961][T10131] usb 3-1: config 0 descriptor?? [ 984.606924][T10131] keytouch 0003:0926:3333.0026: fixing up Keytouch IEC report descriptor [ 984.627886][T10131] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0026/input/input42 [ 984.726901][T10131] keytouch 0003:0926:3333.0026: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 984.806423][ T7] usb 3-1: USB disconnect, device number 65 21:08:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:08:01 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x500000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:01 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x100000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:01 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x163404000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:01 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x563044000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:01 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x200000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:01 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x600000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 985.686676][ T7] usb 3-1: new high-speed USB device number 66 using dummy_hcd 21:08:01 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x263044000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:01 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x663044000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:01 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x300000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:01 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x700000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:02 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x363084000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 986.045112][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 986.070341][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 986.115009][ T7] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 986.124114][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.156022][ T7] usb 3-1: config 0 descriptor?? [ 986.696331][ T7] usbhid 3-1:0.0: can't add hid device: -71 [ 986.702296][ T7] usbhid: probe of 3-1:0.0 failed with error -71 [ 986.733630][ T7] usb 3-1: USB disconnect, device number 66 21:08:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:08:03 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x763044000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:03 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x400000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:03 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x463044000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:03 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x800000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:03 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x500000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:03 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x863104000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 987.504829][ T5] usb 3-1: new high-speed USB device number 67 using dummy_hcd 21:08:03 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x563044000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:03 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x900000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:03 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x600000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:03 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x963104000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:03 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x663044000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 987.885037][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 987.902669][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 987.944722][ T5] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 987.953761][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.986914][ T5] usb 3-1: config 0 descriptor?? [ 988.524697][ T5] usbhid 3-1:0.0: can't add hid device: -71 [ 988.530766][ T5] usbhid: probe of 3-1:0.0 failed with error -71 [ 988.555387][ T5] usb 3-1: USB disconnect, device number 67 21:08:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:08:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xa00000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:05 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x700000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xa63084000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:05 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x763044000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xb00000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:05 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x800000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:05 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x863104000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xb63000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 989.314516][ T7] usb 3-1: new high-speed USB device number 68 using dummy_hcd 21:08:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xc00000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:05 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x900000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xc63000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 989.686959][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 989.709713][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 989.734165][ T7] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 989.768804][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.795838][ T7] usb 3-1: config 0 descriptor?? [ 990.334378][ T7] usbhid 3-1:0.0: can't add hid device: -71 [ 990.340341][ T7] usbhid: probe of 3-1:0.0 failed with error -71 [ 990.366622][ T7] usb 3-1: USB disconnect, device number 68 21:08:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:08:06 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x963104000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xd00000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xd63000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:06 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xa00000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xe00000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:07 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xa63084000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:07 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xe630c4000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:07 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xb00000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 991.124263][T10131] usb 3-1: new high-speed USB device number 69 using dummy_hcd 21:08:07 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xf630c4000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:07 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xb63000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:07 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x1000000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 991.494244][T10131] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 991.528280][T10131] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 991.555546][T10131] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 991.578510][T10131] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.599142][T10131] usb 3-1: config 0 descriptor?? [ 992.134135][T10131] usbhid 3-1:0.0: can't add hid device: -71 [ 992.140210][T10131] usbhid: probe of 3-1:0.0 failed with error -71 [ 992.164911][T10131] usb 3-1: USB disconnect, device number 69 21:08:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:08:08 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x1063084000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:08 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xc00000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:08 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xe) ioctl(0xffffffffffffffff, 0x40044145, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty}, @vsock={0x28, 0x0, 0xffffd8ef, @local}, @nl=@unspec, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='veth0_to_bridge\x00', 0x5, 0x5, 0x101}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000015c0)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f00000000c0)=r5) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000080)=r5) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000280)={{}, r5, 0xc, @inherit={0x70, &(0x7f0000001540)=ANY=[@ANYBLOB="00000000000000000500000000000000f506000000070000080000000000000017000000000000000400000000000000060000000000000007000000000000000300000000000000c6060000000000001b0000000000000014000000000000e1e9afa5747c2f3670320df61c6ed9d3004f75157130ff3d609d18e9244b50"]}, @subvolid=0x3ff}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000540)={{}, r5, 0x10, @inherit={0x60, &(0x7f0000000000)={0x1, 0x3, 0x1ff, 0x6, {0x10, 0x2, 0x7, 0x401, 0x4}, [0x20, 0xd9, 0x6]}}, @subvolid=0x4}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000040)=r5) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000440)={{}, r5, 0x0, @inherit={0x60, &(0x7f00000000c0)={0x1, 0x3, 0x3, 0x4b4952b1, {0x18, 0x9162, 0x7f, 0x0, 0xff}, [0x4, 0x3, 0x1ff]}}, @devid}) r6 = dup(r1) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x5, 0xc00) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:08:08 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x1100000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 992.667212][T18976] binder: 18971:18976 ioctl 50009418 20000440 returned -22 [ 992.691126][T18976] binder: 18971:18976 ioctl c0306201 20000400 returned -14 21:08:08 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xc63000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:08 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000000)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2869cb59c2f903a9}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xc0, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x4}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffeffff}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x18}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xab1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfaf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf4b0}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x60008}, 0x40) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:08:08 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x1163484000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:08 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xd00000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 992.851334][T18989] binder: 18988:18989 ioctl c0306201 20000400 returned -14 21:08:08 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xd63000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 992.894018][T11631] usb 3-1: new high-speed USB device number 70 using dummy_hcd 21:08:09 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x1200000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:09 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r1, 0x40044145, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x10800) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x9, 0x6, &(0x7f0000001440)=[{&(0x7f0000000440)="2237fe3fb53b4106f86f73ef89102177fb8fbae6aaf5357478e4eb5b298495333c6f9f1280c919cb243f1e44caebf09a5bced89aaeaba4bb9b0eca948281d0a7f71dc01bfd61e37b42f1745369468dbaff4f070fdff43ae8c1c5429741c90a64ef7d439d458cc2d72ffcba3d16408e25c207f6bb3ba8d911c82232c13305525ba5c5dea652c48bdb03b06d753b3abd3fedf3f7c18301ad6dcd9a80ccd757467b94c013feb1523f159cf059bf30b451c76628f4ac256d150318e87f36024c6123b6058385f8f45ad7a790a87e7aace367212cad25964712a5bc06a922622810ba32486c90118af6ea26101dac58214ef0e7f17ef9b5bed9c0cdba59fc257160949ac0ad5e54f55a51e5c712a9236fb29f15545c9e05059b5c32d0281d75f51198d1de238347c5c9a98157bc1d8c44867bf87c331aad34f8f2b05fc0c0686ee2b5578270abe2d25c94a3e0e7f3a8243e1f9568daf7a384085f6585c4264ec9eec2b4e83837daccb93f5c83da64ef03094482183cce8d7d662cbc716a2faee0130af3e7c722521a8342872e9aa62f4aa615391583e5d13303abc7001354a4bff28db10bc94e11d4cfb0419ff1d640133aa40fc9ef1f379b2bd920803bd87c087e258ff78662f23efdca69a898ef34ccc9f4809fe93d32a0c80f5f691f1ae06914d12bc1241d81d845b50a181262ce111d00bada81e48168389c9d236c2eaeb416a6df1fc5ad01ba2b58c45cc903a33c4dbf045c474ce93e380bbab445a93a9f6ddea3db1275d752d5115aa0c738effa5c30dae4725b2eafa63a9279878d3bce78687c90df38f407a0fb4db126e5118e3ffc6a588d7fb415fef318c4a647ab80e8605694a88f33e48b00ced8744e367040e9516fcfe32d0f41312347df04e9853646b3222bbd97a7498a6cdbb5341b9f7b6fd9cb8175cdf6d61f5051c21d28fff29d33f9308146b5ae459c3b547d9a317af2ddb91ba9434bbd9075843733a04b782922526735acfa725ad5dbbe51180b2e402c85b3c20bcc4fc5ed9c6accf486286eba5f453b01bd7bccc0cddf5a559da801c42382a81f2e4513508be4e9ba158cb1c1ced93336c07dd48df7e39ce3ff7b7dcfd3cbeb1b16bd44414393cb4f056004c587e23f404315df9c6232c0551e068e0a5100a9bce9f8921703c32a61ffb58e78467483e62499cd4bb026e0af8abe5f59fb8995f7cec86db5a7ad4b577122dabc18b7e2740f66e4bb2a6ec9b65d1ffeb5b233ae95ce41bdd1f6f5e943480912c875f216a8f6b9c388e0646b496f002ec2e63dd8f19099fae92c9b1ea3fd55d2f149776448298b79ff38456a41661e88060df1d4064f1414ca6161a24688f42fda15f0f576fc8a191450e82636a98ffa425f21f5b212262fcb3f0a6d322c152128f4a805dc8e0ed6f4874299179b9c61843e44176e056943ccd421841a482a5a0d8e71937ceedf87b2416225fdf4ba9c7bb1ee11ce61999e55c8cf60a461240a745536be2918e127ecda32c79818fae1a3aec414e009537549bc7d122969ef324f2f6e8281029f02aa2a66913c7e007068fa2af5ec1ec137f1b7dfd594c6309e7f1fa98a4f23278dca7fab5088a43026360464a020ad1a209801d3a869233cc2d9c8280b006ae09b5e992ee5e39f78e3f63bd120c64f304c3c106ea039c1d77dbea11f31e0918be7ab1011adade2fabf2b7fc82b7a471da33ea57ff1ea29c7741daf9c24b9914fe2ed3eaf98138772459ea9f91e05b72eae61f355d1ac6def421d6e1cb99dfc9c920a8173250cad9cefedaa6a75fcb2ad5f28b6a46a980a39d05ab5c08bcc1d4b067e2051bcb6953a07132837b5df3a7e540bea750270751edceee3e69a0b41bc6e791319e76bd3a251902817418a78decec356a7274ec087b440e9e9c6d25cd513422917d2afd16bb455d2d78db0c615ef8d8e1420a7c830c13e412d60b66af34f2ed453c2d41043ff724b0bc5a10d6768d05d4bfa56e9a9f6ae1843a4e4368db783cac129c670b14614da71e5f4f8fcf89f21c490e4982df02a6abeb7455f1c7bfc63f01e2af8213179483616ffa8ff418f595c691ecfbcb6d7e2613d3ae12bd8cdac6f354f0a277d27505d31f3fa4f21d9e227f3e01c993bbb91c0a214bf7ab68fc65f9e40ad9bb1295a460e4936f786bea6a0162361808e38640eb29e872cac976d21e6d1b7923fdd4c89c6dae1311567e0c39845aac4141d031eaeb2695493a5f310acab0070613b10d899ad317088ae84804b1381f4ca45382ef3d0994ed25605f0bec2eb210cf2840058cc3b9fa1e764ad311ad92b7842c766547c8f4ec831efb312146164ac722c52fbc24f094817fd35f824f91bb854a80934de833453430325e41350ca4ca4732d23ae37abd67400dcea93b6a20176825cf2e893faa62205b3000ee40896ea5460abd607970d32db3885e55a96a05123d286392635c9c13aaae50e4ff6f3bb3c8381ea5502c3daa155d8598bcc0145505b5d9cd496adbb08c80b9259ff90768cb286f1440bb7c6fd66985f182a5a53488b27a0d51ea396d0534df81d20ab0d019089f9bc2b6b52175f0c0f982cb0ef7a7043582ac41e541779d61fb7f063be16212365e017b586fac5bd199b438ecf58c9769549c47a0921a98cf9b070e274b0ae2aa67ef87689fb7088c8fbbb7cc1b210cd7617421ec2382063c755e13ea17a7d458ffbe459b2a6f22487333e538f58c75e3d7ebe835b31e5a0cbc64babe06cea94acbc51f7aaea2b74a49a040b358d39ff80834aee008bd38bbcfe6af8d44e100db9fd83883537255ac83fa647d818b51616ca56c5e2869e0d95285a08ec5ce97494a08f06270d3400ceb745a40bfee067b7770d858d9bca1b480bd2e0dbb735505598cc36cf7f98aca3c04a29fb3544f8e60ec0081bb71c9091814aa4a28a5f8bd09f17adfcf23a721db5d4f88e6e3ecb6a2495f917c14dae16371553004cab643da74c9d017c0a59f2b9f2abf47fb936e2e097a67ce698056ab54d6ce8166713ac8dd08320aa38ccee793ea94683624db2d22b8fe4abe141405b3b99c84b79eaaea82daaff85d1650e8b6aff42bf282fafe38e894dc3529d24f894796368f2748fad066c07dc7df922c09191e40f5fba2dfb8fa8fd9aa9ed60c6a6f79036e6053b1f253252aebdee65e877adbf3aa38d9c07c6b478e9493abb2deb18742b1478661f126ec3177ec206b0e1afb1f691c7f7c8f4d30a4cf148509903ea1739228f9f634e818669865dd1eb0c496338aa1de4503fef3b827fa791ac57357e5be01bff7e1bf3e3533d01eb27229bc8751198b10668d8e7a6d748c213a88f3411f029216ce86f9a6c9aa63ae3395ba35caa4838d45507a5ca889db3f24a6938a605aa7bee975ea4e27ff81e940fa0b5743d07e8cb30665474f831e90f254baad70c5c09de3d7da643b8f1d96c0b2a13398ed21572c781c1785cf11dfeee281564e28e10c798158412806b39688763d22dde88be5328108eb06876a993a20541933a0539267219a36d2372e91c4268a9a0035c1d7e3ee76b73128443472718273c8032888161785b6a0ed16df9807b713c8951f624a26e9fa9b84988515cc21b9b8a3d8449c09fbe35c196e355a439775138a212ea514f0c59f5435c3ce3e0977445631b67d9752661dc48e637f42f4d3472f7e55643fd798261d32a46300ef8b1e9a539410c90e61ca7a6ff08b8b48e1579a8a02ef1750b6588e2b10cc41512d9ad00e0050a24863d772c5dfd1c459e7d9fecb83bf6b315c17310796839b22b14000da6ff782c598ee615e6be07b3b9e9a276819ed7553ef4f2ce29efbf0c77be9dcc7a610fc9feccd24fab10aae3a7ce9ac56ea86e14fb1c18ea2186d4707939408b158ed749bac67d57efe73ce989a4e0edd864b556c485ae63cd24b50bb3238ab1044a283d6d3cd92010ad466ad7506c2f15160bae3cad0833c90273e4e463b019fefd91aa4a1ca2da0a19e241d17a56b83913f2bd3a6723215c8a4c346f5d5774c2371ca4fdca475a2cd3e9a21b3a01e26be11c515e6f9b9875d250695b61acd817f8c40715f74468830bf5e1048978e16e2e1417ddd765f74003f2d0edb0a4180befb078df92c35acebe56274dbcf6915020f446a606e408d8b5329ba07f999e6ad42eda0653c25f389b0401283cacb2130fd860d331d6a9298f4d3cc4aa12c4e2690e71c2d89a2cb2624a63692206d5a0cf68b493866a8542f579e38aad7915b3060612f77a15367f302789e4b641285645f52bbdb3f767661433e6c09500e9cb16e15c9a7c7688d0d84fc84441f5a023cbcceab5c92df71fffd55ccebade7df6ae2b8fc1bc19419b50664611c3ec6f6d270d205ab3934b6dac1f24d40c8090deab2d952b5ed90c3e9ff2f6d572ba74f2001f87180f4e8aa254ec11df9b6c8963cc5a77bb6d400992f64dc1a5e5b2a3fdb96664b0cd41cdbae0ce107d8fc7fc2b2ecdd24d9e6d484de43c6a212653b7035d3ebdd1d4d61f96b19eed9c932012f929951aa7834ecb40cde47fcf13767ef5aed1a85c6826eca568a9fcb212e2e6f3209fbe7c7ad7d6b1e143db513d52b3f2d4de19d64bbb4c3976775c3c1622e7daabf3eef20ab2c7825e3a1861299a3151a9b91cd36b8a8e9eb8e3539ee5c4e728cf724fb9a4c8de256dc8ecd0630c8288a26c20508c4ba0778fe5c787e10d6f013394cab78719d807cae27d2b69804c2565c226acd9a63ac870c0df80514f01fe4470c8e6d80a8233aa95a8c8b5f959f49401f11bdac2a631f3aba51a6023bebe1b3d8cc4f12f5e38e8bec4614bcb82a06f7b9625c4a00a0c05db322556feb1a08f64b18153a84be69c22a08ad44700101dec073a70c0cad29a19abc8799b16ef1f013b87192f02f38054b9289e758bf4157bf48a421bc49d903640e17ceb8e77bab6e79fa0d0aaf89a4aae862bf3501408377d96e17217d9a3b1318cf6555da3a34cbeab99a58a0a8f9ec51933a87308cff19af5d6128b7db5fadb97fac805058084c06f96cac32aa3ba0b8f4b97d7f7012f4580904df16d73aa8c96e227efeb96132ff9ebb8fd02c1f34ee98db7ae3f69e72751210d5bcd81ae6c2ba47f33532b78baa1c210266bf0f9a596c17aa547f36f2d7bde4070976691563ec99fc46fd6f19c6e9262927f81bbefe70f00478a8a06f356f1e84f5e0e448d7f3fc8c130cbfe3c533e053b5b724cedf512c56bd8aeafbf64149f15f706c1f6ac0b6426ac3db31866137cfe6ac491ef1e82ed8e170ea7194bd6a4d156e09134559528d9584e8d3661ca4caebbeb52db259320e948dd1e66b4e16d8a8ac6aac83d4e271f7fe1db841b042abffc150dd357e0ad58bae1601e9281b93c3ba87c3a583946a29d9ee9981e43a253586134caee0e79bdb3d728e0289582702cd49f6d1d71318bf897bfacbf5766ffd3b04ffcc9e9961ac4cab0ea7ab537f1737a1e30650b7592593358da3203e990b908990f95c5d6d0dd0c484b262c50aedf4f43988b5ba9a374b94228d244bc65de5f5361b94b4b2766dcf64228b932da22654842d1f57f017a1e55bd7b6fcaf01a408b6ff7ff8cee26f3f2ab16f979ceab1b52cc3f4413c3af487695976e97d2c08dae89aba56459baae2fcef228baaef1156aab4f4241aca9549b6b0b7b35dcba15a4f2802017c848d3e5b2fa02d558b4971d78322345c078ac8e9fb95c2c5427ac67359d854f383c6ce915f5dccefc5a16c1d54cf2f69c78bc1de738c284adbd9062a5d9cec53ab8189374db39083fe38fa21546da9cf07769bec881f83f7b0b778226", 0x1000, 0x2}, {&(0x7f00000000c0)="568e326f3fa384e1dbf21f4639bd10885c84203f", 0x14, 0xc71}, {&(0x7f0000000100)="4acd4eb0458f6645b3e431095ecadc5161ccb7e2f1ef7b52995ad3e32233a0a4a4ffc3b820352ad988ecea44e03a36be7a0bf02de0b7359c15b431d088a3be6b6246a6de88cb9871c8adb7147632df1a9fad936d2620e5bfa5c1e88ebaea5bb71e", 0x61, 0x7}, {&(0x7f0000000180)="51e3ed524b69d42fac4a9d6055ba3a2fad0452bb4f89cb37af48f15df4ca93eafea2233248e24793471038f1003d30ca0084128af78f1d6e27", 0x39, 0xe5b}, {&(0x7f00000001c0)="4001abfb75ef844f2972db39c1eb05df583a80", 0x13, 0x7fffffff}, {&(0x7f0000000240)="8d4ec4b73a01a71d89454ff53f27e8c42a366bc7a966c3e4ce95d073a9ef83ca42b53fc074bf3041276fb5305ab8f16c54b15839bca078011b1e2f1bdd3e5d7beafd4d9971aab01c1d4be3eb915398e8c87a7dd23f821b7eb47942f54d65611b4ff106784414ad2b386350bf1b1e1f09db2885b6d3dbfbff016e6586a565d22bb0ba45193d461afcf1c43c78aac71884a00bd7427cea4710ec62ebd3bfbed5ff34023d4c44375d5f14fa474836313dbe8e8cb39d389d72d0b126ef72579230dca077efd6473a5103ea8c6cc36127e4e4d3766e9922be37093a86", 0xda, 0x5}], 0x2, &(0x7f0000000340)={[{@discard='discard'}, {@orlov='orlov'}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@nodiscard='nodiscard'}, {@sysvgroups='sysvgroups'}], [{@subj_type={'subj_type', 0x3d, '\'$'}}, {@dont_hash='dont_hash'}]}) syz_mount_image$qnx6(&(0x7f0000001500)='qnx6\x00', &(0x7f0000001540)='./file0\x00', 0x4, 0x7, &(0x7f0000001a00)=[{&(0x7f0000001580)="f7147f9c5b47ae9debee273b915d3589cfd644aa77a9eadc46c3f76cad1085aa0c29b44b821687a52cb23df1bd380667de62eb1a0b4ca2266736e46934b0bfbe259a927b776a8fc4addc", 0x4a, 0x100000000}, {&(0x7f0000001600)="6c92d2189e890659415b4cbadef18a5ec28ebd0377d51a14b80f8acae9a6e4a7533df0f2a928bcc47b47bf12edbd3a2d5e38843ce1a147c79872b81acdc4ae3a27988fd5206f77d8010314bd00696b5b16477b77f77e73d4304bbc161d530ec8ccf254a9bf5eeaf9bd6531334b4c2cbf56ad802d8210559d51a8e819604d524f8e8e0d055b7e41f9735ddcd731da4179648496f7c49a22798a13f4421ecd321e4f79537e51a4ab641fdaab38e8d5ae86a44d9255738dba985d3701a7e94a35444a9ce05a39957a0b9563fc50e8e242fb9e931bbc2bdef1bf6d5c3260ae1ce762", 0xe0, 0x9}, {&(0x7f0000001700)="c0e81193a1c444733d7868d004dc270f536eaf83a6fee60d5ebcb1e332392b70c14129b8e6ecb371572222d2938d5eb94881b1107c1496e3f7b373e6f6bf174e1b30d73fa6a827035f91508a896453d9d8e1c62baba4405622f6d8b6577c63bcc67b11b5ae683226ca8a199f071a341da2106553d3d81f8874373ecc314ad27972d69fb043bc82253a7887386ee60679e7eb81a2aadd1365b1606285c3aa6d576689b493bcd91f23518491cc5a", 0xad, 0x7152}, {&(0x7f00000017c0)="0008f1373330620df32bb002669ab1fd0fbec76929c68c", 0x17, 0x4b}, {&(0x7f0000001800)="93591bbc2c7831c5c3d3e32a27da541a1e906769a4b1d750b8717a20feb2330d75ada8056a75d0395869121aa9d8923db4b1a3cddd1878c7d7232f9d7484b7fec12daaa915dc2ef1ff44dda7cd9d1266a9ba0460801d2752ac529e5e41b6c2f71ccecc0daed9515626f69136bb893d4b2f79c9fb8b22725540d868dda7840a121e6bdef3b0f19b38420d9286e9d13fd2d19a60687b0459d64faeee54799cf513925c5d323d90218e5ffe5d1f32c4637d4b02f442430764e73282", 0xba, 0x6}, {&(0x7f00000018c0)="77687ae196a3cbf42faa948f681841c3eae49f6664f234f0d942cf608188594aea1367eccac06adca4222aa58e79bf2e4783682fb1a3363e3ee7c71fb9a979ca0213702988b085b31580df92bac7cf1140da493e3dcecf166cbbfd8a752ca4a8ad9e6dc422f3d1c4164e5152d9f4ad72f9439fc905984ac3", 0x78, 0x2}, {&(0x7f0000001940)="8c2e04211f82c3dde6b2ce68864a323da30fc0001ca397c64e3745859118d257b0469a5e99159733e80f4eee4724f8be96afe988388dcb10c38228f2e4d770a0c16602bfda6cd0333d516c0aa1ecf8488b863ce2cfd801eea6f1913884d0df9d8f837d92a1a6751a177866d5402c0d4d36b52ff0bf9c4a6a0f100eda33c8a75a30bfe9ea025b56801709c10612c1ed00bac902f2de356f7cacbb5a5638cfbe3a379ba13c1bca21b8af028ef03793a753e3", 0xb1, 0x6}], 0x148000, &(0x7f0000001ac0)={[{'}+-@/*-])^['}, {'^,[\''}, {']%#'}, {}, {}, {'sysvgroups'}, {'\'$'}, {'/:-'}], [{@appraise_type='appraise_type=imasig'}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@permit_directio='permit_directio'}]}) syz_mount_image$romfs(&(0x7f0000001b40)='romfs\x00', &(0x7f0000001b80)='./file1\x00', 0x5195, 0x6, &(0x7f0000001f40)=[{&(0x7f0000001bc0)="c6237ad69dd2ca7715", 0x9, 0xffffffffffff8c5c}, {&(0x7f0000001c00)="e08e59ebba75363052bffdc9003384995fd69736895893e4feb0c9f9226db5d7a88b03242a1c02c2ddca10f27060a146ca637114d7d3f9ba750d74b0965880e6698b1dd40b6b99bcb3e47a6db2893f41442777a290d497031c4175a070669e56078d2da63aaf4096c7aba4b04761d8602abb664163f0eaaf58bc18ea5e996c48881424cb585b5acc1c17fbfaf6c71bc94693d5e6e36314132b02e6e0840d9c9a60f85f02e3683ba165c477c1d938035c6002d8751f3c39cc6128736251c95d3b8d7d99633f1c83c5c1b698322c87ad728cf8ca66160672080a29471d7fc75530ece28c89db9e8685746004432a67f4", 0xef, 0x1}, {&(0x7f0000001d00)="aede7e5a9654898fd72bd649d528a153568653629b311a5926d6752ac1968ec935364df556c4183779092a78a9eee7cff2f27e1447fce132bca41ecc84c1bada068bfa6b9521b6f388942ba2d412d63dd6b995e1dda8eee7c58a885583655f92a87c8c8be56914", 0x67, 0x9}, {&(0x7f0000001d80)="3114522aa5c2b690b8e9cc7396349b7adcefdf3055", 0x15, 0x3cc}, {&(0x7f0000001dc0)="c07122dad5b1b4129802675b735a49022486215d4dab518777a7b122710116510f1e7f04512ef6249e90869c8cd2f3a0b2e647f2552387acda3c1b30f95f251ac66b8b50ef8064548a6e2fb888bf2f5d7c559056041cf1b831a3613ed82f3118449689", 0x63, 0xfb}, {&(0x7f0000001e40)="07957b0bb215177f3bcb5d98235c22681439188bdd089925aeaa6d22cafdfd9b1bc0beef99f6eb856effda0d5ead5363d90c2f872e4e9521af9b5eb15e4a99e66910ab9ad6ff7f3103ef7b98a244620a4599fef22cf98f5b890431b99b8c905b5ea2b7f9643b71b691e81585ff5cd6a519e1403eda96c3fa3b8a55e59c983d7a4e5e4b8f6dc5f850da6ebcd8fd6ec075ff9958c597dfb1bdfa6655666e629f3a1606073a946bdd50e22665a8f1824ec4ff781e0e901fdd103125bf3901e7f3669979b8e1e4b5832092a4969505", 0xcd, 0x1ff}], 0x10000, &(0x7f0000002000)={[{}, {'/dev/binder#\x00'}, {'/:-'}, {'orlov'}], [{@smackfsdef={'smackfsdef'}}]}) syz_mount_image$fuse(&(0x7f0000002040)='fuse\x00', &(0x7f0000002080)='./file1\x00', 0x0, 0x0, 0x0, 0x5000, &(0x7f00000020c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@max_read={'max_read'}}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0xa00}}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, '*-^#:$,\xf6#@@%^'}}, {@measure='measure'}, {@obj_role={'obj_role', 0x3d, '/:-'}}, {@uid_gt={'uid>', 0xee01}}]}}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x1, 0x4) ioctl(r3, 0x40044145, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 993.082135][T19007] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 993.142444][T19007] binder: 19005:19007 ioctl c0306201 20000400 returned -14 [ 993.213032][T19007] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 993.225029][T19016] binder: 19005:19016 ioctl c0306201 20000400 returned -14 [ 993.264253][T11631] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 993.277139][T11631] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 993.298241][T11631] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 993.333860][T11631] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.356665][T11631] usb 3-1: config 0 descriptor?? [ 993.903898][T11631] usbhid 3-1:0.0: can't add hid device: -71 [ 993.910032][T11631] usbhid: probe of 3-1:0.0 failed with error -71 [ 993.932562][T11631] usb 3-1: USB disconnect, device number 70 21:08:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:08:10 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xe00000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:10 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x1263484000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:10 executing program 4: syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000400)={0xffffffffffffffd9, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:08:10 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xe630c4000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:10 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x1300000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:10 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r1, 0x40044145, 0x0) r2 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) signalfd4(r2, &(0x7f0000000080)={[0x5]}, 0x8, 0xc0000) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$LOOP_SET_BLOCK_SIZE(r5, 0x4c09, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:08:10 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0xf630c4000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:10 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x2000000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 994.560332][T19053] binder: 19052:19053 ioctl c0306201 20000400 returned -14 21:08:10 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f0000000000)={0x9, 0x8, 0x7ff, 0xfffffffd, 0x5, 0x8001, 0x7}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0xd8a}, {0x5}, {0x6, 0x11, 0x5f94}, {0x8, 0xb, 0x9}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000) ioctl(r3, 0x40044145, 0x0) signalfd(r3, &(0x7f0000000040)={[0x929c]}, 0x8) 21:08:10 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x1000000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 994.665317][T11631] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 994.677999][T19064] binder: 19058:19064 ioctl c0306201 20000400 returned -14 21:08:10 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x2500000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 995.024104][T11631] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 995.043730][T11631] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 995.053521][T11631] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 995.083758][T11631] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.108739][T11631] usb 3-1: config 0 descriptor?? [ 995.667037][T11631] usbhid 3-1:0.0: can't add hid device: -71 [ 995.685107][T11631] usbhid: probe of 3-1:0.0 failed with error -71 [ 995.693374][T11631] usb 3-1: USB disconnect, device number 71 21:08:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 21:08:12 executing program 4: ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f0000000000)={0x1, 0x0, {0x7, 0x5, 0x9, 0x3f}}) r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = add_key$user(&(0x7f0000000a40)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000a80)='X', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000000a40)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000a80)='X', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000040)={r2, r3, r4}, &(0x7f0000000080)=""/20, 0x14, &(0x7f0000000100)={&(0x7f00000000c0)={'sha256-ssse3\x00'}}) keyctl$invalidate(0x15, r2) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:08:12 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x1063084000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:12 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x4800000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 996.214167][T19096] binder: 19092:19096 ioctl c0306201 20000400 returned -14 21:08:12 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x1100000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:12 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x4c00000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:12 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:08:12 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x1163484000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 996.352840][T19109] binder: 19107:19109 ioctl c0306201 20000400 returned -14 21:08:12 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000000)={{@hyper, 0x800}, 0x1, 0x8, 0x2, 0x1ff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:08:12 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x5c00000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 996.413637][T11631] usb 3-1: new high-speed USB device number 72 using dummy_hcd 21:08:12 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x1200000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:12 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x6000000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 996.495246][T19120] binder: 19118:19120 ioctl c0306201 20000400 returned -14 [ 996.783646][T11631] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 996.803517][T11631] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 996.827824][T11631] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 996.849237][T11631] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.866037][T11631] usb 3-1: config 0 descriptor?? [ 997.413436][T11631] usbhid 3-1:0.0: can't add hid device: -71 [ 997.419556][T11631] usbhid: probe of 3-1:0.0 failed with error -71 [ 997.438418][T11631] usb 3-1: USB disconnect, device number 72 21:08:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 21:08:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000680)={@loopback}, &(0x7f00000006c0)=0x14) r2 = accept4$nfc_llcp(r1, &(0x7f0000000180), &(0x7f0000000140)=0x60, 0x0) r3 = dup(r2) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r3}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000740)={r4}, 0xc) write$FUSE_WRITE(r4, &(0x7f0000000100)={0x18, 0xfffffffffffffffe, 0x0, {0x5}}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000700)={0x0, 0x2}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000640)={&(0x7f0000000200)={{@local}, {@hyper, 0x5}, 0x400, "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"}, 0x418, 0x4}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000000)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f0000000040)={0x0, {0x506, 0x7fff}}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8982, &(0x7f0000000080)={0x8, 'veth1_to_team\x00', {'netdevsim0\x00'}, 0x3e}) 21:08:13 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x1263484000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:13 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x6800000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:14 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x1300000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:14 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x6c00000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:14 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100)='ethtool\x00') sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x64, r2, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x9}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x80000001}, @ETHTOOL_A_CHANNELS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x6}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xffff}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x9}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xccd5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x4814) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) close(r4) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r5, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r4, 0x0, 0x12f}]) io_getevents(r5, 0x6, 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], 0x0) 21:08:14 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x7400000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:14 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x2000000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 998.185698][T19171] binder: 19168:19171 ioctl c0306201 20000400 returned -14 [ 998.193370][T10131] usb 3-1: new high-speed USB device number 73 using dummy_hcd 21:08:14 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x7a00000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:14 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x2500000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:14 executing program 4: syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0xfe4d, 0x0, 0x0, 0xfe37, 0x0, 0x0}) [ 998.615067][T10131] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 998.631726][T10131] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 998.662112][T10131] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 998.684896][T10131] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.707493][T10131] usb 3-1: config 0 descriptor?? [ 999.293185][T10131] usbhid 3-1:0.0: can't add hid device: -71 [ 999.299217][T10131] usbhid: probe of 3-1:0.0 failed with error -71 [ 999.326886][T10131] usb 3-1: USB disconnect, device number 73 21:08:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 21:08:15 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x4800000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:15 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\vc\x00\x00'], 0x0, 0x0, 0x0}) 21:08:15 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:08:15 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x4c00000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 999.805477][T19212] binder: 19207:19212 unknown command 0 [ 999.805719][T19211] binder: 19208:19211 ioctl c0306201 20000400 returned -14 [ 999.826337][T19212] binder: 19207:19212 ioctl c0306201 20000400 returned -22 21:08:15 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00'], 0x0, 0x0, 0x0}) 21:08:15 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_G_CROP(r5, 0xc038563b, &(0x7f0000000040)={0x1, 0x0, {0x7fffffff, 0xff, 0x3, 0x1f61}}) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) socket$caif_stream(0x25, 0x1, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000000)={0x36, 0x3a, 0x0, 0xd, 0x4, 0x401, 0x3, 0x28, 0x1}) r6 = dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, r6, 0x2) 21:08:15 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x5c00000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 999.968843][T19223] binder: 19222:19223 unknown command 0 [ 999.984418][T19223] binder: 19222:19223 ioctl c0306201 20000400 returned -22 21:08:16 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\rc\x00\x00'], 0x0, 0x0, 0x0}) 21:08:16 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x6000000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 1000.013990][T19227] binder: 19224:19227 ioctl c0306201 20000400 returned -14 [ 1000.043138][ T7] usb 3-1: new high-speed USB device number 74 using dummy_hcd 21:08:16 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r1, 0x40044145, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1000.128798][T19236] binder: 19234:19236 unknown command 0 [ 1000.148522][T19236] binder: 19234:19236 ioctl c0306201 20000400 returned -22 21:08:16 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x6800000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) [ 1000.227036][T19242] binder: 19240:19242 ioctl c0306201 20000400 returned -14 [ 1000.252216][T19244] binder: 19240:19244 ioctl c0306201 20000400 returned -14 [ 1000.413205][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1000.431566][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1000.455206][ T7] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1000.472954][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.492584][ T7] usb 3-1: config 0 descriptor?? [ 1001.052984][ T7] usbhid 3-1:0.0: can't add hid device: -71 [ 1001.059100][ T7] usbhid: probe of 3-1:0.0 failed with error -71 [ 1001.085371][ T7] usb 3-1: USB disconnect, device number 74 21:08:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) 21:08:17 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02630440"], 0x0, 0x0, 0x0}) 21:08:17 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x6c00000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:17 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VFIO_GET_API_VERSION(r1, 0x3b64) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1001.568427][T19268] binder: 19265:19268 ioctl c0306201 20000400 returned -14 [ 1001.579189][T19270] binder: BC_ACQUIRE_RESULT not supported [ 1001.586173][T19270] binder: 19263:19270 ioctl c0306201 20000400 returned -22 21:08:17 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x7400000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:17 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="03630440"], 0x0, 0x0, 0x0}) 21:08:17 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x7a00000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 21:08:17 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$CHAR_RAW_FRASET(r2, 0x1264, &(0x7f0000000100)=0x6) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x3, 0x2) r5 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x440000) ioctl(r5, 0x40044145, 0x0) write$binfmt_elf32(r5, &(0x7f0000000140)=ANY=[@ANYRESOCT=r4, @ANYBLOB="c7bae884d252125e2385d21b4afe0d1e54699a97cf8519c69701ead39f360565479f2be41ec8edf7ba04d71457a38534a087ba81394098902cff24e817fd003f0793948b2d86afa9f5b61a424638995efc6be0a70180b09638541b26c59ec5822f0b2794e9a25c8b3e874c7d49a4dbcaded6379a4e16602e62d4cf07bb177bf08db8ca46ece9a168ddb3e26710e7ee88c800f7ceb799588b72cf6d20de14b9905b409fc5bcf0ea31656756f16f73ae20160627548f5beeda87d200e252b14d2860c5cd720ece326622bca752457c518e4013591554a501a0cd5bd85ea78e8d5de399541423d4c7c1c8d8440f52516461f406bf264126292ee84cd003c5c7c216b6b4e2da8b1a47e098ccf4a75435d6e81cdd0d4ea356522f970241504b0973f1c5cdc5f2fc49e3fa2e62ce0aa9d037730676b598e2727c4c81d15e37a2824947fe95677bc25916b626bbcf6b803fdf2c9c363d3d83dae48607c1e94a13edb1ea801423feb88bf8afb3557a1a11f42494d9c2600097d628d05d3b236e5100000000000000"], 0x263) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r6, 0x6, 0x15, &(0x7f0000000040)=0x3, 0x4) [ 1001.776558][T19284] binder: 19280:19284 unknown command 1074029315 [ 1001.811080][T19284] binder: 19280:19284 ioctl c0306201 20000400 returned -22 [ 1001.811759][T19288] binder: 19285:19288 ioctl c0306201 20000400 returned -14 21:08:17 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\vc\x00\x00'], 0x0, 0x0, 0x0}) [ 1001.834510][T10131] usb 3-1: new high-speed USB device number 75 using dummy_hcd 21:08:17 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) [ 1001.927478][T19296] binder: 19292:19296 unknown command 0 [ 1001.939588][T19296] binder: 19292:19296 ioctl c0306201 20000400 returned -22 [ 1001.962350][T19297] binder: 19295:19297 unknown command 0 21:08:18 executing program 4: syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) bind$llc(r1, &(0x7f00000000c0)={0x1a, 0x320, 0x5, 0x4, 0x81, 0x1, @dev={[], 0x43}}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat2(r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x80000, 0xa2}, 0x18) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0xffffff07, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCSTI(r1, 0x5412, 0x100000000) 21:08:18 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00'], 0x0, 0x0, 0x0}) [ 1001.978875][T19297] binder: 19295:19297 ioctl c0306201 20000400 returned -22 [ 1002.092427][T19304] binder: 19302:19304 unknown command 0 [ 1002.109632][T19304] binder: 19302:19304 ioctl c0306201 20000400 returned -22 [ 1002.243020][T10131] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1002.261034][T10131] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1002.290665][T10131] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1002.315905][T10131] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.338328][T10131] usb 3-1: config 0 descriptor?? [ 1002.882735][T10131] usbhid 3-1:0.0: can't add hid device: -71 [ 1002.888762][T10131] usbhid: probe of 3-1:0.0 failed with error -71 [ 1002.913254][T10131] usb 3-1: USB disconnect, device number 75 21:08:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) 21:08:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) 21:08:19 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x87, 0x0, 0xe2, [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x8d, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xfffffff7, 0x81, 0x5, 0x4}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x62, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x4, 0x7f, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x2c, 0x8, 0x9, 0x20, 0x81}, 0x134, &(0x7f00000000c0)={0x5, 0xf, 0x134, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x1, 0x1f, 0x9f}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0x8, 0x9}, @ssp_cap={0x20, 0x10, 0xa, 0x3f, 0x5, 0x7fff, 0xf00, 0x5098, [0xff006f, 0x30, 0xc000, 0xffc0cf, 0xff0021]}, @generic={0xfe, 0x10, 0xa, "c1b9290ad7b32b02d22abc6bff45912a26a7c8533befc403db17c216559a68bcfb88f965b45c319a9dfccb2c94c0c21fa245ee6ca6cc71a7b4f79cfad35373bf81c1a1c2a62e3ae95fd07ab43c4edfa5f112539d99bee87cbca8bc56c6702f56ae172ce1e0ba40317b2b8e6b3f12155fa64c4311e2b7e2e494d88ccdb69491effe4bcc01265d7d8dddb73a718bf4dc5213f945a453e5c387aff651dc4a55046b2a4a0e91e01a947e41cf8372859e5a173f067ebbd7506b0fd7c69a7f86f5bb2c0774103ee9576efbd0375219bc512696fe7438269fa7bb67ca8f8f7335d6d113ef6d4830e459b15b21aaa5a9cee77ad09c1d58cdabfd6b66fe0d07"}]}, 0x2, [{0x24, &(0x7f0000000200)=@string={0x24, 0x3, "3c10e7ad7e2168c92e4ba259d475bccfac2bd8d251c305d5f6211c08e9e4ca956ee2"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3a1f}}]}) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000480)={0x14, &(0x7f00000002c0)={0x0, 0x9, 0xd7, {0xd7, 0x30, "4d6927b93e83520b0484091ec62bd8bdee932ea2f57fbf2f91afb659ce149fcd11a18c294e56c8c9eea0d09c461cb0391d9867f2b5e2ef0d06b96a2c368e223062df632a4c04a26a3f0dd45582d31a3ccf112c779eecfebdcb81b53a64693d5564e9a6878470b40bcc1af6cc2c9014e5e747ce3cfcbf8191f40cc7e3b8ca3ab0198c217bc2345a6ccc29c0e31eef1734d9e5fb8f36d9dc90412cccd6b02f85d9c40a469cbefe774ec231ae9e23cd430cc69ce00991216fd0b134020313ab526c3f6fdbc9ffaa2aba6ab87783ef379f43a624416057"}}, &(0x7f0000000440)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000640)={0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x3}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:08:19 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\rc\x00\x00'], 0x0, 0x0, 0x0}) [ 1003.405728][T19327] binder: 19324:19327 unknown command 0 [ 1003.421704][T19330] binder: 19326:19330 unknown command 0 [ 1003.426613][T19327] binder: 19324:19327 ioctl c0306201 20000400 returned -22 [ 1003.444188][T19330] binder: 19326:19330 ioctl c0306201 20000400 returned -22 21:08:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="07630440"], 0x0, 0x0, 0x0}) 21:08:19 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02630440"], 0x0, 0x0, 0x0}) [ 1003.547569][T19340] binder: 19339:19340 unknown command 0 [ 1003.559679][T19340] binder: 19339:19340 ioctl c0306201 20000400 returned -22 21:08:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="08630440"], 0x0, 0x0, 0x0}) [ 1003.602951][T19343] binder: BC_ACQUIRE_RESULT not supported [ 1003.619477][T19343] binder: 19341:19343 ioctl c0306201 20000400 returned -22 21:08:19 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="03630440"], 0x0, 0x0, 0x0}) [ 1003.679370][T19348] binder: 19347:19348 unknown command 1074029320 [ 1003.692667][T17290] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1003.694132][T19348] binder: 19347:19348 ioctl c0306201 20000400 returned -22 [ 1003.712872][T11631] usb 5-1: new low-speed USB device number 16 using dummy_hcd 21:08:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="09630440"], 0x0, 0x0, 0x0}) [ 1003.757575][T19352] binder: 19350:19352 unknown command 1074029315 [ 1003.779685][T19352] binder: 19350:19352 ioctl c0306201 20000400 returned -22 21:08:19 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) [ 1003.857895][T19357] binder: 19356:19357 unknown command 1074029321 [ 1003.889039][T19357] binder: 19356:19357 ioctl c0306201 20000400 returned -22 21:08:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a630440"], 0x0, 0x0, 0x0}) [ 1003.915858][T19359] binder: 19358:19359 unknown command 0 [ 1003.932316][T19359] binder: 19358:19359 ioctl c0306201 20000400 returned -22 [ 1003.952581][T11631] usb 5-1: Invalid ep0 maxpacket: 32 21:08:20 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) [ 1004.007136][T19364] binder: 19363:19364 unknown command 1074029322 [ 1004.032552][T19364] binder: 19363:19364 ioctl c0306201 20000400 returned -22 [ 1004.094502][T17290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1004.102566][T11631] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 1004.112574][T17290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1004.131334][T19368] binder: 19366:19368 unknown command 0 [ 1004.141517][T19368] binder: 19366:19368 ioctl c0306201 20000400 returned -22 [ 1004.156982][T17290] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1004.186525][T17290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.214157][T17290] usb 3-1: config 0 descriptor?? [ 1004.372524][T11631] usb 5-1: Invalid ep0 maxpacket: 32 [ 1004.377983][T11631] usb usb5-port1: attempt power cycle [ 1004.772511][T17290] usbhid 3-1:0.0: can't add hid device: -71 [ 1004.778474][T17290] usbhid: probe of 3-1:0.0 failed with error -71 [ 1004.796928][T17290] usb 3-1: USB disconnect, device number 76 [ 1005.102495][T11631] usb 5-1: new low-speed USB device number 18 using dummy_hcd 21:08:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1005.192686][T11631] usb 5-1: Invalid ep0 maxpacket: 32 21:08:21 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0b630440"], 0x0, 0x0, 0x0}) [ 1005.291155][T19387] binder: 19385:19387 unknown command 1074029323 [ 1005.304470][T19387] binder: 19385:19387 ioctl c0306201 20000400 returned -22 [ 1005.342815][T11631] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 1005.442527][T11631] usb 5-1: Invalid ep0 maxpacket: 32 [ 1005.447891][T11631] usb usb5-port1: unable to enumerate USB device [ 1005.533681][ T42] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1005.913730][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1005.932073][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1005.960229][ T42] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1005.975330][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.990799][ T42] usb 3-1: config 0 descriptor?? 21:08:22 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c630440"], 0x0, 0x0, 0x0}) 21:08:22 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="07630440"], 0x0, 0x0, 0x0}) 21:08:22 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0xc6fae50aef1b26e1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x9) r3 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r3, 0x40044145, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r4, 0x40044145, 0x0) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000001840)={0x0, 0x7f, 0x1}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000840)={{r3}, 0x0, 0x2, @inherit={0x80, &(0x7f0000000000)={0x1, 0x7, 0x1ff, 0x8, {0x20, 0x55e, 0xbd, 0x6, 0x8}, [0x1d90, 0x40, 0x7fff, 0x3, 0x1, 0xfffffffffffffeff, 0x0]}}, @devid=r5}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1006.465385][T19402] binder: 19400:19402 unknown command 1074029324 [ 1006.481036][T19404] binder: 19401:19404 unknown command 0 [ 1006.487760][T19402] binder: 19400:19402 ioctl c0306201 20000400 returned -22 [ 1006.504699][T19404] binder: 19401:19404 ioctl c0306201 20000400 returned -22 [ 1006.552531][ T42] usbhid 3-1:0.0: can't add hid device: -71 [ 1006.558615][ T42] usbhid: probe of 3-1:0.0 failed with error -71 21:08:22 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0d630440"], 0x0, 0x0, 0x0}) 21:08:22 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_GET_ACCESS_COUNT(r4, 0x2289, &(0x7f0000000000)) [ 1006.609223][ T42] usb 3-1: USB disconnect, device number 77 21:08:22 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="08630440"], 0x0, 0x0, 0x0}) [ 1006.668576][T19419] binder: 19414:19419 unknown command 1074029325 [ 1006.685757][T19419] binder: 19414:19419 ioctl c0306201 20000400 returned -22 [ 1006.701733][T19422] binder: 19418:19422 ioctl c0306201 20000400 returned -14 21:08:22 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e630440"], 0x0, 0x0, 0x0}) [ 1006.729028][T19423] binder: 19421:19423 unknown command 1074029320 [ 1006.752815][T19423] binder: 19421:19423 ioctl c0306201 20000400 returned -22 21:08:22 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="09630440"], 0x0, 0x0, 0x0}) [ 1006.821460][T19429] binder: 19428:19429 unknown command 1074029326 [ 1006.835516][T19429] binder: 19428:19429 ioctl c0306201 20000400 returned -22 21:08:22 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000180)='trusted.overlay.nlink\x00', &(0x7f00000001c0)={'U-', 0x2}, 0x16, 0x1) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x80000, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000240)={0x7d, 0x7f, 0x5d, 0x82}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1ff, 0x54a02) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfa, 0xfffffffffffffe01, 0x0, 0x0, 0x8, 0x15, "c565f7f51a9c85188bbe5b811858a207da79b738cc4c4c8b8bbfd9159d4db1e7cd66cc919d0eb58c611eae263c683aa8caa54babba4d0732687bca15761cdb7e", "8ca29f437cb87d3b0ebf6d03a58c5acba979d37cd3a381c16e785c26b5e9725e90c6a9e65003561b172c9b4c580e0f82d7d07f3646a315fddc2cdb57c3fee290", "3521ce7f80f6b8a42e9633315998b492d5f10919c7c02795c39a936d7e35e3ee", [0xfff, 0x9b56]}) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000140)={0x0, 0x0, {0x5, 0x7, 0xc, 0x1, 0xb, 0x10008001, 0x4, 0x42, 0x1}}) ioctl$SNDRV_PCM_IOCTL_STATUS64(r3, 0x80984120, &(0x7f0000000280)) [ 1006.887047][T19432] binder: 19430:19432 unknown command 1074029321 [ 1006.907412][T19432] binder: 19430:19432 ioctl c0306201 20000400 returned -22 21:08:22 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="10630440"], 0x0, 0x0, 0x0}) [ 1006.960595][T19436] binder: 19434:19436 ioctl c0306201 20000400 returned -14 21:08:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080), 0x0}, 0x0) 21:08:23 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a630440"], 0x0, 0x0, 0x0}) 21:08:23 executing program 4: syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/236, 0xec}, {&(0x7f0000000100)=""/106, 0x6a}, {&(0x7f0000000180)=""/62, 0x3e}, {&(0x7f00000001c0)=""/113, 0x71}, {&(0x7f0000000280)=""/109, 0x6d}, {&(0x7f0000000300)=""/55, 0x37}], 0x6, 0x882, 0x9) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = pidfd_getfd(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1007.037637][T19441] binder: 19437:19441 unknown command 1074029328 [ 1007.064713][T19441] binder: 19437:19441 ioctl c0306201 20000400 returned -22 [ 1007.088230][T19444] binder: 19443:19444 unknown command 1074029322 [ 1007.108766][T19444] binder: 19443:19444 ioctl c0306201 20000400 returned -22 21:08:23 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11630440"], 0x0, 0x0, 0x0}) 21:08:23 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0b630440"], 0x0, 0x0, 0x0}) 21:08:23 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@mcast1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'ip6tnl0\x00', r3, 0x29, 0xfe, 0x20, 0x7fffffff, 0x40, @private1={0xfc, 0x1, [], 0x1}, @local, 0x1, 0x8, 0xfffffffc, 0x1}}) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r5, 0x40044145, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$KVM_GET_MSR_INDEX_LIST(r6, 0xc004ae02, &(0x7f00000000c0)=ANY=[]) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r1}) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r7, 0x118, 0x1, &(0x7f0000000080)=0xfbfff47d, 0x4) r8 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1007.260085][T19458] binder: 19455:19458 unknown command 1074029323 [ 1007.265412][T19459] binder: 19456:19459 unknown command 1074029329 [ 1007.288012][T19458] binder: 19455:19458 ioctl c0306201 20000400 returned -22 [ 1007.292154][T19459] binder: 19456:19459 ioctl c0306201 20000400 returned -22 21:08:23 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c630440"], 0x0, 0x0, 0x0}) [ 1007.321415][T19461] binder: 19460:19461 ioctl c0306201 20000400 returned -14 [ 1007.342452][ T42] usb 3-1: new high-speed USB device number 78 using dummy_hcd 21:08:23 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="12630440"], 0x0, 0x0, 0x0}) [ 1007.388475][T19467] binder: 19466:19467 unknown command 1074029324 [ 1007.395185][T19467] binder: 19466:19467 ioctl c0306201 20000400 returned -22 21:08:23 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x800, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x1573) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1007.456537][T19471] binder: 19468:19471 unknown command 1074029330 [ 1007.475692][T19471] binder: 19468:19471 ioctl c0306201 20000400 returned -22 21:08:23 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0d630440"], 0x0, 0x0, 0x0}) 21:08:23 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="13630440"], 0x0, 0x0, 0x0}) [ 1007.502994][T19474] binder: 19472:19474 ioctl c0306201 20000400 returned -14 21:08:23 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket(0x1d, 0x2, 0x1f) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'sit0\x00', 0x0, 0x29, 0x80, 0x9, 0xffff, 0x1, @dev={0xfe, 0x80, [], 0xe}, @local, 0x7800, 0x700, 0xff, 0x7}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x7c, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, [], 0x23}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}]}, 0x7c}}, 0x24000040) [ 1007.583950][T19479] binder: 19476:19479 unknown command 1074029325 [ 1007.604768][T19480] binder: 19478:19480 unknown command 1074029331 [ 1007.611134][T19479] binder: 19476:19479 ioctl c0306201 20000400 returned -22 [ 1007.626927][T19482] binder: 19481:19482 ioctl c0306201 20000400 returned -14 [ 1007.656263][T19480] binder: 19478:19480 ioctl c0306201 20000400 returned -22 [ 1007.722426][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1007.760064][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1007.790250][ T42] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1007.810933][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.832744][ T42] usb 3-1: config 0 descriptor?? [ 1008.562005][ T42] usbhid 3-1:0.0: can't add hid device: -71 [ 1008.569647][ T42] usbhid: probe of 3-1:0.0 failed with error -71 [ 1008.601180][ T42] usb 3-1: USB disconnect, device number 78 21:08:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080), 0x0}, 0x0) 21:08:25 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e630440"], 0x0, 0x0, 0x0}) 21:08:25 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) 21:08:25 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000000)) [ 1009.122468][T19506] binder: 19503:19506 unknown command 1074029326 [ 1009.132177][T19508] binder: 19504:19508 unknown command 0 [ 1009.138515][T19509] binder: 19505:19509 ioctl c0306201 20000400 returned -14 [ 1009.143765][T19506] binder: 19503:19506 ioctl c0306201 20000400 returned -22 [ 1009.152485][T19508] binder: 19504:19508 ioctl c0306201 20000400 returned -22 21:08:25 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept4$nfc_llcp(r2, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x80000) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f00000000c0)='wg1\x00') ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000100)={r3, 0x380000, 0x8000000, 0xb165}) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000140)={0x1, 0xc0, "ad936a", 0x2, 0x9}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:08:25 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="10630440"], 0x0, 0x0, 0x0}) 21:08:25 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) [ 1009.279007][T19518] binder: 19517:19518 ioctl c0306201 20000400 returned -14 [ 1009.332601][T19523] binder: BC_ATTEMPT_ACQUIRE not supported [ 1009.339949][T19522] binder: 19519:19522 unknown command 1074029328 [ 1009.345224][T19523] binder: 19520:19523 ioctl c0306201 20000400 returned -22 21:08:25 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:08:25 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="10630840"], 0x0, 0x0, 0x0}) [ 1009.373389][T19522] binder: 19519:19522 ioctl c0306201 20000400 returned -22 21:08:25 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11630440"], 0x0, 0x0, 0x0}) [ 1009.454335][T19530] binder: 19527:19530 ioctl c0306201 20000400 returned -14 [ 1009.461886][ T42] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1009.479601][T19531] binder: 19529:19531 unknown command 0 [ 1009.491709][T19531] binder: 19529:19531 ioctl c0306201 20000400 returned -22 21:08:25 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SNDCTL_SEQ_RESETSAMPLES(0xffffffffffffffff, 0x40045109, &(0x7f0000000000)=0x100) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x80, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000000440)=""/4096) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x1, 0x800], 0x3, 0x80800, 0x0, 0xffffffffffffffff}) socketpair(0x1e, 0x6, 0x10000, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r5, 0x800448d2, &(0x7f0000000180)={0x4, &(0x7f0000001440)=[{}, {@none}, {@fixed}, {}]}) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000100)={0x1000, 0xfc00, 0x9, 0x7, 0x2, "2f1289f23fc080a0"}) [ 1009.542318][T19535] binder: 19534:19535 unknown command 1074029329 [ 1009.556270][T19535] binder: 19534:19535 ioctl c0306201 20000400 returned -22 21:08:25 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) [ 1009.660287][T19542] binder: 19539:19542 ioctl c0306201 20000400 returned -14 [ 1009.892012][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1009.919506][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1009.949532][ T42] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1009.971611][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.012363][ T42] usb 3-1: config 0 descriptor?? [ 1010.753503][ T42] usbhid 3-1:0.0: can't add hid device: -71 [ 1010.759461][ T42] usbhid: probe of 3-1:0.0 failed with error -71 [ 1010.792526][ T42] usb 3-1: USB disconnect, device number 79 21:08:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080), 0x0}, 0x0) 21:08:27 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="12630440"], 0x0, 0x0, 0x0}) 21:08:27 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) 21:08:27 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x145283, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000040)={0x3341}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:08:27 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="08631040"], 0x0, 0x0, 0x0}) [ 1011.278663][T19565] binder: 19561:19565 unknown command 1074029330 [ 1011.289841][T19566] binder: 19562:19566 ioctl c0306201 20000400 returned -14 [ 1011.296354][T19565] binder: 19561:19565 ioctl c0306201 20000400 returned -22 21:08:27 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="13630440"], 0x0, 0x0, 0x0}) 21:08:27 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000000)={0x40, 0x0, 0x5}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:08:27 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="09631040"], 0x0, 0x0, 0x0}) [ 1011.435939][T19579] binder: 19576:19579 unknown command 1074029331 [ 1011.456498][T19579] binder: 19576:19579 ioctl c0306201 20000400 returned -22 [ 1011.463014][T19580] binder: 19578:19580 ioctl c0306201 20000400 returned -14 21:08:27 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) 21:08:27 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 1011.531612][ T42] usb 3-1: new high-speed USB device number 80 using dummy_hcd 21:08:27 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) delete_module(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r1, 0x40044145, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1011.602990][T19590] binder: 19588:19590 unknown command 0 [ 1011.608581][T19590] binder: 19588:19590 ioctl c0306201 20000400 returned -22 21:08:27 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01634040"], 0x0, 0x0, 0x0}) [ 1011.690477][T19596] binder: 19594:19596 ioctl c0306201 20000400 returned -14 [ 1011.951660][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1011.971563][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1012.001569][ T42] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1012.011300][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.038776][ T42] usb 3-1: config 0 descriptor?? [ 1012.771473][ T42] usbhid 3-1:0.0: can't add hid device: -71 [ 1012.777600][ T42] usbhid: probe of 3-1:0.0 failed with error -71 [ 1012.796890][ T42] usb 3-1: USB disconnect, device number 80 21:08:29 executing program 4: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f00000001c0)="a0165d376df68ab99e2f4f7b439918a97e2af5e3c89d57dfcf286e16027fb7bbc36c9eb81b8654c983944d4adf5bced8a02ca8b84e7eb5b5fc1ab4a6ce0d6b079e2badd1db20c1e321eb214e968d07413cddd4d26d0c87aaf1d956c7ef14397d76494f9662f33af557e8da739f22cb0c5e96088af9") syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r4 = pidfd_getfd(r2, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x3}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYRESHEX=r3, @ANYRES32=0x0, @ANYBLOB="0c0058001a000000000000005d813af6befdd07c18cdddc4c7d66823ba47e17564aed992830a834053ce796c5bbcb5caf02a1242a4961fd2c3cf431732dbfdac4b23b3a1ae6e114ed3d36154c1fbf38ed0d89d24daf217147b9265684a3cb2b51583dc5386c97c0b928c30973c004b44b417ec427a2e0c12007a59e77a"], 0x28}, 0x1, 0x0, 0x0, 0x4044844}, 0x20040800) 21:08:29 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0}) 21:08:29 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) 21:08:29 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02630440"], 0x0, 0x0, 0x0}) [ 1013.301805][T19621] binder: BC_ATTEMPT_ACQUIRE not supported [ 1013.314234][T19622] binder: BC_ACQUIRE_RESULT not supported [ 1013.323082][T19621] binder: 19618:19621 ioctl c0306201 20000400 returned -22 21:08:29 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x7, 0x6, 0x1, "44b20f2d2079ccf593149d0ec27a4fc1cf5637885a5c061c1e5d2fbf51792511", 0x34424752}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:08:29 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="12634840"], 0x0, 0x0, 0x0}) [ 1013.350433][T19622] binder: 19620:19622 ioctl c0306201 20000400 returned -22 21:08:29 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02630440"], 0x0, 0x0, 0x0}) 21:08:29 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="10630840"], 0x0, 0x0, 0x0}) [ 1013.458620][T19633] binder: 19630:19633 ioctl c0306201 20000400 returned -14 [ 1013.461497][T19636] binder: BC_ACQUIRE_RESULT not supported 21:08:29 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_buf(r1, 0x0, 0x9, &(0x7f0000000000)=""/89, &(0x7f0000000080)=0x59) 21:08:29 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="040a0440"], 0x0, 0x0, 0x0}) [ 1013.499114][T19638] binder: 19634:19638 unknown command 0 [ 1013.506389][T19636] binder: 19631:19636 ioctl c0306201 20000400 returned -22 [ 1013.532471][T19638] binder: 19634:19638 ioctl c0306201 20000400 returned -22 21:08:29 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02630440"], 0x0, 0x0, 0x0}) 21:08:29 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) [ 1013.596778][T19645] binder: 19641:19645 unknown command 1074006532 [ 1013.607832][T19646] binder: 19643:19646 ioctl c0306201 20000400 returned -14 [ 1013.623983][T19645] binder: 19641:19645 ioctl c0306201 20000400 returned -22 [ 1013.662948][T19650] binder: BC_ACQUIRE_RESULT not supported [ 1013.675317][T19650] binder: 19647:19650 ioctl c0306201 20000400 returned -22 21:08:29 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04230440"], 0x0, 0x0, 0x0}) 21:08:29 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02630440"], 0x0, 0x0, 0x0}) 21:08:29 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) 21:08:29 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_dccp(0xa, 0x6, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x101000, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044145, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x103, 0x1, 0x8e, 0xfd, 0x3}, 0x10) r2 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_buf(r6, 0x0, 0x9, &(0x7f00000000c0)="0bde7cc95cb41ea7cb58fcfbfbc7e740c3922dabc783cc1c06a9abe91ddabf3466679e501dea9e3eda46197bbd440b1039750063ce9752e629a106ba467e1d7a98cdc93b4fdaafaa06ebef8e6c360b6c505d0292b4957d2ca624d0917c8ff4f86d2d78bba01f9bf3db131bf8c509375a55a3fd601346850a54cf7236c931c0c1f73388c6e767a04dacb9cd2551f57a21011fbf36d006a5ca2e0aacea", 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsu\x00', 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r7, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40600400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r8, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7ff, 0x47}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3b}]}, 0x34}, 0x1, 0x0, 0x0, 0x40840}, 0x48800) [ 1013.793835][T19656] binder: 19655:19656 unknown command 1074012932 [ 1013.805670][T19656] binder: 19655:19656 ioctl c0306201 20000400 returned -22 [ 1013.818160][T19660] binder: BC_ACQUIRE_RESULT not supported [ 1013.838224][T19660] binder: 19658:19660 ioctl c0306201 20000400 returned -22 21:08:29 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04250440"], 0x0, 0x0, 0x0}) 21:08:29 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="08631040"], 0x0, 0x0, 0x0}) [ 1013.870477][T19664] binder: 19661:19664 ioctl c0306201 20000400 returned -14 21:08:29 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02630440"], 0x0, 0x0, 0x0}) [ 1013.967560][T19672] binder: 19667:19672 unknown command 1074013444 [ 1013.980357][T19674] binder: BC_ACQUIRE_RESULT not supported [ 1013.989952][T19672] binder: 19667:19672 ioctl c0306201 20000400 returned -22 [ 1014.005148][T19674] binder: 19670:19674 ioctl c0306201 20000400 returned -22 21:08:30 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$FUSE_NOTIFY_STORE(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="29000000040000000004000000000000000200000000000000010000000000000000"], 0x29) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) recvfrom$phonet(r5, &(0x7f0000000000)=""/98, 0x62, 0x102, &(0x7f0000000080)={0x23, 0x10, 0x7f}, 0x10) ioctl$SNDRV_PCM_IOCTL_INFO(r4, 0x81204101, &(0x7f0000000440)) 21:08:30 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="09631040"], 0x0, 0x0, 0x0}) 21:08:30 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02630440"], 0x0, 0x0, 0x0}) 21:08:30 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="042a0440"], 0x0, 0x0, 0x0}) [ 1014.105549][T19682] binder: 19678:19682 ioctl c0306201 20000400 returned -14 [ 1014.114255][T19683] binder: BC_ACQUIRE_RESULT not supported [ 1014.125053][T19684] binder: 19680:19684 unknown command 1074014724 [ 1014.137544][T19683] binder: 19681:19683 ioctl c0306201 20000400 returned -22 21:08:30 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 1014.157171][T19684] binder: 19680:19684 ioctl c0306201 20000400 returned -22 21:08:30 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x30000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x70, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000100)={@ptr={0x70742a85, 0x1, &(0x7f0000000080)=""/128, 0x80, 0x1, 0x1f}, @flat=@binder={0x73622a85, 0x110a, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/4096, 0x1000, 0x2, 0xb}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}}, @release={0x40046306, 0x2}, @register_looper, @request_death={0x400c630e, 0x1}, @clear_death={0x400c630f, 0x2}], 0x54, 0x0, &(0x7f0000000240)="49e96dbb965bf2f8af5f3bb773509d91d9b50c594cf8341ab3e45262744f48c6a3ae0dab49ab2513c80895b62dcc2770419702e606ab435eb24f8d643244f718e8c186a439302832f4501437faffdfb45d873963"}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f0000000000)={0x5, 0x7f, 0x8, 0x1, 0x1, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:08:30 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02630440"], 0x0, 0x0, 0x0}) 21:08:30 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="042b0440"], 0x0, 0x0, 0x0}) 21:08:30 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01634040"], 0x0, 0x0, 0x0}) [ 1014.287549][T19697] binder: BC_ACQUIRE_RESULT not supported [ 1014.295259][T19695] binder: 19691:19695 ioctl c0306201 20000400 returned -14 [ 1014.304557][T19697] binder: 19692:19697 ioctl c0306201 20000400 returned -22 21:08:30 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02630440"], 0x0, 0x0, 0x0}) [ 1014.342607][T19698] binder: 19696:19698 unknown command 1074014980 [ 1014.361251][T19698] binder: 19696:19698 ioctl c0306201 20000400 returned -22 21:08:30 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:08:30 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) 21:08:30 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="042d0440"], 0x0, 0x0, 0x0}) [ 1014.420977][T19707] binder: BC_ACQUIRE_RESULT not supported [ 1014.440158][T19707] binder: 19705:19707 ioctl c0306201 20000400 returned -22 [ 1014.477312][T19709] binder: 19708:19709 ioctl c0306201 20000400 returned -14 [ 1014.514111][T19714] binder: 19711:19714 unknown command 1074015492 21:08:30 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02630440"], 0x0, 0x0, 0x0}) 21:08:30 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="12634840"], 0x0, 0x0, 0x0}) 21:08:30 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x3f, 0xfff, 0x5, 0x9}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x2c000, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0xaf) r4 = socket$inet_udplite(0x2, 0x2, 0x88) connect$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x2, 0x3}}, 0x10) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000000)=0x1c) r6 = open(&(0x7f0000000040)='./file0\x00', 0x100, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x40, 0x2, 0x9], 0x3, 0x80000}) [ 1014.539133][T19714] binder: 19711:19714 ioctl c0306201 20000400 returned -22 [ 1014.613392][T19721] binder: BC_ACQUIRE_RESULT not supported [ 1014.636572][T19721] binder: 19717:19721 ioctl c0306201 20000400 returned -22 21:08:30 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="042e0440"], 0x0, 0x0, 0x0}) 21:08:30 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="040a0440"], 0x0, 0x0, 0x0}) [ 1014.657467][T19725] binder: 19720:19725 ioctl c0306201 20000400 returned -14 21:08:30 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02630440"], 0x0, 0x0, 0x0}) [ 1014.718086][T19730] binder: 19727:19730 unknown command 1074015748 [ 1014.741444][T19730] binder: 19727:19730 ioctl c0306201 20000400 returned -22 [ 1014.752966][T19732] binder: 19729:19732 unknown command 1074006532 21:08:30 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r3, 0x40044145, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001580)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000480)={@flat=@weak_handle={0x77682a85, 0x1001, 0x3}, @fda={0x66646185, 0x0, 0x2, 0x2f}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/80, 0x50, 0x1, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x38}}}], 0x1000, 0x0, &(0x7f0000000580)="477af6fec813866fa5572c255c7c8eac7424e1e7f50365dad8c6afd777c1b5f616bfb6af38e468f2e328e4ffbfdd4d7f3fbe72c3bbde40789ccb584d7d18cffa953583f1772327c66cef6d6368a1ebb770f669f840b73a80ee60d4e43d4caff7f4e3da6320609897d6672c1887538887606cd8622e32078a4dfc53f241dced3b7c8cf20e93bc442377d882f9b3a837b2352a66f272c18739c454c0ff35cc69dff2bfd803bee9794c5dd8b75339f4f0e132f44709cbd06a42efaebcfc0c85f59fa1ee2334a478c9bc67dff5d7a76f063fb4eade0ab48498c7da1cc5f98017ad37a4d0f8127b36aac4bf117f15b5a3e0a3e53287d6141b2239de45e8a505ba88d2030da581d78e5558333ba117c47ce31a420f956a6f6ba6a5a26e6d9d7732b6b931bcadd5158c1efad00a2b58035732bdaee045b6fa15f7e8bd15ecf5e6a5fa303cc2bf80e497be9151a6056832dd1a608041d5b5d5f862cc0d784774a64b7f0d29b1b05aa2449591142fe79e532bee0c24e82e433dca7066b0a435ff3f172b699c627595956fcbb5e236ccf18a7460b1e510deb066c8e00e8e5eb1d2cfd897e304a255dbaa218b0358785dda50702ed7799af5f5ef3a4379e87a627e25e8a2339e03b8438617a057829e7aa7565d1571b5f4b35c022ef9d5a5f036432d6f2b6ae962e0f899320cc026e788fb3100357f4396c50572b74848f743b2fe0b0718b01b42a60eb11e08072f427f377fe1a09dc6dc822184a584164f3d4e2e875323363af6fdb4bda69729b87255dc90bd80f1a669415deeba3d397d87758cf831a532100b40632a6a92524dcd518e236d9a3606a00ddb603659b3785600ef8edf9762da76409dc95b6807243a9ea3f134f8f3310a99a65e071e6e58c4065f60092105ccdb986627a6bc548f95a3f5dc8c976b270e263173d5e768813b84490a5a6ff6e6680155d48d8e4dfefbc21a73bb8f08d96d9a9593e4a179642d5c9b27ff6822ba53fd165588d11ae01492ead1ae7002a07766e7768da1ed53d691bb83439892fea8034618465271ad27eaeaec65216095505453b9216cd114e6e6bec89bdf283e1b9983efeb04a520ae96ecf2fce84aa4624c72de1b60f8b5eb3f8bbc7481418be91126994e62ebf64515f69d8e93d8201801b238556e72467d6bd5f43ef525c19f7bbd94997efd4afc9c2a30d8d48b6598e2557e4ca4719736735748ab409d43ac21e469b68e8dee196ec56c72fad97270e1b0096f010a7592d815d5a7ed2aafdfe0ae327c01ef78841c0ab792c7d0e51291927c1f8f7a697c8b899ad7bcd32ee78f0ac83266380e86a3b62625baef38bb1ed64e365a9cc645706866f3c8b9b98ac83dd92876b6a84ccbb0c7160c8c0be9973be0c6ef82be1614d102fd170c64160cfb564143842320c71b2fe4f57da2dc59690ef955e0cf5ffab9c283482603ea2cff744525c44972c1372ff67258c3341189bd3264ec1f822cbbd4942f874e5da6d2897e73e397309295e8d1e636363e451455932407dc2c884365c8f87d3a01119ae445169459cf799dd52abd38bc87a4ee75dce17540fdfaa8314889f0cd0ba693738653d3b3166df239e848067ac5cda68aeeccdecb3d47f6198fa834d06f249e57a199b97dca6f68d356999494f13dce6870b67f76ee11153b5dc5d7dc2575bbfd0f71dd47ba0aaef7350dc3743bc2ef4022e6de8f0f763296be8895657859e832b73d7fd664e9619d5fe6fac452302645f896ce7aafab2bb9e81bd867a450bfe19d1a7f18620bf05d99683f1b8a4780d03eaac4c0a769d2769edadbe6a3322df79d4653dc927a6e75518b21949e80bfe416be8af1a50de93697192dacc14a66128f4d4501b16dfe694597d0ffb4451c602a6cc7b928eb16d98064e4df39855e5aa804d22fc61674a887298ece8f54cbbc50162b7b408d4138b552fc54560a93d979810224d6eaeda41a932d521a7d84afd47f09bef2a12a67ba2ad3f08cec67f4ecdac223e033e585ac67c84dd1215df4c513df36e8a063a7c87c5b330faed168e76d017b131841ee0fe82a70be7af308a1800913bb11535938d2506f951f2ca5cfafd4f8fed5e3a49098fa064628625733c2b311ae7abe098b8996d9a40063a347e80f5297b962bd80b900eaf936cddf701783fba3eba6c71a6d9626ab9510b23776b94b645e90f8308d1297047a806452390d984cfbe0613e0b45ac5cdc59e75acc66d6bd56d5ff4324251744fc2b2c02110b5b15826ffb8151fbe70baf9b5ea3af90e781431bfacefe06c138a39457af89d3312980d9f8f0ae2d78fa8ec910e115609d3d77bd38ab0d163165e0c8c63e65a0845192bf82d4a2e18bf9ec070322b8163951878afc4df0601235a041fa18f4b6efac2499ae7e29a2ca5e6c06a30a5a6dafaf86758d650138e2d7fe23ad495daeff76bb4a897700b6351652ee7a5b74331f80ad4a3ba23e4d153d3ba91a72ad7a123ff5ee734cc4686a2be48003f1ec3f7d81174e15a21f1d88167369d359c65efd63acf4c0835895265fb534dc504d5f3e0652e3dbd5dee2d1e99ad532981606c8c296f44f80c5f38bf0ecad38a2d10f7282ae983f4738cf97dc8321527e28461582e90fbd1a1b8cc96703dec94681296d6705e00964c06d862e8c80da08676f375153babad5a9e5aaf3669b319e036666ab97f52b841242cbf8b973dfce6b0706ab26ae5552d8bad77bccf35713846752f14ffc0419a5a196d0164c326fea713e2567600b6032cf9a9894faeafeea247d0621cc21d70cf8311e2a2857ba35d5ad3cf1be2ae061568fec6ad79d2e4b8185e96460641ca553d0b39b01c3f9643326c1ab140466762ed901a43096f534d15b45257a9bda15123a8c88d94517d123281de4be1691fe522d37e8db50415b427215a49a04a8adc854a153bdd55c5a611a5059ac1bae254e77f11540a4e26d0e049da53a85e77bcb39b45344e0fa55e3beec40b724c9de1273983f26683a8d7addcfe4a790771b06850035e24fe0ca7dcd590dcdfb77fbe7181b3e3fb751c1b3d396e24bea48e741e92473caed6bab9bb2618cf93436c9bf9ea752a1cdab3542c45c8025f17977effed3a7f9f5691fe07cd4614b7d56158cad466c75f0e1ffd1f28240622e0a66f3083e2cebaa74d21c4dfddf19bdcf0584f2c0e83a0a6d1ad31224fa296938f692bc6fb4311603cfd0d317a8e63406fe304cbdbb9e247c0f9e85ad4ca762f5c788647a439f498bab247e7fdfd3f8c47de071a6922ce3a08480d3ae93722418cae0292b5b9525aef05ab92d602e12055fe3dfa690cd194a907ae2c89b954e5afb3b8bb39b30b2525c7f4efa8c1887494fe5f71e345736cd3ad364d63a565a43e76629e60213802f998ade8ac4a52ae80c41663b3411339c400983203de8a2d959cdd0b3f071d8cd578a75698b31ccb03b7331d6d1ab6cbf7b1e1e60facc416c05619b21c9a520f5f14bc4ad6b3e400d06415702b1704077938d4782b46ab03ec39bba39c6467d58513722463cfa37d8ef10e66ed95e8aadda38c8e5f30a9dd011d07dac33c7097674207f39d3507c42f3ce0e88620c459a6a21c22314ad00d9a89400630aed0e0eed4ec3ed0e570794c56120f8742e9d33af292a9f4c00ab04bcaefe9bcfeae6197532bdc56dbe53856e59cd9403f8c4703075431d8dc44bb75830967aa854c67d7eb63c8ddca0fbc589d53c30e43125e724b8c5737427f39d5c89727ff87a6f07f162f0499551e75895149d11c25354db720ba08324c94dd7b161e3b9f80a6e8efe5b59ddcc5996c827d1bee6f4955345dc5c281aa41018477c7527851bb2a6c2a3390a5e181e951f7f78fadb4832e0ad70cf1ba955fcb65b138c428ce501510af460e7544fafe1ab25dcb6f9787e973f0b24ce059227421f19d8355a38c7c936498d9a55de2740678faf78d04e01733fb8397c005ec4c9f431f2a2b6815875647ae6f6236e9103156555da6cd8facf0ee0e0d0034f3c616d88cda04de41fa27050fc2609b80acfb089af6fe7d5da5700ed8857b7efd6f74a182ac982c619fb9441038dec04c2cb49e7a4ed5219cdd0d61c036388343e95c24eee4f80cf2dbcd10ba238a5476dec707dcd3005acdc1af387c51184bbb969b239bf40f8a7e70144352b3900b137ceadba900773871154fe08e023f4721bb39203b3845916a7e7b0c52a56b4332c5a682d73945bdc5180e095081045b573617d86a95ffcefc8617a384f59df4e7fe4c29d7ac7779e189d91137881253df2893a78f590a76b504cefc9808e59365ed77e924baf0706a587445467ee94211f9445c92bd142756ef7658a7ce7e83f9ed1d03589f55426c1cf08f2c168aa8e1ecfc7b0208ea1b35652204503260dfe8615507e6e3b7aab6fcc7da818e21a1456dae081075ba3afdf50cc206dc12a076b18ea1827b22b8e0bb365b50426a199059c73dee808f73f28dcbd25dff072e03bd35a246fe7c4ae6d616cfa354184a5f272a91f7c6800ef92f59026458a7e420f3fd70b065444f16b5831ba7949c7c5fcee26dd510bb0c74e8fd2b5446d00946ee03d6740e3698b3b8e0c688b9ecbdb26c9b6f29ff38cd64b5971428651a5979dccf79224bb215044a4d386d9d27ea89c5696238034bf810ca69ced6c554d7ed4bbb10b36db843cbe96284bf19b336a4ea654f3bad0cab9ac682a7e5fc606b2b73f14bec3061a74561c6834a5253ce4f5f9e55c7816da5578ccc468da15b85a6fcaf4a3671a071f4a955e451408b83541a52f29b3c9744175a5160a436dc14254bd6990fad7a9a4221e08059c6d20eed15f4addbade348303702d4cac2895339d1a02c8b855e0f10f36bc9df6e33faf42a95b28c5bccbe351ddb169213ffa8e75a2fc588e633eda4792e3197dfd7a543a595802d4891a5dec00993547664d8a9046d5cbcaa3247d9724abd618cda23f29312e2bb6c0b396480d99aea130e538c897468422a49f68f03fe137540b0d5f004f05b6d21d62085189daffbfda83b5774910262bf3bbd1d60baf7c1061c8693266be649090f12b246f5c52a2a6ce5fc4b7d3c88716ad1c398cfe328ea57b7a1434c6bd1dc0f6e3d5d054b78d8573bbc9b8975f23efb4f3f309e03ceaff53aae4a942ea340e85586b395eded36d3e170cbf387ad9bacf1ac9bafa7df8d78fe1d79a8794623c4d189b87a985ec84acbec0a195d3d20e04f6530b62efb457b6b30264cb23575a0836442f7cc0c403e2c6c49227ca643f683bb0ce86ca4b3c535069562403b432121e2a13b250dba804e56d25717fb50017251152b59e5be90052260424bed3c1e34c5955498ac68baddd1284559d127a6f21f8b408cff025d6d7aa71b6c3ed2294315e806626c1d24d1c9ed85a0c0b170ece608343544887a080a39d266231dbbb0960a9c0f4ea10f536496fceff48f91b2dba30d8e7f06d82f5287ba972bb13ecf975abce8484343c18460bc6ea783e103a87a9562e890c2e0f115fdb1794e370c19a8ff74d92377e276695b579c6b94b44ef9385507a06d78dbd61b3f24ba3737b82f3385a44ff8a4620eb584b9b7db0a33403bc4fab2869a1b8a5fd0de9ac637cc317743d056db1257ef708333d5f7953cca27590c87d38236cf3bcda93d880dee0c6d8c9380c7ea80ed2e71edb5ed6353c33184fbefb96d644b7022c5ee9841a953f9e61c6f01c9d6d29cddc13b4b3f28316f33f6e063aef876ead1a5ade5ec1fea91d290feab44b7aa6c945262cfddbc4419ae3233b278875f7da2f952575fbcefab88bba961130c67969f105"}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='threaded\x00', 0x9) write$cgroup_type(r2, &(0x7f0000000180)='threaded\x00', 0x9) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYRESOCT], 0x20}, 0x1, 0x0, 0x0, 0x24004080}, 0x4) [ 1014.774314][T19732] binder: 19729:19732 ioctl c0306201 20000400 returned -22 [ 1014.789910][T19733] binder: BC_ACQUIRE_RESULT not supported [ 1014.806126][T19733] binder: 19731:19733 ioctl c0306201 20000400 returned -22 21:08:30 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04300440"], 0x0, 0x0, 0x0}) 21:08:30 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04230440"], 0x0, 0x0, 0x0}) 21:08:30 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02630440"], 0x0, 0x0, 0x0}) [ 1014.846570][T19738] binder: 19737:19738 ioctl c0306201 20000400 returned -14 [ 1014.904195][T19741] binder: 19740:19741 unknown command 1074016260 [ 1014.927857][T19741] binder: 19740:19741 ioctl c0306201 20000400 returned -22 21:08:30 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x4924924924926d3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="0800050002000000ce3a78221e"], 0x24}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r3, 0x700, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x5e}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 21:08:31 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="044c0440"], 0x0, 0x0, 0x0}) [ 1014.954247][T19744] binder: BC_ACQUIRE_RESULT not supported [ 1014.976308][T19745] binder: 19742:19745 unknown command 1074012932 [ 1014.986421][T19744] binder: 19743:19744 ioctl c0306201 20000400 returned -22 [ 1015.016775][T19745] binder: 19742:19745 ioctl c0306201 20000400 returned -22 [ 1015.035960][T19749] binder: 19748:19749 ioctl c0306201 20000400 returned -14 21:08:31 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02630440"], 0x0, 0x0, 0x0}) 21:08:31 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04250440"], 0x0, 0x0, 0x0}) [ 1015.074149][T19749] binder: 19748:19749 ioctl c0306201 20000400 returned -14 [ 1015.081211][T19752] binder: 19750:19752 unknown command 1074023428 [ 1015.099034][T19752] binder: 19750:19752 ioctl c0306201 20000400 returned -22 21:08:31 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x802) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$CHAR_RAW_ALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000000)) r2 = accept4(r1, &(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, &(0x7f0000000080)=0x80, 0x100000) connect$qrtr(r2, &(0x7f00000000c0)={0x2a, 0x0, 0x8000}, 0xc) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1015.140880][T19757] binder: BC_ACQUIRE_RESULT not supported [ 1015.165305][T19757] binder: 19756:19757 ioctl c0306201 20000400 returned -22 [ 1015.192811][T19760] binder: 19758:19760 unknown command 1074013444 [ 1015.217938][T19760] binder: 19758:19760 ioctl c0306201 20000400 returned -22 21:08:31 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04580440"], 0x0, 0x0, 0x0}) 21:08:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02630440"], 0x0, 0x0, 0x0}) [ 1015.244114][T19762] binder: 19761:19762 ioctl c0306201 20000400 returned -14 21:08:31 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="042a0440"], 0x0, 0x0, 0x0}) [ 1015.295806][T19767] binder: 19764:19767 unknown command 1074026500 [ 1015.328952][T19767] binder: 19764:19767 ioctl c0306201 20000400 returned -22 21:08:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02630440"], 0x0, 0x0, 0x0}) 21:08:31 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:08:31 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04640440"], 0x0, 0x0, 0x0}) [ 1015.410485][T19776] binder: 19771:19776 unknown command 1074014724 [ 1015.421018][T19777] binder: 19773:19777 ioctl 8912 400200 returned -22 [ 1015.435348][T19776] binder: 19771:19776 ioctl c0306201 20000400 returned -22 21:08:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02630440"], 0x0, 0x0, 0x0}) [ 1015.456636][T19779] binder: 19775:19779 unknown command 1074029572 [ 1015.457635][T19777] binder: 19773:19777 ioctl c0306201 20000400 returned -14 [ 1015.481538][T19779] binder: 19775:19779 ioctl c0306201 20000400 returned -22 21:08:31 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="042b0440"], 0x0, 0x0, 0x0}) [ 1015.535250][T19777] binder: 19773:19777 ioctl 8912 400200 returned -22 [ 1015.536327][T19783] binder: 19773:19783 ioctl c0306201 20000400 returned -14 21:08:31 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02630440"], 0x0, 0x0, 0x0}) 21:08:31 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04680440"], 0x0, 0x0, 0x0}) [ 1015.587386][T19787] binder: 19785:19787 unknown command 1074014980 [ 1015.622038][T19787] binder: 19785:19787 ioctl c0306201 20000400 returned -22 21:08:31 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) r3 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r3, 0x40044145, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, &(0x7f0000000440)={{r0}, "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"}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:08:31 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02630440"], 0x0, 0x0, 0x0}) 21:08:31 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="042d0440"], 0x0, 0x0, 0x0}) [ 1015.681854][T19792] binder: 19789:19792 unknown command 1074030596 [ 1015.716413][T19792] binder: 19789:19792 ioctl c0306201 20000400 returned -22 [ 1015.717706][T19794] binder: 19793:19794 ioctl c0306201 20000400 returned -14 21:08:31 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04690440"], 0x0, 0x0, 0x0}) [ 1015.779404][T19800] binder: 19796:19800 unknown command 1074015492 [ 1015.813503][T19800] binder: 19796:19800 ioctl c0306201 20000400 returned -22 21:08:31 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02630440"], 0x0, 0x0, 0x0}) 21:08:31 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010101}], 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:08:31 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="042e0440"], 0x0, 0x0, 0x0}) [ 1015.872867][T19805] binder: 19802:19805 unknown command 1074030852 [ 1015.892780][T19805] binder: 19802:19805 ioctl c0306201 20000400 returned -22 [ 1015.943921][T19809] binder: 19808:19809 ioctl c0306201 20000400 returned -14 21:08:32 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02630440"], 0x0, 0x0, 0x0}) 21:08:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="046c0440"], 0x0, 0x0, 0x0}) [ 1015.984568][T19812] binder: 19811:19812 unknown command 1074015748 21:08:32 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x400000, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0x1ea4, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2c100000, 0x3a}}}}, [@NL80211_ATTR_PROBE_RESP={0x652, 0x91, "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"}, @NL80211_ATTR_IE_PROBE_RESP={0xc, 0x7f, [@cf={0x4, 0x6, {0x20, 0x6, 0x200, 0x86}}]}, @NL80211_ATTR_PROBE_RESP={0x6ee, 0x91, "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"}, @NL80211_ATTR_IE_PROBE_RESP={0x148, 0x7f, [@chsw_timing={0x68, 0x4, {0x6}}, @cf={0x4, 0x6, {0x1, 0x3f, 0x8, 0x1}}, @rann={0x7e, 0x15, {{0x0, 0x35}, 0x3, 0x4, @device_a, 0xfffffffa, 0x5d}}, @tim={0x5, 0xd4, {0x1f, 0x30, 0x20, "23c0983b7e9b3abbe4ca55de246f9b5c92d83bd3c2a37e991a2ba58005d4ca7f50d5d9e21e38b0ad87bfadd6ea081d9680b1a4b5c13b8f8ba3ac6f4af4b7aa3bcf13c3f9ce65cede8d2c78b21e22528b6d52671a3b6eaacff81a521c04bb12235bb4541c95005a777519febc2da3799e591af3746d9f47ab5f7e13e6bf50ff88835f3be1a36353fb65b46772e035f7b80d3a1f34adad9478ae0183583546715e49c82c8e852332a3ebd7e4597c78de1b2d7763b73846502b99d582c2f9f8b2537b573f1dd5f0cff98fb214aa96e3f53f47"}}, @random_vendor={0xdd, 0x44, "0de101aa1e12cd769f5911c9e804fd7a262f53d8ea09033d81a32aeeb9c5e84aec2d7d657138c8eb8750e0ec3e6715be142500b338380ed754941806ffb9b7794d59160e"}, @challenge={0x10, 0x1, 0x24}]}, @NL80211_ATTR_PROBE_RESP={0x6b1, 0x91, "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"}, @NL80211_ATTR_IE={0xa8, 0x2a, [@preq={0x82, 0x46, @not_ext={{0x1, 0x1}, 0xe, 0x3, 0x100, @broadcast, 0x2, "", 0x0, 0x4, 0x4, [{{0x0, 0x0, 0x1}, @broadcast, 0x1}, {{0x1, 0x0, 0x1}, @broadcast, 0x800}, {{0x1, 0x0, 0x1}, @broadcast, 0xd6c}, {{0x0, 0x0, 0x1}, @broadcast, 0x6}]}}, @ssid={0x0, 0x13, @random="98881e61aac69872c613e0e3edc4d5e8aa2237"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x0, 0x7}}, @perr={0x84, 0x2, {0x5}}, @perr={0x84, 0x22, {0x0, 0x2, [@not_ext={{}, @broadcast, 0x1, "", 0x12}, @ext={{}, @broadcast, 0x6, @device_b, 0x35}]}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @peer_mgmt={0x75, 0x14, {0x1, 0x2, @void, @void, @val="296517ff1573ecfc5bf8dcd2156120f7"}}]}, @NL80211_ATTR_PROBE_RESP={0x888, 0x91, "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"}]}, 0x1ea4}, 0x1, 0x0, 0x0, 0x400800c}, 0x20000000) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1001) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r4, 0x1e, 0x0, 0x7, &(0x7f0000000080)=[0x0], 0x1}, 0x20) [ 1016.025874][T19812] binder: 19811:19812 ioctl c0306201 20000400 returned -22 [ 1016.048855][T19817] binder: BC_ACQUIRE_RESULT not supported [ 1016.062831][T19818] binder: 19816:19818 unknown command 1074031620 [ 1016.077163][T19817] binder: 19815:19817 ioctl c0306201 20000400 returned -22 [ 1016.086094][T19818] binder: 19816:19818 ioctl c0306201 20000400 returned -22 21:08:32 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02630440"], 0x0, 0x0, 0x0}) 21:08:32 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04300440"], 0x0, 0x0, 0x0}) [ 1016.134890][T19822] binder: 19820:19822 ioctl c0306201 20000400 returned -14 21:08:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="046f0440"], 0x0, 0x0, 0x0}) 21:08:32 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x48000, 0x0) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000040)) [ 1016.218879][T19827] binder: BC_ACQUIRE_RESULT not supported [ 1016.234508][T19828] binder: 19826:19828 unknown command 1074016260 [ 1016.242428][T19827] binder: 19825:19827 ioctl c0306201 20000400 returned -22 [ 1016.265176][T19828] binder: 19826:19828 ioctl c0306201 20000400 returned -22 [ 1016.287258][T19832] binder: 19829:19832 unknown command 1074032388 [ 1016.293849][T19831] binder: 19830:19831 ioctl c0306201 20000400 returned -14 [ 1016.310240][T19832] binder: 19829:19832 ioctl c0306201 20000400 returned -22 21:08:32 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02630440"], 0x0, 0x0, 0x0}) 21:08:32 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="044c0440"], 0x0, 0x0, 0x0}) 21:08:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04700440"], 0x0, 0x0, 0x0}) [ 1016.401183][T19839] binder: BC_ACQUIRE_RESULT not supported [ 1016.419286][T19840] binder: 19838:19840 unknown command 1074023428 [ 1016.419851][T19839] binder: 19837:19839 ioctl c0306201 20000400 returned -22 [ 1016.452459][T19840] binder: 19838:19840 ioctl c0306201 20000400 returned -22 [ 1016.470722][T19843] binder: 19841:19843 unknown command 1074032644 [ 1016.486547][T19843] binder: 19841:19843 ioctl c0306201 20000400 returned -22 21:08:32 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f00000001c0)={'ah\x00'}, &(0x7f0000000200)=0x1e) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700e800"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r6, 0x10, 0x70bd28, 0x25dfdbfe, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x7d2f1f811acd5430}}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0) 21:08:32 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02630440"], 0x0, 0x0, 0x0}) 21:08:32 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04580440"], 0x0, 0x0, 0x0}) 21:08:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04730440"], 0x0, 0x0, 0x0}) [ 1016.610151][T19853] binder: 19849:19853 unknown command 1074026500 [ 1016.616287][T19854] binder: BC_ACQUIRE_RESULT not supported [ 1016.623976][T19850] binder: 19847:19850 ioctl c0306201 20000400 returned -14 [ 1016.627395][T19855] binder: 19851:19855 unknown command 1074033412 [ 1016.637992][T19850] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1016.641049][T19853] binder: 19849:19853 ioctl c0306201 20000400 returned -22 [ 1016.660174][T19855] binder: 19851:19855 ioctl c0306201 20000400 returned -22 [ 1016.665106][T19854] binder: 19848:19854 ioctl c0306201 20000400 returned -22 21:08:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04740440"], 0x0, 0x0, 0x0}) [ 1016.734446][T19859] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 21:08:32 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04640440"], 0x0, 0x0, 0x0}) 21:08:32 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02630440"], 0x0, 0x0, 0x0}) 21:08:32 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x30) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r3, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1016.776029][T19866] binder: 19865:19866 unknown command 1074033668 [ 1016.812718][T19866] binder: 19865:19866 ioctl c0306201 20000400 returned -22 [ 1016.825648][T19870] binder: BC_ACQUIRE_RESULT not supported [ 1016.834553][T19869] binder: 19867:19869 unknown command 1074029572 [ 1016.853629][T19870] binder: 19868:19870 ioctl c0306201 20000400 returned -22 [ 1016.858098][T19869] binder: 19867:19869 ioctl c0306201 20000400 returned -22 [ 1016.875123][T19874] binder: 19871:19874 ioctl c0306201 20000400 returned -14 21:08:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04750440"], 0x0, 0x0, 0x0}) 21:08:32 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02630440"], 0x0, 0x0, 0x0}) 21:08:32 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04680440"], 0x0, 0x0, 0x0}) 21:08:33 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f00000000c0)=@v3={0x3000000, [{0x5, 0xf8000000}, {0x100, 0x7f}], r4}, 0x18, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1016.963685][T19878] binder: 19877:19878 unknown command 1074033924 [ 1016.984605][T19878] binder: 19877:19878 ioctl c0306201 20000400 returned -22 [ 1016.987354][T19882] binder: BC_ACQUIRE_RESULT not supported [ 1017.016345][T19882] binder: 19879:19882 ioctl c0306201 20000400 returned -22 [ 1017.027684][T19885] binder: 19880:19885 unknown command 1074030596 [ 1017.034389][T19886] binder: 19884:19886 ioctl c0306201 20000400 returned -14 21:08:33 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02630440"], 0x0, 0x0, 0x0}) [ 1017.069343][T19885] binder: 19880:19885 ioctl c0306201 20000400 returned -22 21:08:33 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04780440"], 0x0, 0x0, 0x0}) 21:08:33 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04690440"], 0x0, 0x0, 0x0}) [ 1017.133527][T19891] binder: BC_ACQUIRE_RESULT not supported [ 1017.160931][T19891] binder: 19890:19891 ioctl c0306201 20000400 returned -22 21:08:33 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02630440"], 0x0, 0x0, 0x0}) [ 1017.189344][T19894] binder: 19892:19894 unknown command 1074034692 [ 1017.200024][T19895] binder: 19893:19895 unknown command 1074030852 [ 1017.208813][T19894] binder: 19892:19894 ioctl c0306201 20000400 returned -22 [ 1017.221354][T19895] binder: 19893:19895 ioctl c0306201 20000400 returned -22 21:08:33 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$can_raw(0x1d, 0x3, 0x1) r3 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x6, &(0x7f0000ffd000/0x1000)=nil, 0x3) r4 = openat$cgroup_type(r2, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) ioctl(r4, 0xffffffff, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000007, 0x810, r3, 0x5041e000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$DRM_IOCTL_GEM_CLOSE(r8, 0x40086409, &(0x7f00000000c0)) ioctl$KVM_SET_FPU(r6, 0x41a0ae8d, &(0x7f0000000440)={[], 0x3ff, 0x1, 0xee, 0x0, 0x8000, 0x6000, 0x4, [], 0x6}) 21:08:33 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="046c0440"], 0x0, 0x0, 0x0}) 21:08:33 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="047a0440"], 0x0, 0x0, 0x0}) [ 1017.293820][T19901] binder: BC_ACQUIRE_RESULT not supported [ 1017.316769][T19901] binder: 19899:19901 ioctl c0306201 20000400 returned -22 [ 1017.325883][T19903] binder: 19900:19903 ioctl c0306201 20000400 returned -14 [ 1017.364817][T19905] binder: 19902:19905 unknown command 1074031620 [ 1017.381112][T19908] binder: 19907:19908 unknown command 1074035204 [ 1017.390914][T19905] binder: 19902:19905 ioctl c0306201 20000400 returned -22 21:08:33 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02630440"], 0x0, 0x0, 0x0}) [ 1017.416656][T19908] binder: 19907:19908 ioctl c0306201 20000400 returned -22 21:08:33 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) 21:08:33 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630240"], 0x0, 0x0, 0x0}) 21:08:33 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="046f0440"], 0x0, 0x0, 0x0}) [ 1017.473621][T19912] binder: BC_ACQUIRE_RESULT not supported [ 1017.479351][T19912] binder: 19910:19912 ioctl c0306201 20000400 returned -22 [ 1017.535960][T19917] binder: 19915:19917 unknown command 1073898244 [ 1017.544104][T19917] binder: 19915:19917 ioctl c0306201 20000400 returned -22 [ 1017.561714][T19916] binder: 19914:19916 ioctl c0306201 20000400 returned -14 [ 1017.572924][T19919] binder: 19918:19919 unknown command 1074032388 21:08:33 executing program 2: syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02630440"], 0x0, 0x0, 0x0}) [ 1017.592238][T19919] binder: 19918:19919 ioctl c0306201 20000400 returned -22 21:08:33 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCMGET(r4, 0x5415, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:08:33 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04700440"], 0x0, 0x0, 0x0}) 21:08:33 executing program 2: syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02630440"], 0x0, 0x0, 0x0}) 21:08:33 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630340"], 0x0, 0x0, 0x0}) [ 1017.751404][T19927] binder: 19926:19927 ioctl c0306201 20000400 returned -14 [ 1017.789899][T19932] binder: 19931:19932 unknown command 1073963780 [ 1017.800286][T19934] binder: 19930:19934 unknown command 1074032644 [ 1017.826566][T19932] binder: 19931:19932 ioctl c0306201 20000400 returned -22 [ 1017.826584][T19934] binder: 19930:19934 ioctl c0306201 20000400 returned -22 21:08:33 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$KVM_SET_XSAVE(r3, 0x5000aea5, &(0x7f0000000440)={[0x5d, 0x2, 0xfff, 0x1ff, 0x4, 0x7319, 0xfcf1, 0xff, 0xfffff79f, 0x81, 0x1ff, 0xffff, 0x5, 0x2b35, 0x3f, 0x8, 0x0, 0x10001, 0x8001, 0x0, 0xffff042e, 0x6, 0x4, 0x0, 0x7, 0x1, 0x5, 0x7, 0x4, 0xa2f, 0x6, 0x7, 0x3, 0x2, 0xaa7, 0x2, 0x9, 0xd9, 0x6, 0x4, 0x0, 0x0, 0x5, 0x7fffffff, 0x0, 0xff, 0x81, 0x1000, 0xfffffff8, 0x40, 0x3994, 0x8, 0x17, 0x0, 0x7, 0x10000, 0x0, 0xc849, 0x9, 0x4d1d, 0x6, 0x6, 0x20, 0x7e, 0xff, 0x2, 0x6, 0x1, 0x2, 0x6, 0x5, 0x7, 0x4, 0x5, 0x0, 0x6, 0x5, 0x1f, 0x1, 0x2bf, 0x2, 0x5, 0x7, 0x7, 0xfffffff9, 0x2, 0x5, 0x3ff, 0xf0d, 0x7f, 0x5, 0x7ff, 0x6, 0x80, 0x3ff, 0x7, 0x4, 0x8, 0x200, 0x7fff, 0x6, 0x3, 0x8, 0x6, 0x1, 0x7fffffff, 0xf6, 0x2, 0xfa8, 0x9, 0x9, 0x6, 0x77f, 0xeb, 0x1, 0x7, 0x5, 0xbe, 0x3, 0x4, 0x4, 0xfffffffe, 0x695, 0x3, 0x1000, 0x6, 0x85, 0x2, 0x4, 0x1, 0xffffff80, 0x8, 0x5, 0x1f, 0x7, 0x7, 0x7fff, 0x7, 0xffff, 0x0, 0x1f, 0x0, 0x7fff, 0x4, 0x8, 0x6, 0x1, 0x3, 0x4, 0xd99d, 0x7, 0xfff, 0x2, 0x7f, 0x4, 0x4, 0x46, 0x1, 0x6, 0x9c2d, 0x8, 0x3, 0x80, 0x8, 0x1, 0x80a9, 0x1, 0x3, 0x802, 0x48d7, 0x401, 0x9, 0x8, 0x3, 0x60d, 0x6, 0x2, 0x800, 0x8, 0xbc, 0xf7, 0x9, 0x9, 0x9, 0x800, 0x5, 0x3, 0x8a, 0x1, 0x5, 0x100, 0x1, 0x4, 0x101, 0x81, 0x6, 0x6, 0x0, 0x9, 0x1, 0x6, 0x0, 0x2, 0x80, 0x68, 0x0, 0x1, 0x2e, 0x0, 0x7, 0xfffffff9, 0x5, 0xb2, 0x800, 0xf7000000, 0x401, 0x6, 0x2, 0x81, 0xffff, 0x200, 0x2, 0xff00, 0x0, 0x8, 0x3ff, 0x3, 0x1, 0xaf, 0x8001, 0x0, 0x0, 0x7, 0x7, 0x1, 0x6, 0x40, 0xd9, 0x8, 0x1ff, 0x8, 0x1, 0x7, 0x3, 0x7b0934a8, 0x80, 0x5, 0xff, 0x1, 0x7ff, 0x5ef, 0x1ff, 0xb0, 0xf362, 0x6, 0x5, 0x2, 0x10000, 0xc25, 0xd8, 0x1ff, 0x3, 0x6, 0x0, 0x0, 0x8000, 0xf1, 0x8000, 0x12000, 0xffffffff, 0x7, 0x800, 0x0, 0x2, 0x1ff, 0x548, 0x7f, 0xccaa, 0x2, 0x9, 0x8, 0x6, 0xdb5, 0x9, 0x81, 0x4, 0x60, 0x5, 0x8000, 0x20, 0x7ff, 0x80, 0x7fffffff, 0x1000, 0x2, 0x5, 0x7acf, 0x4, 0xff, 0xf0, 0x3, 0x80, 0x7, 0x1, 0xff, 0x1000, 0x1, 0x1000, 0x5, 0x7, 0x0, 0x2, 0x7, 0x401, 0x6, 0x8, 0x5, 0xfffff273, 0x20, 0xfffffff9, 0x8, 0x81, 0xb8f8, 0x100, 0x0, 0x1, 0x6, 0xfffffff9, 0x2, 0x9, 0x0, 0x0, 0x4, 0x0, 0x3, 0xf2, 0x3, 0x5, 0x200, 0x2, 0x894, 0x3, 0x4, 0x5, 0x100, 0x76570a71, 0x2, 0xef21, 0x8, 0x19, 0x4, 0x804, 0x3ba, 0x8, 0x512, 0x0, 0xfff, 0x8, 0x31d07034, 0xa9f, 0x800, 0x9, 0x3, 0xbc, 0x2f97, 0x0, 0x3, 0x5, 0xe79, 0x0, 0x400, 0x5, 0x3, 0x1, 0x3, 0x200, 0x8, 0x4, 0x1, 0x8, 0x81, 0x4, 0x0, 0xb9, 0x962, 0x6, 0x7fff, 0x2, 0x0, 0x7, 0x7, 0x8, 0x8001, 0x1ff, 0x8, 0x4, 0x796f, 0x5, 0x4, 0x7ff, 0x7, 0x8000, 0x3, 0xfffffffc, 0x5, 0x128, 0x4, 0x10001, 0x100, 0x5, 0x8001, 0x0, 0x1, 0x8000, 0x100, 0x1, 0x9, 0x3, 0x7, 0x7f, 0x10001, 0x2, 0x7, 0x99, 0x2, 0x38, 0x5, 0x10001, 0xffffffff, 0xffffabc6, 0x3c, 0x7, 0x4, 0x4dd3, 0x0, 0x4, 0x5cd, 0x3f, 0xc1c, 0x4, 0x5, 0x101, 0x3, 0x3f, 0x7ff, 0x7, 0x1, 0x200, 0x9, 0x6, 0x5, 0x7, 0x1f, 0x9, 0x5, 0x0, 0x1, 0x3, 0x0, 0x400, 0x80000001, 0x0, 0x7, 0x8001, 0x1, 0x8, 0x6, 0x20, 0x7, 0x6, 0x0, 0x4, 0x8, 0x1ff, 0x9, 0x0, 0x5, 0x401, 0x2, 0xffffffff, 0x707aca41, 0x1, 0xfffffff8, 0x4, 0x5, 0xb7e, 0x3, 0x5, 0xbb, 0x5, 0x3, 0x6, 0x3, 0x3, 0xffffff80, 0x74, 0x6298, 0x8, 0x1, 0xf6d, 0x2, 0x9, 0x1000, 0x1000, 0x9, 0x1f, 0x9, 0x1, 0xf9e, 0xffff, 0x0, 0x6b92, 0x3ff, 0x1, 0x5, 0xb9, 0x6, 0x81, 0x6, 0x7fff, 0x8, 0xff, 0x5, 0x1, 0x1, 0x7f, 0x7fffffff, 0x7f, 0xffff, 0x1, 0x4, 0x8001, 0x2, 0x2, 0x8, 0x10000, 0x0, 0xffffffff, 0x3, 0x7, 0xfff, 0x5, 0x2, 0xa798, 0xff, 0xfff, 0x38, 0x3f, 0x5, 0x0, 0x80000001, 0x0, 0x2, 0x6, 0xff, 0x4e02, 0x200, 0x7, 0x9, 0x7399, 0x1, 0x80, 0x1, 0x5, 0x1, 0x7, 0x1f, 0x9, 0x1, 0x1e78, 0x4, 0xfffff69d, 0x800, 0x7fff, 0x101, 0x7fffffff, 0x401, 0x7, 0x3, 0x8, 0x7f, 0x0, 0x81, 0x3, 0xffffffff, 0x7, 0x6, 0x5, 0x101, 0x1f, 0x100, 0x2, 0x88a, 0x3ff, 0x1ff, 0x80, 0x0, 0xb6, 0x24b, 0x7f, 0x1, 0x0, 0x9, 0x4, 0xbec1, 0x0, 0x80, 0x1ff, 0x7, 0x0, 0x4, 0x5, 0xffffffff, 0x8000, 0x3, 0xffffffff, 0x8, 0x2, 0x1, 0xffffffff, 0x10001, 0x14, 0x81, 0x1, 0x800, 0x2, 0x14d, 0x8, 0x0, 0x3, 0x80e, 0x0, 0x3, 0x3ff, 0x800, 0x8, 0xff, 0xfa, 0x59a1, 0x6, 0x521b, 0x9, 0x20004000, 0x42, 0x2, 0xffffffc0, 0x1ff, 0x4, 0xfb47, 0xfd, 0x1, 0x4, 0x5, 0x1ff, 0x400, 0x6, 0xfffffff7, 0x200, 0x8, 0xffffffff, 0x3, 0xf42f, 0x8001, 0x7, 0x3ff, 0xfff, 0x2, 0x80000000, 0x81, 0x1, 0x41, 0x9, 0x401, 0xfffffa3a, 0xffff, 0x53e3, 0x4, 0x6, 0x9, 0xff, 0x1, 0x5, 0x3, 0x5, 0x0, 0x1a, 0x9, 0x25, 0x7f, 0x5, 0x3, 0x9, 0x10, 0x1, 0x80000001, 0x9, 0x3, 0x91, 0x3, 0x2, 0xfff, 0xffffff3a, 0x2, 0x1a7, 0x800, 0x4, 0x81, 0x1, 0x8000, 0x903, 0x4, 0xfff, 0x40, 0x8, 0x7f, 0x0, 0x0, 0x9, 0x0, 0xe9ef, 0x4, 0x1c6, 0xa185, 0x800, 0x8, 0x100, 0x1f, 0x7fffffff, 0x8f9, 0xd17, 0x2, 0x9, 0xa1f1, 0x9, 0x3, 0x4, 0x80000000, 0x10001, 0x9, 0x3, 0x80000000, 0x0, 0x80, 0x10001, 0x2ae61106, 0x800, 0x2ff59fb, 0x10000, 0x9, 0x7e7f1bf9, 0x1f, 0x3ff, 0x3, 0x6, 0xd1e, 0x400, 0x3ff, 0x7, 0x134, 0x3, 0x5, 0x9, 0x401, 0x200, 0x10001, 0x1, 0x1, 0x0, 0x1ff, 0x1000, 0x9, 0x5, 0x1, 0x0, 0x7, 0x2, 0x7fffffff, 0x2, 0x3, 0x0, 0x0, 0x6, 0x7ff, 0x400, 0x7, 0xc2, 0x5, 0x0, 0xad, 0x7, 0x1000, 0x6, 0x400, 0x5, 0x0, 0x4, 0xf9, 0x3, 0x1, 0x8, 0x88, 0x1ff, 0x9, 0x5, 0x6, 0x4, 0x3, 0x5c4, 0x1, 0x6, 0x2, 0xa5, 0x0, 0x7, 0xa78, 0x0, 0x3, 0x3, 0xfffffffe, 0x5, 0x400, 0x81, 0x80000000, 0x6, 0x7, 0x40, 0x3, 0xab8, 0x101, 0x4, 0x1, 0x6, 0xffffffff, 0xfffffffc, 0x5168, 0x101, 0x7fffffff, 0xfffeffff, 0x40, 0x7fff, 0x3, 0x3ff, 0x1, 0x9, 0xffff, 0x9, 0x3f, 0x7, 0x1f, 0xff, 0xdce, 0x5, 0x8, 0x427, 0x4, 0x3ff, 0x2, 0x62, 0x4c6, 0x0, 0xffff0000, 0x0, 0x4, 0x2, 0x7fff, 0xda0f, 0x0, 0x9, 0x2, 0x3, 0x9, 0x3, 0x0, 0x0, 0x100, 0xffffff00, 0x400, 0x2, 0x3, 0x98, 0x9f, 0x800, 0xb363, 0x8, 0x3f, 0x8, 0x7, 0x6, 0x7, 0x8, 0x9, 0x7f, 0x0, 0x1, 0x0, 0x10001, 0x3, 0x10000, 0x6, 0x552, 0x401, 0x2, 0x6, 0x647713ad, 0x93ae, 0x21, 0x2, 0x3, 0x0, 0x8, 0x7, 0x5, 0x200, 0x4, 0xe1f, 0xffffff01, 0x9, 0x200, 0x2, 0xfffffffe, 0x578, 0x46, 0x6, 0x7, 0x7, 0x7, 0xaa1, 0x800, 0x101, 0x1ff, 0x20, 0x1, 0x1000000, 0x100, 0x80, 0x7, 0x9, 0xfe07, 0x6, 0xd57, 0x5, 0x9, 0x8, 0x8, 0x4, 0x8f, 0xff, 0xa3f, 0x2, 0x0, 0x6, 0xeb, 0x80000000, 0x600, 0x5, 0xfffffff8, 0x1, 0x8, 0x0, 0x3b, 0x2, 0x1, 0x4, 0x5, 0xffff, 0x244f6d5d, 0x1, 0xffffffff, 0x9, 0xec08, 0x20, 0x0, 0x7, 0x5, 0x1000, 0x3ff, 0x8000, 0x1000, 0x3, 0x8, 0x5, 0x5, 0x8, 0x6, 0x80000001, 0x2, 0x101, 0x9, 0x23d, 0x28db528a, 0x6, 0x6fb4, 0x101, 0x9, 0x200, 0x7, 0xfffffffe, 0x800, 0xfffff65e, 0x0, 0x6, 0x26a, 0x8, 0x0, 0x1, 0x52b, 0x5, 0x81, 0x6, 0x9, 0x6, 0x7, 0x0, 0x5, 0x5, 0x4, 0x1000, 0x81, 0x4, 0x1, 0x1f, 0xffffffff, 0x8, 0x10001]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:08:33 executing program 2: syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02630440"], 0x0, 0x0, 0x0}) 21:08:33 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630540"], 0x0, 0x0, 0x0}) 21:08:33 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04730440"], 0x0, 0x0, 0x0}) 21:08:34 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 1017.944318][T19944] binder: 19941:19944 unknown command 1074094852 [ 1017.955042][T19942] binder: 19939:19942 ioctl c0306201 20000400 returned -14 [ 1017.966514][T19944] binder: 19941:19944 ioctl c0306201 20000400 returned -22 [ 1018.018826][T19947] binder: 19945:19947 unknown command 1074033412 21:08:34 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SOUND_PCM_READ_BITS(r2, 0x80045005, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f0000000000)={0x9dfb, 0x10, [{0x8, 0x1}, {0xc}, {0x2, 0x1}, {0x3}, {0xe}, {0x1, 0x1}, {0x8}, {0x7, 0x1}, {0x9, 0x1}, {0x7}, {0xf, 0x1}, {0x7}, {0x2, 0x1}, {0xf}, {0xc}, {0xa, 0x1}]}) [ 1018.063257][T19950] binder: 19948:19950 ioctl c0306201 0 returned -14 [ 1018.087797][T19947] binder: 19945:19947 ioctl c0306201 20000400 returned -22 21:08:34 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630640"], 0x0, 0x0, 0x0}) 21:08:34 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 1018.125124][T19953] binder: 19952:19953 ioctl c0306201 20000400 returned -14 [ 1018.160084][T19956] binder: 19955:19956 unknown command 1074160388 21:08:34 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04740440"], 0x0, 0x0, 0x0}) [ 1018.182090][T19956] binder: 19955:19956 ioctl c0306201 20000400 returned -22 [ 1018.209967][T19959] binder: 19958:19959 ioctl c0306201 0 returned -14 21:08:34 executing program 4: syz_mount_image$zonefs(&(0x7f0000000000)='zonefs\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x3, &(0x7f00000002c0)=[{&(0x7f0000000080)="305198062f1dc1702419d4834fd59b9d8c3d26c9b453596854de0a0db191675ec036f6a53d8bbf62acfa16b7f4ae5e4788c9e670e04c87d8976ada13d53e7de37ab6c2bfa642ef602c2ee98a848e006bc00d257aeb6f1d29572a06a438fa28a1d7b1c7bb2371be0e5a5aea6da135f77b2da7abf5355c262aedea4eacd3ea5aa1ec7b82d307d06a40a6081e46a0d921b6276cffe3e01a665f4fafc4dfa165c89fb7ac30ba826412019c498f0f11cd6ec441ded9f2c1e1a81ee419b32847b13475752417c5bda4ad95f96663e680be638421fdee35c39cbb7885c6f4cf949fe792ba261b32e37a13e2f6197f1e2653856621ea5199c7bd", 0xf6, 0xfbd}, {&(0x7f0000000180)="ce825e0c957621c1b08a8dd65fa7609a1b0ae6c3a79c4e741e429982dbc7e23186e7f93f7496cb55f25b", 0x2a, 0x1}, {&(0x7f00000001c0)="bf7e80fd2ef2cb07d82f12c34137e49e1703e5c2c9ed514aa18c6a25d602b6b27dd5b68de37528fc643e4e9a470f200d2a6e58a8f100486bf4b50b4c7dd204ccb846585310b9140e66441a815c41db2acbb5534540580a22007d30a346678c16318b5b555b5cf1138142778acf49f840c8e5583504d7bdc8ab512560541f9670818164e4b68f065731bd26d774a789a93bab19cc504adc13fe4267f01d736e956ed1523c26dd291397d40810e512f05e2cbbc0b2f4ff5f6ebabd9626b17aea2f4b09a1", 0xc3, 0x1}], 0x21, &(0x7f0000000480)=ANY=[@ANYBLOB="6578706c696369742d6f70656e2c6572726f72733d7a6f6edbfd5b6594b8c960d90ea2e937cbb4cd32074a842d6f66b1a66aa4d7e04fc1ad7ef3b63d5c0ae9666c696e652c6572726f72733d7a6f6e652d726f2c6572726f72733d7265706169722c6578706c696369742d6f70656e2c6572726f72733d7265706169722c6572726f72733d7a6f6e652d726f2c6575", @ANYRESDEC, @ANYBLOB=',context=user_u,\x00']) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000440)=0x1) 21:08:34 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 21:08:34 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630740"], 0x0, 0x0, 0x0}) [ 1018.262869][T19963] binder: 19961:19963 unknown command 1074033668 [ 1018.276239][T19963] binder: 19961:19963 ioctl c0306201 20000400 returned -22 [ 1018.323764][T19970] binder: 19966:19970 ioctl c0306201 0 returned -14 [ 1018.336267][T19971] binder: 19967:19971 unknown command 1074225924 [ 1018.359074][T19971] binder: 19967:19971 ioctl c0306201 20000400 returned -22 21:08:34 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:08:34 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04750440"], 0x0, 0x0, 0x0}) 21:08:34 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630840"], 0x0, 0x0, 0x0}) [ 1018.442105][T19980] binder: 19978:19980 ioctl c0306201 20000400 returned -14 [ 1018.448882][T19981] binder: 19979:19981 unknown command 1074033924 [ 1018.484024][T19981] binder: 19979:19981 ioctl c0306201 20000400 returned -22 [ 1018.508061][T19983] binder: 19982:19983 unknown command 1074291460 21:08:34 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:08:34 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:08:34 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04780440"], 0x0, 0x0, 0x0}) [ 1018.529496][T19983] binder: 19982:19983 ioctl c0306201 20000400 returned -22 [ 1018.568987][T19987] binder: 19986:19987 ioctl c0306201 20000400 returned -14 [ 1018.587916][T19991] binder: 19988:19991 ioctl c0306201 20000400 returned -14 21:08:34 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630940"], 0x0, 0x0, 0x0}) [ 1018.617875][T19992] binder: 19989:19992 unknown command 1074034692 21:08:34 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x1f, 0x200) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) accept$ax25(r2, &(0x7f0000000040)={{0x3, @rose}, [@remote, @netrom, @default, @null, @null, @null, @netrom]}, &(0x7f00000000c0)=0x48) 21:08:34 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1018.649583][T19992] binder: 19989:19992 ioctl c0306201 20000400 returned -22 [ 1018.682708][T19996] binder: 19994:19996 unknown command 1074356996 [ 1018.700856][T19996] binder: 19994:19996 ioctl c0306201 20000400 returned -22 [ 1018.727181][T20001] binder: 19997:20001 ioctl c0306201 20000400 returned -14 [ 1018.730531][T20000] binder: 19998:20000 ioctl c0306201 20000400 returned -14 21:08:34 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630a40"], 0x0, 0x0, 0x0}) 21:08:34 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2c0000, 0x0) r4 = openat2(r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x2000, 0x11f}, 0x18) ioctl$PPPIOCGFLAGS1(r4, 0x8004745a, &(0x7f00000000c0)) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYBLOB="03000000000000000d000500000000000400000108000000040000000200000001000100004900000000000000000000080000c03f00000002000000ffffffff0800000003000000200000000000000000000000000097fff613f491d536a2f143f21f0000000000c006000000000000003d4e2c9ae729a9d606000000030000000000000000000000000000004cf41217fc4e60e9d2a150e10188394360353869b4cb2ba953ca1b0e57b7f898c835dddc9cf70f2dde38b96eddbc8073ede9bc4611d0bd53858083669c7b4686616ecec41448e9417a8512ff1c30f8053dd4659648b9752784e7c11046"]) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:08:34 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="047a0440"], 0x0, 0x0, 0x0}) [ 1018.816832][T20005] binder: 20004:20005 unknown command 1074422532 [ 1018.831002][T20008] binder: 20006:20008 unknown command 1074035204 [ 1018.850913][T20005] binder: 20004:20005 ioctl c0306201 20000400 returned -22 21:08:34 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0}) [ 1018.864782][T20008] binder: 20006:20008 ioctl c0306201 20000400 returned -22 21:08:34 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630b40"], 0x0, 0x0, 0x0}) [ 1018.890485][T20009] binder: 20007:20009 ioctl c0306201 20000400 returned -14 [ 1018.925596][T20014] binder: 20012:20014 unknown command 0 21:08:34 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630240"], 0x0, 0x0, 0x0}) 21:08:34 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x18}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c0c1}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1018.962327][T20014] binder: 20012:20014 ioctl c0306201 20000400 returned -22 [ 1018.998823][T20017] binder: 20016:20017 unknown command 1074488068 [ 1019.003191][T20020] binder: 20018:20020 ioctl c0306201 20000400 returned -14 [ 1019.018830][T20017] binder: 20016:20017 ioctl c0306201 20000400 returned -22 [ 1019.037045][T20021] binder: 20019:20021 unknown command 1073898244 21:08:35 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'veth1_to_batadv\x00', 0x4}, 0x18) 21:08:35 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0}) [ 1019.064820][T20021] binder: 20019:20021 ioctl c0306201 20000400 returned -22 21:08:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630340"], 0x0, 0x0, 0x0}) 21:08:35 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630c40"], 0x0, 0x0, 0x0}) [ 1019.115835][T20028] binder: 20025:20028 ioctl c0306201 20000400 returned -14 [ 1019.133302][T20029] binder: 20027:20029 unknown command 0 [ 1019.146507][T20029] binder: 20027:20029 ioctl c0306201 20000400 returned -22 [ 1019.202941][T20035] binder: 20032:20035 unknown command 1074553604 [ 1019.217032][T20035] binder: 20032:20035 ioctl c0306201 20000400 returned -22 21:08:35 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0}) 21:08:35 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630d40"], 0x0, 0x0, 0x0}) [ 1019.243960][T20034] binder: 20031:20034 unknown command 1073963780 [ 1019.250306][T20034] binder: 20031:20034 ioctl c0306201 20000400 returned -22 21:08:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630540"], 0x0, 0x0, 0x0}) 21:08:35 executing program 4: syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$UHID_SET_REPORT_REPLY(r3, &(0x7f0000000000)={0xe, {0xa, 0x2, 0x1f, 0xb8, "f19d4b082f76a5c683e59dd1780aeef56b0177f9a633bbba7951e75a9b868d7d970440fae7af9e7f92852853c7cb6acb209652be62ff2cc0d1d9dcf8686c6cf945495dbedc19147785ef86b7a30a5c85c026e2f3f27ad4fd7d9f59976e67fe738205ef27910c9d856159135893c270346c6ab1094550ec4efbe26181c1add67a8add45670a181109d9c21213007012f69e9b2185b7b12c08599cda0029c1d360afd110eccb781e6c3430630916e27295e075f0b617420139"}}, 0xc4) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1019.329951][T20039] binder: 20037:20039 unknown command 0 [ 1019.333812][T20041] binder: 20040:20041 unknown command 1074619140 [ 1019.349836][T20039] binder: 20037:20039 ioctl c0306201 20000400 returned -22 [ 1019.355321][T20041] binder: 20040:20041 ioctl c0306201 20000400 returned -22 21:08:35 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) 21:08:35 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630e40"], 0x0, 0x0, 0x0}) [ 1019.416691][T20046] binder: 20043:20046 unknown command 1074094852 [ 1019.450317][T20046] binder: 20043:20046 ioctl c0306201 20000400 returned -22 [ 1019.486124][T20051] binder: 20048:20051 unknown command 0 [ 1019.505729][T20054] binder: 20053:20054 unknown command 1074684676 [ 1019.508142][T20051] binder: 20048:20051 ioctl c0306201 20000400 returned -22 21:08:35 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000004}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd0, r3, 0x500, 0x70bd2f, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x3a}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x800}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x101}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x200}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x20}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}]]}, 0xd0}, 0x1, 0x0, 0x0, 0x800}, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1019.527880][T20054] binder: 20053:20054 ioctl c0306201 20000400 returned -22 21:08:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630640"], 0x0, 0x0, 0x0}) 21:08:35 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) [ 1019.586828][T20058] binder: 20056:20058 ioctl c0306201 20000400 returned -14 21:08:35 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04631040"], 0x0, 0x0, 0x0}) 21:08:35 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1001) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1019.642446][T20062] binder: 20059:20062 unknown command 1074160388 [ 1019.651790][T20064] binder: 20063:20064 unknown command 0 [ 1019.668709][T20062] binder: 20059:20062 ioctl c0306201 20000400 returned -22 [ 1019.670683][T20064] binder: 20063:20064 ioctl c0306201 20000400 returned -22 21:08:35 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) [ 1019.724029][T20066] binder: 20065:20066 unknown command 1074815748 [ 1019.739289][T20066] binder: 20065:20066 ioctl c0306201 20000400 returned -22 [ 1019.744597][T20068] binder: 20067:20068 ioctl c0306201 20000400 returned -14 21:08:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630740"], 0x0, 0x0, 0x0}) 21:08:35 executing program 4: mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:08:35 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04631140"], 0x0, 0x0, 0x0}) [ 1019.779493][T20072] binder: 20071:20072 unknown command 0 [ 1019.812909][T20072] binder: 20071:20072 ioctl c0306201 20000400 returned -22 [ 1019.853498][T20076] binder: 20075:20076 unknown command 1074225924 [ 1019.870341][T20076] binder: 20075:20076 ioctl c0306201 20000400 returned -22 [ 1019.887285][T20079] binder: 20077:20079 ioctl c0306201 20000400 returned -14 21:08:35 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0263"], 0x0, 0x0, 0x0}) [ 1019.897771][T20080] binder: 20078:20080 unknown command 1074881284 [ 1019.918427][T20080] binder: 20078:20080 ioctl c0306201 20000400 returned -22 21:08:35 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) 21:08:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630840"], 0x0, 0x0, 0x0}) [ 1019.947885][T20085] binder: 20083:20085 unknown command 25346 [ 1019.989349][T20085] binder: 20083:20085 ioctl c0306201 20000400 returned -22 [ 1020.004144][T20088] binder: 20087:20088 ioctl c0306201 20000400 returned -14 21:08:36 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04631240"], 0x0, 0x0, 0x0}) 21:08:36 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0263"], 0x0, 0x0, 0x0}) [ 1020.032297][T20090] binder: 20089:20090 unknown command 1074291460 [ 1020.057944][T20090] binder: 20089:20090 ioctl c0306201 20000400 returned -22 21:08:36 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x29, 0x4, 0xa5, 0x160e563, 0x1, @local, @private1={0xfc, 0x1, [], 0x1}, 0x10, 0x8000, 0x1, 0x4}}) recvfrom$packet(r2, &(0x7f0000000000)=""/14, 0xe, 0x40010113, &(0x7f0000000100)={0x11, 0x8, r3, 0x1, 0x9}, 0x14) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:08:36 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630940"], 0x0, 0x0, 0x0}) [ 1020.097409][T20096] binder: 20093:20096 unknown command 1074946820 [ 1020.112269][T20097] binder: 20094:20097 unknown command 25346 [ 1020.120382][T20096] binder: 20093:20096 ioctl c0306201 20000400 returned -22 [ 1020.135193][T20097] binder: 20094:20097 ioctl c0306201 20000400 returned -22 21:08:36 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04631340"], 0x0, 0x0, 0x0}) 21:08:36 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0263"], 0x0, 0x0, 0x0}) [ 1020.205025][T20105] binder: 20102:20105 unknown command 1074356996 [ 1020.218011][T20105] binder: 20102:20105 ioctl c0306201 20000400 returned -22 [ 1020.245413][T20099] binder: 20098:20099 ioctl c0306201 20000400 returned -14 [ 1020.261904][T20108] binder: 20106:20108 unknown command 1075012356 [ 1020.283693][T20108] binder: 20106:20108 ioctl c0306201 20000400 returned -22 21:08:36 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630a40"], 0x0, 0x0, 0x0}) [ 1020.295628][T20111] binder: 20107:20111 unknown command 25346 [ 1020.311154][T20111] binder: 20107:20111 ioctl c0306201 20000400 returned -22 21:08:36 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630402"], 0x0, 0x0, 0x0}) [ 1020.357434][T20114] binder: 20113:20114 unknown command 1074422532 [ 1020.372879][T20114] binder: 20113:20114 ioctl c0306201 20000400 returned -22 21:08:36 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="026304"], 0x0, 0x0, 0x0}) [ 1020.397672][T20117] binder: 20115:20117 unknown command 33841924 21:08:36 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630b40"], 0x0, 0x0, 0x0}) [ 1020.448786][T20117] binder: 20115:20117 ioctl c0306201 20000400 returned -22 [ 1020.480261][T20120] binder: 20119:20120 unknown command 287490 21:08:36 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="046304f8"], 0x0, 0x0, 0x0}) [ 1020.500895][T20120] binder: 20119:20120 ioctl c0306201 20000400 returned -22 [ 1020.504199][T20123] binder: 20122:20123 unknown command 1074488068 [ 1020.531983][T20123] binder: 20122:20123 ioctl c0306201 20000400 returned -22 21:08:36 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="026304"], 0x0, 0x0, 0x0}) 21:08:36 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630c40"], 0x0, 0x0, 0x0}) [ 1020.566728][T20125] binder: 20124:20125 unknown command -133930236 [ 1020.593815][T20125] binder: 20124:20125 ioctl c0306201 20000400 returned -22 21:08:36 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x2, 0x0, 0x0}) [ 1020.643135][T20129] binder: 20128:20129 unknown command 287490 [ 1020.662133][T20129] binder: 20128:20129 ioctl c0306201 20000400 returned -22 [ 1020.683333][T20132] binder: 20131:20132 unknown command 1074553604 [ 1020.695122][T20132] binder: 20131:20132 ioctl c0306201 20000400 returned -22 [ 1020.709316][T20134] binder: 20133:20134 unknown command 0 [ 1020.721440][T20134] binder: 20133:20134 ioctl c0306201 20000400 returned -22 21:08:37 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x2, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4a, 0x20040841) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x6}, &(0x7f00000000c0)=0x8) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4), 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x7b, &(0x7f0000000040)={r5}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000100)={r3, 0x1, 0x1, 0x9, 0x401, 0x6, 0x401, 0x40, {r5, @in6={{0xa, 0x4e24, 0x4, @local, 0x8000}}, 0x10000, 0x7, 0x1, 0x1, 0x4}}, &(0x7f00000001c0)=0xb0) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0xc03) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:08:37 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x3, 0x0, 0x0}) 21:08:37 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="026304"], 0x0, 0x0, 0x0}) 21:08:37 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630d40"], 0x0, 0x0, 0x0}) [ 1021.032546][T20143] binder: 20141:20143 ioctl c0306201 20000400 returned -14 [ 1021.057258][T20144] binder: 20142:20144 unknown command 0 [ 1021.065041][T20144] binder: 20142:20144 ioctl c0306201 20000400 returned -22 [ 1021.091720][T20149] binder: 20146:20149 unknown command 287490 [ 1021.097772][T20149] binder: 20146:20149 ioctl c0306201 20000400 returned -22 [ 1021.099337][T20148] binder: 20147:20148 unknown command 1074619140 21:08:37 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x4, 0x0, 0x0}) 21:08:37 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000680)=0x1) 21:08:37 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f00000000c0)={0x10001, 0x6, 0x3, 0x1ff, 0x3, [0x1, 0x80000001, 0x7fffffff], [0x7, 0x2, 0x3, 0x82], [0x4, 0xffffffff, 0xd9dd, 0x5], [0x10000, 0x7030, 0x1f, 0x3]}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x1000008) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="483417a43f78a40000001000050700000800080b000000000000", @ANYRESHEX=r0, @ANYRESOCT=r1], 0x48}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000878dd14245460096b2ef00000f00000008002b0000000000ed3eeee16d9a1fcc4a199300b040ad9ec91d04b04bf90880c173e9b7eb1d8dfd262690a0", @ANYRES32=r8, @ANYBLOB="b61ad290ba7d3b8c56e1e3b08169937f250877a53934dd514127f19c07369f"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="08bc53002bbd7000fbdbdf250c00000005002f000000"], 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x4000) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=""/104, &(0x7f0000000080)=0x68) [ 1021.146581][T20148] binder: 20147:20148 ioctl c0306201 20000400 returned -22 [ 1021.182472][T20152] binder: 20151:20152 unknown command 0 21:08:37 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630e40"], 0x0, 0x0, 0x0}) [ 1021.201089][T20152] binder: 20151:20152 ioctl c0306201 20000400 returned -22 21:08:37 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x5, 0x0, 0x0}) 21:08:37 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0xffff, 0x0, 0x0, 0x0) [ 1021.247623][T20159] binder: 20155:20159 ioctl c0306201 20000400 returned -14 [ 1021.307628][T20162] binder: 20161:20162 unknown command 1074684676 [ 1021.331404][T20162] binder: 20161:20162 ioctl c0306201 20000400 returned -22 [ 1021.355965][T20167] binder: 20165:20167 unknown command 0 21:08:37 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002340)=[{&(0x7f00000012c0)="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", 0x801}], 0x1, &(0x7f00000023c0)=[@rights], 0x10}, 0x0) 21:08:37 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f0000000000)=""/177) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_G_SELECTION(r4, 0xc040563d, &(0x7f00000000c0)={0x1, 0x0, 0x101, 0x6, {0x60b, 0x6, 0xd10, 0x1}}) 21:08:37 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04631040"], 0x0, 0x0, 0x0}) [ 1021.378227][T20167] binder: 20165:20167 ioctl c0306201 20000400 returned -22 21:08:37 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x6, 0x0, 0x0}) 21:08:37 executing program 2: setitimer(0x1, &(0x7f0000000000)={{}, {0x1}}, 0x0) [ 1021.484064][T20176] binder: 20173:20176 ioctl c0306201 20000400 returned -14 [ 1021.493740][T20178] binder: 20175:20178 unknown command 1074815748 [ 1021.517090][T20180] binder: 20177:20180 unknown command 0 [ 1021.522362][T20178] binder: 20175:20178 ioctl c0306201 20000400 returned -22 21:08:37 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04631140"], 0x0, 0x0, 0x0}) 21:08:37 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000002480)=[{0x0}, {&(0x7f0000000100)="13", 0x1}, {&(0x7f00000001c0)="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", 0xf45}], 0x3) 21:08:37 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r3, 0x40044145, 0x0) vmsplice(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="c27097", 0x3}], 0x1, 0x2) [ 1021.574884][T20180] binder: 20177:20180 ioctl c0306201 20000400 returned -22 21:08:37 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x7, 0x0, 0x0}) 21:08:37 executing program 2: madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xb) [ 1021.665611][T20191] binder: 20189:20191 ioctl c0306201 20000400 returned -14 [ 1021.677119][T20192] binder: 20187:20192 unknown command 1074881284 [ 1021.705139][T20192] binder: 20187:20192 ioctl c0306201 20000400 returned -22 21:08:37 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet(0x2, 0x6, 0xce) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000000)={0x1, 0xffff498a, 0x0, 0x9, 0xffff6f0e}, 0x14) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:08:37 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) clock_gettime(0x0, &(0x7f0000000000)) [ 1021.734767][T20196] binder: 20194:20196 unknown command 0 [ 1021.758391][T20196] binder: 20194:20196 ioctl c0306201 20000400 returned -22 21:08:37 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04631240"], 0x0, 0x0, 0x0}) 21:08:37 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x8, 0x0, 0x0}) 21:08:37 executing program 2: clock_gettime(0x7, 0x0) [ 1021.865671][T20207] binder: 20204:20207 unknown command 1074946820 [ 1021.892322][T20207] binder: 20204:20207 ioctl c0306201 20000400 returned -22 [ 1021.907212][T20203] binder: 20201:20203 ioctl c0306201 20000400 returned -14 [ 1021.929864][T20212] binder: 20209:20212 unknown command 0 [ 1021.946905][T20212] binder: 20209:20212 ioctl c0306201 20000400 returned -22 21:08:38 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04631340"], 0x0, 0x0, 0x0}) 21:08:38 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000700)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x1}, 0x8, 0x0, 0x0, &(0x7f0000000640)=[@cred], 0x20}, 0x9) 21:08:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x9, 0x0, 0x0}) 21:08:38 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x40, 0x800) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000040)=@int=0xe6, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1022.057278][T20223] binder: 20222:20223 unknown command 1075012356 [ 1022.079844][T20223] binder: 20222:20223 ioctl c0306201 20000400 returned -22 21:08:38 executing program 2: mmap(&(0x7f0000cc3000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) [ 1022.101062][T20226] binder: 20224:20226 ioctl c0306201 20000400 returned -14 [ 1022.101902][T20228] binder: 20227:20228 unknown command 0 21:08:38 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630402"], 0x0, 0x0, 0x0}) [ 1022.148228][T20228] binder: 20227:20228 ioctl c0306201 20000400 returned -22 21:08:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xa, 0x0, 0x0}) 21:08:38 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x4, 0x7, 0x4, 0x3}) [ 1022.236410][T20236] binder: 20235:20236 unknown command 33841924 [ 1022.255746][T20236] binder: 20235:20236 ioctl c0306201 20000400 returned -22 21:08:38 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x1002, &(0x7f0000000240), 0x4) [ 1022.295324][T20238] binder: 20237:20238 unknown command 0 [ 1022.314238][T20242] binder: 20239:20242 ioctl c0306201 20000400 returned -14 [ 1022.317281][T20238] binder: 20237:20238 ioctl c0306201 20000400 returned -22 21:08:38 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630408"], 0x0, 0x0, 0x0}) 21:08:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xb, 0x0, 0x0}) 21:08:38 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:08:38 executing program 2: nanosleep(&(0x7f0000000000), 0x0) getrlimit(0x0, &(0x7f0000000040)) [ 1022.433112][T20249] binder: 20248:20249 unknown command 134505220 [ 1022.451844][T20249] binder: 20248:20249 ioctl c0306201 20000400 returned -22 [ 1022.469816][T20254] binder: 20250:20254 unknown command 0 21:08:38 executing program 2: select(0x40, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000140)) [ 1022.477818][T20255] binder: 20252:20255 ioctl c0306201 20000400 returned -14 [ 1022.495167][T20254] binder: 20250:20254 ioctl c0306201 20000400 returned -22 21:08:38 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="046304f8"], 0x0, 0x0, 0x0}) 21:08:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xc, 0x0, 0x0}) 21:08:38 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:08:38 executing program 2: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000002480)={0xffffffffffffffff, 0x0, 0x0}, 0x20) [ 1022.618522][T20267] binder: 20262:20267 unknown command -133930236 [ 1022.618963][T20265] binder: 20263:20265 unknown command 0 [ 1022.644704][T20268] binder: 20266:20268 ioctl c0306201 20000400 returned -14 [ 1022.647623][T20267] binder: 20262:20267 ioctl c0306201 20000400 returned -22 [ 1022.666340][T20265] binder: 20263:20265 ioctl c0306201 20000400 returned -22 21:08:38 executing program 2: r0 = msgget$private(0x0, 0x0) msgrcv(r0, &(0x7f0000002a80)={0x0, ""/157}, 0xa5, 0xd6d0c418f59fe7d3, 0x0) msgsnd(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000be6e5d0bc25"], 0x43, 0x0) 21:08:38 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, r0, 0x0) 21:08:38 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x2, 0x0, 0x0}) 21:08:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xd, 0x0, 0x0}) 21:08:38 executing program 4: poll(0x0, 0x0, 0x100) [ 1022.818411][T20281] binder: 20279:20281 unknown command 0 [ 1022.838105][T20281] binder: 20279:20281 ioctl c0306201 20000400 returned -22 [ 1022.859950][T20283] binder: 20280:20283 unknown command 0 21:08:38 executing program 2: nanosleep(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0) 21:08:38 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x3, 0x0, 0x0}) [ 1022.885342][T20283] binder: 20280:20283 ioctl c0306201 20000400 returned -22 21:08:39 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x1004, &(0x7f0000000000), 0x4) 21:08:39 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xe, 0x0, 0x0}) [ 1022.974527][T20292] binder: 20289:20292 unknown command 0 [ 1022.982272][T20292] binder: 20289:20292 ioctl c0306201 20000400 returned -22 21:08:39 executing program 2: perf_event_open$cgroup(&(0x7f0000001380)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 21:08:39 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x4, 0x0, 0x0}) [ 1023.060542][T20297] binder: 20295:20297 unknown command 0 [ 1023.082375][T20297] binder: 20295:20297 ioctl c0306201 20000400 returned -22 21:08:39 executing program 2: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000300)) 21:08:39 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x10, 0x0, 0x0}) [ 1023.172362][T20303] binder: 20301:20303 unknown command 0 [ 1023.192958][T20303] binder: 20301:20303 ioctl c0306201 20000400 returned -22 21:08:39 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)={&(0x7f00000003c0)='\x00'}, 0x10) [ 1023.237496][T20308] binder: 20305:20308 unknown command 0 [ 1023.249675][T20308] binder: 20305:20308 ioctl c0306201 20000400 returned -22 21:08:39 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x5, 0x0, 0x0}) 21:08:39 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000380)={&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @local, 'ip6_vti0\x00'}}, 0xde, &(0x7f0000000340)=[{&(0x7f00000000c0)="41e4e964909bd75c67761258539bb14e1cd1fc5a3c129beb2bb8218e8335ab85ebf0ca26209d5d3cbbcff146a12ed6c8189c9b91f37fa0a7dc2ff21ab31fc42627c6cd22625920848365d8752f0150daa31047f58aa2fad666ec728c255433fee0700ef2728820662034569d8f9451a3841497133c653c2e7b4223d8d7a5596893fdfa", 0x83}, {&(0x7f0000000180)="673203c58c0754373b6d9deb6df2f8b9f54783af27759b7358b2e7e8ea257193487f5f7fe499a7ae2768fe3e634e3a09f39f2247a0b2a753bb1d143fcec40fae4b7fec73d99f", 0x46}, {&(0x7f0000000200)="ab8f44c7f7ae5c93aaff61ab5ac347caee4b1da6d1fc2b3f4ca1da5cc8", 0x1d}, {&(0x7f0000000240)="b7a93f8e9ef40a8df2fe5bfd80a4bbdda17c4e9f5c0f6061e6f3e429d41cee3021b85683f5d529fead53e64efd02c8c81237cf349d88507b378f8ac6b04d2dad3af6932845dcd7127da81e6ebf583d73fba957e243e0bc1ea50b693c6fcbef79adea88ebe9893b56b5b3c1733df33dd283674cb542c70bc240be5f02d6f3fa128d7c73bfecf0d6d1b72429e9a7243ab24770ce42000af8d9c55868f8ac23b3feb669a817dbeffa314878347339de4621ebff96b4d92bd35fa3b752d24d24691e1848df8aeb221265988f581fff267a704fcdedcaaba9f5d05b8e645a952b641f3d73e90fec93e6663fe50991e22ad08d9b8470e1000000000000", 0xfa}], 0x4}, 0x20048085) 21:08:39 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x11, 0x0, 0x0}) 21:08:39 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x9, 0x2, &(0x7f0000000040)=@raw=[@initr0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) [ 1023.375147][T20318] binder: 20313:20318 unknown command 0 [ 1023.390849][T20318] binder: 20313:20318 ioctl c0306201 20000400 returned -22 [ 1023.411828][T20320] binder: 20316:20320 unknown command 0 21:08:39 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0xd}]}}, &(0x7f00000000c0)=""/173, 0x2a, 0xad, 0x1}, 0x20) [ 1023.425233][T20320] binder: 20316:20320 ioctl c0306201 20000400 returned -22 21:08:39 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x8, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:08:39 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x6, 0x0, 0x0}) 21:08:39 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x53}, 0x0) 21:08:39 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x12, 0x0, 0x0}) [ 1023.569598][T20333] binder: 20329:20333 unknown command 0 [ 1023.586619][T20333] binder: 20329:20333 ioctl c0306201 20000400 returned -22 [ 1023.605215][T20334] binder: 20331:20334 unknown command 0 21:08:39 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000003e40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000022600)={&(0x7f0000003e80)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000005c0)=[{0x0}, {0x0, 0xfffffc7f}], 0x2, &(0x7f0000022580)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14}}], 0x28}, 0x0) 21:08:39 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001240)=@bpf_lsm={0x1d, 0x3, &(0x7f00000014c0)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000080)=""/4096, 0x0, 0x17, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1023.628683][T20334] binder: 20331:20334 ioctl c0306201 20000400 returned -22 21:08:39 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 21:08:39 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x13, 0x0, 0x0}) 21:08:39 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x7, 0x0, 0x0}) 21:08:39 executing program 4: socketpair(0x10, 0x2, 0xffffffff, &(0x7f0000000000)) [ 1023.771661][T20345] binder: 20342:20345 unknown command 0 [ 1023.778987][T20347] binder: 20343:20347 unknown command 0 [ 1023.789169][T20345] binder: 20342:20345 ioctl c0306201 20000400 returned -22 21:08:39 executing program 2: bind(0xffffffffffffffff, 0x0, 0x0) [ 1023.815500][T20347] binder: 20343:20347 ioctl c0306201 20000400 returned -22 21:08:39 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x19, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:08:39 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x8, 0x0, 0x0}) 21:08:39 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x25, 0x0, 0x0}) 21:08:39 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x8}]}}, &(0x7f00000000c0)=""/173, 0x2a, 0xad, 0x1}, 0x20) 21:08:40 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x7, 0x0, 0x0, 0x0, 0x10a3, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x40) [ 1023.957536][T20359] binder: 20356:20359 unknown command 0 [ 1023.978420][T20359] binder: 20356:20359 ioctl c0306201 20000400 returned -22 [ 1023.997186][T20362] binder: 20360:20362 unknown command 0 21:08:40 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000bc0)) [ 1024.015007][T20362] binder: 20360:20362 ioctl c0306201 20000400 returned -22 21:08:40 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x9, 0x0, 0x0}) 21:08:40 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x48, 0x0, 0x0}) 21:08:40 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x0, 0xd40}, 0x40) [ 1024.152657][T20375] binder: 20371:20375 unknown command 0 [ 1024.165271][T20376] binder: 20370:20376 unknown command 0 [ 1024.170309][T20375] binder: 20371:20375 ioctl c0306201 20000400 returned -22 21:08:40 executing program 2: bpf$BPF_BTF_LOAD(0x8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 21:08:40 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000001380)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 21:08:40 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x4c, 0x0, 0x0}) [ 1024.205143][T20376] binder: 20370:20376 ioctl c0306201 20000400 returned -22 21:08:40 executing program 4: bpf$BPF_PROG_TEST_RUN(0x22, &(0x7f0000003dc0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003cc0)}, 0x48) 21:08:40 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xa, 0x0, 0x0}) 21:08:40 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x12, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1024.295684][T20385] binder: 20382:20385 unknown command 0 [ 1024.315046][T20385] binder: 20382:20385 ioctl c0306201 20000400 returned -22 21:08:40 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xa, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:08:40 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x5c, 0x0, 0x0}) [ 1024.378239][T20391] binder: 20387:20391 unknown command 0 [ 1024.395858][T20391] binder: 20387:20391 ioctl c0306201 20000400 returned -22 21:08:40 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') 21:08:40 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xb, 0x0, 0x0}) 21:08:40 executing program 4: bpf$BPF_PROG_TEST_RUN(0x23, &(0x7f0000003dc0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003cc0)}, 0x48) [ 1024.503188][T20399] binder: 20394:20399 unknown command 0 [ 1024.508772][T20399] binder: 20394:20399 ioctl c0306201 20000400 returned -22 21:08:40 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x0, 0x4}, 0x40) 21:08:40 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x60, 0x0, 0x0}) [ 1024.559418][T20403] binder: 20402:20403 unknown command 0 [ 1024.581366][T20403] binder: 20402:20403 ioctl c0306201 20000400 returned -22 21:08:40 executing program 4: perf_event_open$cgroup(&(0x7f0000001380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 21:08:40 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xc, 0x0, 0x0}) 21:08:40 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0xac}]}}, &(0x7f00000000c0)=""/173, 0x2a, 0xad, 0x1}, 0x20) 21:08:40 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000003e40)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000580)={&(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x1}}, 0x10, 0x0}, 0x0) [ 1024.698877][T20413] binder: 20409:20413 unknown command 0 [ 1024.711178][T20413] binder: 20409:20413 ioctl c0306201 20000400 returned -22 21:08:40 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0x10, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000000c0)=""/173, 0x1a, 0xad, 0x1}, 0x20) 21:08:40 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x68, 0x0, 0x0}) [ 1024.767707][T20419] binder: 20415:20419 unknown command 0 [ 1024.790704][T20419] binder: 20415:20419 ioctl c0306201 20000400 returned -22 21:08:40 executing program 4: openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x0, 0x0) 21:08:40 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xd, 0x0, 0x0}) [ 1024.881391][T20428] binder: 20425:20428 unknown command 0 [ 1024.898899][T20428] binder: 20425:20428 ioctl c0306201 20000400 returned -22 21:08:40 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000002580)={0x0, 0x0, 0x0}, 0x0) 21:08:41 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10}]}}, &(0x7f00000000c0)=""/173, 0x2a, 0xad, 0x1}, 0x20) 21:08:41 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x6c, 0x0, 0x0}) [ 1024.969078][T20433] binder: 20430:20433 unknown command 0 [ 1024.983798][T20433] binder: 20430:20433 ioctl c0306201 20000400 returned -22 21:08:41 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004280)={0x11, 0x4, &(0x7f0000000700)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000001b80)='GPL\x00', 0x7, 0x9b, &(0x7f0000001bc0)=""/155, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:08:41 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xe, 0x0, 0x0}) [ 1025.090514][T20440] binder: 20438:20440 unknown command 0 [ 1025.106972][T20440] binder: 20438:20440 ioctl c0306201 20000400 returned -22 [ 1025.121290][T20445] binder: 20443:20445 unknown command 0 21:08:41 executing program 4: bpf$BPF_LINK_UPDATE(0x6, 0x0, 0x0) [ 1025.140503][T20445] binder: 20443:20445 ioctl c0306201 20000400 returned -22 21:08:41 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@func]}, &(0x7f0000000080)='syzkaller\x00', 0x6, 0xc8, &(0x7f00000000c0)=""/200, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:08:41 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x74, 0x0, 0x0}) 21:08:41 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) 21:08:41 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x10, 0x0, 0x0}) 21:08:41 executing program 2: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={0xffffffffffffffff, 0x24, 0x0, 0x0, 0x0}, 0x20) [ 1025.261687][T20453] binder: 20452:20453 unknown command 0 [ 1025.287254][T20457] binder: 20455:20457 unknown command 0 [ 1025.287532][T20453] binder: 20452:20453 ioctl c0306201 20000400 returned -22 21:08:41 executing program 4: socketpair(0x3, 0x0, 0x0, &(0x7f0000004e40)) [ 1025.332677][T20457] binder: 20455:20457 ioctl c0306201 20000400 returned -22 21:08:41 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x11, 0x0, 0x0}) 21:08:41 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x7a, 0x0, 0x0}) 21:08:41 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:08:41 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x2401, 0x0) close(r0) [ 1025.471993][T20469] binder: 20466:20469 unknown command 0 [ 1025.474049][T20470] binder: 20467:20470 unknown command 0 [ 1025.495628][T20469] binder: 20466:20469 ioctl c0306201 20000400 returned -22 [ 1025.500982][T20470] binder: 20467:20470 ioctl c0306201 20000400 returned -22 21:08:41 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xa95172c53f687287}, 0x40) 21:08:41 executing program 4: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={0xffffffffffffffff, 0x24, 0x1, 0x0, 0x0}, 0x20) 21:08:41 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x12, 0x0, 0x0}) 21:08:41 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x300, 0x0, 0x0}) 21:08:41 executing program 2: perf_event_open$cgroup(&(0x7f0000001380)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 21:08:41 executing program 4: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={0xffffffffffffffff, 0x24, 0x1, 0x0, 0x0}, 0x20) [ 1025.675974][T20484] binder: 20481:20484 unknown command 0 [ 1025.681478][T20483] binder: 20482:20483 unknown command 0 [ 1025.687077][T20483] binder: 20482:20483 ioctl c0306201 20000400 returned -22 [ 1025.715380][T20484] binder: 20481:20484 ioctl c0306201 20000400 returned -22 21:08:41 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x500, 0x0, 0x0}) 21:08:41 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x1}]}]}, {0x0, [0x61]}}, &(0x7f0000000140)=""/250, 0x33, 0xfa, 0x1}, 0x20) 21:08:41 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x13, 0x0, 0x0}) [ 1025.831555][T20493] binder: 20492:20493 unknown command 0 [ 1025.837119][T20493] binder: 20492:20493 ioctl c0306201 20000400 returned -22 [ 1025.868368][T20497] binder: 20495:20497 unknown command 0 21:08:41 executing program 4: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:08:41 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 1025.881710][T20497] binder: 20495:20497 ioctl c0306201 20000400 returned -22 21:08:42 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x25, 0x0, 0x0}) 21:08:42 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x600, 0x0, 0x0}) 21:08:42 executing program 4: bpf$BPF_PROG_TEST_RUN(0xc, 0x0, 0x0) 21:08:42 executing program 2: bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0xcb8ebf09f68a51f7}, 0x10) [ 1026.047373][T20510] binder: 20506:20510 unknown command 0 [ 1026.061492][T20510] binder: 20506:20510 ioctl c0306201 20000400 returned -22 [ 1026.078690][T20509] binder: 20505:20509 unknown command 0 21:08:42 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000003e40)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000580)={&(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x4}}, 0x10, 0x0}, 0x0) [ 1026.093470][T20509] binder: 20505:20509 ioctl c0306201 20000400 returned -22 21:08:42 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x700, 0x0, 0x0}) 21:08:42 executing program 4: mkdir(&(0x7f0000000940)='./file0\x00', 0x0) 21:08:42 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x48, 0x0, 0x0}) 21:08:42 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001300)={0x0, 0x0, 0x18}, 0x10) 21:08:42 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x700}, 0x0) [ 1026.195138][T20521] binder: 20518:20521 unknown command 0 [ 1026.222386][T20521] binder: 20518:20521 ioctl c0306201 20000400 returned -22 21:08:42 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x900, 0x0, 0x0}) [ 1026.295997][T20528] binder: 20525:20528 unknown command 0 [ 1026.312102][T20528] binder: 20525:20528 ioctl c0306201 20000400 returned -22 21:08:42 executing program 4: perf_event_open$cgroup(&(0x7f0000001380)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 21:08:42 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x707701, 0x0) close(r0) 21:08:42 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x4c, 0x0, 0x0}) [ 1026.395450][T20534] binder: 20533:20534 unknown command 0 [ 1026.414045][T20534] binder: 20533:20534 ioctl c0306201 20000400 returned -22 21:08:42 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xa00, 0x0, 0x0}) 21:08:42 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x10}]}]}}, &(0x7f0000001400)=""/4096, 0x32, 0x1000, 0x1}, 0x20) 21:08:42 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000003e40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000022600)={0x0, 0x0, &(0x7f0000005340)=[{&(0x7f0000003ec0)='+', 0x1}, {&(0x7f0000004ec0)='k', 0x1}], 0x2, &(0x7f0000022580)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14}}], 0x28}, 0x0) [ 1026.471990][T20541] binder: 20537:20541 unknown command 0 [ 1026.495895][T20541] binder: 20537:20541 ioctl c0306201 20000400 returned -22 [ 1026.559969][T20546] binder: 20543:20546 unknown command 0 [ 1026.577677][T20546] binder: 20543:20546 ioctl c0306201 20000400 returned -22 21:08:42 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x5c, 0x0, 0x0}) 21:08:42 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xb00, 0x0, 0x0}) 21:08:42 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000400), 0x4) r0 = gettid() r1 = perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x9, 0xa9, 0x1, 0x5, 0x0, 0x6, 0xa0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000100)}, 0x0, 0x40, 0x7, 0x6, 0x3, 0xffff, 0x733f}, r0, 0xf, 0xffffffffffffffff, 0x2) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000440)={0x2}, 0x8) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) r3 = openat$cgroup_devices(r2, &(0x7f00000004c0)='devices.allow\x00', 0x2, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000500)=r3, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0xe, &(0x7f0000000380)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0xd9, 0x0, 0x0, 0x40f00, 0x12, [], 0x0, 0x0, r2, 0x8, &(0x7f00000001c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0x7, 0x7fffffff, 0x4}, 0x10, 0x2656f}, 0x78) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0xec) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f000000d0c0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="184f94ce3804d9dc6c0004000000009c1682a86eb576194a8680bdfce57033918ba90f371576220fc2f3b425af6ceff547f8931885ac842d51447ee50b9c8db7ac76b9baea20a180ccf8b59e"], &(0x7f00000006c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) openat$cgroup_ro(r2, &(0x7f0000000340)='memory.stat\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x1ff) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) 21:08:42 executing program 2: socketpair(0x2, 0x0, 0x1000, &(0x7f0000000040)) [ 1026.702039][T20554] binder: 20552:20554 unknown command 0 [ 1026.719723][T20554] binder: 20552:20554 ioctl c0306201 20000400 returned -22 [ 1026.748984][T20556] binder: 20555:20556 unknown command 0 [ 1026.771742][T20556] binder: 20555:20556 ioctl c0306201 20000400 returned -22 21:08:42 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x60, 0x0, 0x0}) 21:08:42 executing program 2: bpf$BPF_BTF_LOAD(0x4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 21:08:42 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$sock(r0, &(0x7f0000000580)={&(0x7f00000000c0)=@nfc, 0x80, 0x0}, 0x0) 21:08:42 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xb63, 0x0, 0x0}) [ 1026.871313][T20566] binder: 20565:20566 unknown command 0 [ 1026.886832][T20566] binder: 20565:20566 ioctl c0306201 20000400 returned -22 21:08:42 executing program 2: perf_event_open$cgroup(&(0x7f0000001580)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20860, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 21:08:43 executing program 4: openat$tun(0xffffffffffffff9c, 0x0, 0x410000, 0x0) 21:08:43 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x68, 0x0, 0x0}) [ 1026.961504][T20574] binder: 20571:20574 unknown command 0 [ 1026.991491][T20574] binder: 20571:20574 ioctl c0306201 20000400 returned -22 21:08:43 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, &(0x7f00000000c0)=""/173, 0x2a, 0xad, 0x1}, 0x20) [ 1027.044773][T20580] binder: 20578:20580 unknown command 0 [ 1027.062526][T20580] binder: 20578:20580 ioctl c0306201 20000400 returned -22 21:08:43 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x74, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000000c0)=""/173, 0x1a, 0xad, 0x1}, 0x20) 21:08:43 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xc00, 0x0, 0x0}) 21:08:43 executing program 2: perf_event_open$cgroup(&(0x7f0000001380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 21:08:43 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x6c, 0x0, 0x0}) 21:08:43 executing program 4: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x4000) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x3, 0x0) [ 1027.197766][T20589] binder: 20587:20589 unknown command 0 [ 1027.221233][T20589] binder: 20587:20589 ioctl c0306201 20000400 returned -22 21:08:43 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000640)='/dev/input/event#\x00', 0xfffffffffffffffb, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, 0x0) 21:08:43 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xc63, 0x0, 0x0}) [ 1027.258314][T20594] binder: 20591:20594 unknown command 0 [ 1027.297044][T20594] binder: 20591:20594 ioctl c0306201 20000400 returned -22 21:08:43 executing program 4: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x4000) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) 21:08:43 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x74, 0x0, 0x0}) [ 1027.369834][T20602] binder: 20601:20602 unknown command 0 [ 1027.384053][T20602] binder: 20601:20602 ioctl c0306201 20000400 returned -22 21:08:43 executing program 2: mkdir(&(0x7f00000004c0)='./file0\x00', 0x8) 21:08:43 executing program 2: mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:08:43 executing program 4: mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x14012, 0xffffffffffffff9c, 0x0) 21:08:43 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xd00, 0x0, 0x0}) [ 1027.481271][T20610] binder: 20607:20610 unknown command 0 [ 1027.516727][T20610] binder: 20607:20610 ioctl c0306201 20000400 returned -22 21:08:43 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x7a, 0x0, 0x0}) 21:08:43 executing program 4: 21:08:43 executing program 2: [ 1027.576764][T20618] binder: 20613:20618 unknown command 0 [ 1027.600826][T20618] binder: 20613:20618 ioctl c0306201 20000400 returned -22 21:08:43 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xd63, 0x0, 0x0}) 21:08:43 executing program 2: [ 1027.665601][T20623] binder: 20619:20623 unknown command 0 [ 1027.689686][T20623] binder: 20619:20623 ioctl c0306201 20000400 returned -22 21:08:43 executing program 4: 21:08:43 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x300, 0x0, 0x0}) 21:08:43 executing program 2: [ 1027.790227][T20629] binder: 20626:20629 unknown command 0 [ 1027.805718][T20629] binder: 20626:20629 ioctl c0306201 20000400 returned -22 21:08:43 executing program 4: ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, 0x0) 21:08:43 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xe00, 0x0, 0x0}) 21:08:43 executing program 4: 21:08:43 executing program 2: [ 1027.878223][T20633] binder: 20630:20633 unknown command 0 [ 1027.916559][T20633] binder: 20630:20633 ioctl c0306201 20000400 returned -22 21:08:44 executing program 2: 21:08:44 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x500, 0x0, 0x0}) [ 1027.961103][T20638] binder: 20637:20638 unknown command 0 [ 1027.987155][T20638] binder: 20637:20638 ioctl c0306201 20000400 returned -22 21:08:44 executing program 4: 21:08:44 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x1100, 0x0, 0x0}) 21:08:44 executing program 4: 21:08:44 executing program 2: [ 1028.100072][T20648] binder: 20644:20648 unknown command 0 [ 1028.120852][T20649] binder: 20647:20649 unknown command 0 [ 1028.126602][T20648] binder: 20644:20648 ioctl c0306201 20000400 returned -22 [ 1028.167797][T20649] binder: 20647:20649 ioctl c0306201 20000400 returned -22 21:08:44 executing program 2: 21:08:44 executing program 4: 21:08:44 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x600, 0x0, 0x0}) 21:08:44 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x1200, 0x0, 0x0}) 21:08:44 executing program 2: 21:08:44 executing program 4: [ 1028.314478][T20660] binder: 20657:20660 unknown command 0 [ 1028.319774][T20661] binder: 20658:20661 unknown command 0 [ 1028.335331][T20660] binder: 20657:20660 ioctl c0306201 20000400 returned -22 21:08:44 executing program 2: [ 1028.358200][T20661] binder: 20658:20661 ioctl c0306201 20000400 returned -22 21:08:44 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x700, 0x0, 0x0}) 21:08:44 executing program 4: 21:08:44 executing program 2: perf_event_open$cgroup(&(0x7f0000001380)={0x7, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 21:08:44 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x1300, 0x0, 0x0}) [ 1028.485254][T20669] binder: 20667:20669 unknown command 0 [ 1028.502596][T20669] binder: 20667:20669 ioctl c0306201 20000400 returned -22 21:08:44 executing program 4: 21:08:44 executing program 2: 21:08:44 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x900, 0x0, 0x0}) [ 1028.538352][T20674] binder: 20671:20674 unknown command 0 [ 1028.566105][T20674] binder: 20671:20674 ioctl c0306201 20000400 returned -22 21:08:44 executing program 4: 21:08:44 executing program 2: 21:08:44 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x2000, 0x0, 0x0}) [ 1028.654863][T20680] binder: 20679:20680 unknown command 0 [ 1028.678863][T20680] binder: 20679:20680 ioctl c0306201 20000400 returned -22 21:08:44 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xa00, 0x0, 0x0}) 21:08:44 executing program 2: 21:08:44 executing program 4: [ 1028.747264][T20686] binder: 20684:20686 unknown command 0 [ 1028.764922][T20686] binder: 20684:20686 ioctl c0306201 20000400 returned -22 21:08:44 executing program 2: 21:08:44 executing program 4: 21:08:44 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x2500, 0x0, 0x0}) [ 1028.855583][T20692] binder: 20688:20692 unknown command 0 [ 1028.885839][T20692] binder: 20688:20692 ioctl c0306201 20000400 returned -22 21:08:44 executing program 2: 21:08:44 executing program 4: 21:08:44 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xb00, 0x0, 0x0}) [ 1028.974725][T20697] binder: 20695:20697 unknown command 0 [ 1028.982530][T20697] binder: 20695:20697 ioctl c0306201 20000400 returned -22 21:08:45 executing program 2: 21:08:45 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x4800, 0x0, 0x0}) 21:08:45 executing program 4: [ 1029.053306][T20703] binder: 20700:20703 unknown command 0 [ 1029.058869][T20703] binder: 20700:20703 ioctl c0306201 20000400 returned -22 21:08:45 executing program 2: 21:08:45 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xb63, 0x0, 0x0}) [ 1029.148309][T20709] binder: 20705:20709 unknown command 0 [ 1029.166964][T20709] binder: 20705:20709 ioctl c0306201 20000400 returned -22 21:08:45 executing program 4: 21:08:45 executing program 2: 21:08:45 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x4c00, 0x0, 0x0}) 21:08:45 executing program 2: 21:08:45 executing program 4: [ 1029.251281][T20715] binder: 20711:20715 unknown command 0 [ 1029.273813][T20715] binder: 20711:20715 ioctl c0306201 20000400 returned -22 21:08:45 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xc00, 0x0, 0x0}) [ 1029.330907][T20719] binder: 20717:20719 unknown command 0 [ 1029.366838][T20719] binder: 20717:20719 ioctl c0306201 20000400 returned -22 21:08:45 executing program 2: 21:08:45 executing program 4: 21:08:45 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x5c00, 0x0, 0x0}) 21:08:45 executing program 2: [ 1029.469685][T20726] binder: 20723:20726 unknown command 0 [ 1029.475259][T20726] binder: 20723:20726 ioctl c0306201 20000400 returned -22 21:08:45 executing program 4: 21:08:45 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xc63, 0x0, 0x0}) 21:08:45 executing program 2: [ 1029.546498][T20732] binder: 20728:20732 unknown command 0 [ 1029.584517][T20732] binder: 20728:20732 ioctl c0306201 20000400 returned -22 21:08:45 executing program 4: 21:08:45 executing program 2: [ 1029.614044][T20735] binder: 20734:20735 unknown command 0 [ 1029.625291][T20735] binder: 20734:20735 ioctl c0306201 20000400 returned -22 21:08:45 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xd00, 0x0, 0x0}) 21:08:45 executing program 4: 21:08:45 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x6000, 0x0, 0x0}) 21:08:45 executing program 2: [ 1029.735695][T20742] binder: 20741:20742 unknown command 0 [ 1029.747380][T20742] binder: 20741:20742 ioctl c0306201 20000400 returned -22 21:08:45 executing program 2: 21:08:45 executing program 4: 21:08:45 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xd63, 0x0, 0x0}) [ 1029.807779][T20747] binder: 20745:20747 unknown command 0 [ 1029.828365][T20747] binder: 20745:20747 ioctl c0306201 20000400 returned -22 21:08:45 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x630b, 0x0, 0x0}) 21:08:45 executing program 2: 21:08:45 executing program 4: [ 1029.919198][T20756] binder: 20752:20756 unknown command 0 [ 1029.932468][T20756] binder: 20752:20756 ioctl c0306201 20000400 returned -22 21:08:45 executing program 2: 21:08:46 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xe00, 0x0, 0x0}) [ 1029.967903][T20758] binder: 20755:20758 unknown command 0 [ 1029.986620][T20758] binder: 20755:20758 ioctl c0306201 20000400 returned -22 21:08:46 executing program 4: [ 1030.035344][T20763] binder: 20761:20763 unknown command 0 [ 1030.042446][T20763] binder: 20761:20763 ioctl c0306201 20000400 returned -22 21:08:46 executing program 2: 21:08:46 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x630c, 0x0, 0x0}) 21:08:46 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x1100, 0x0, 0x0}) 21:08:46 executing program 4: 21:08:46 executing program 2: [ 1030.165421][T20770] binder: 20768:20770 unknown command 0 [ 1030.177550][T20770] binder: 20768:20770 ioctl c0306201 20000400 returned -22 [ 1030.199694][T20771] binder: 20769:20771 unknown command 0 [ 1030.211434][T20771] binder: 20769:20771 ioctl c0306201 20000400 returned -22 21:08:46 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x630d, 0x0, 0x0}) 21:08:46 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x1200, 0x0, 0x0}) 21:08:46 executing program 4: 21:08:46 executing program 2: [ 1030.314579][T20778] binder: 20777:20778 unknown command 0 [ 1030.326760][T20778] binder: 20777:20778 ioctl c0306201 20000400 returned -22 21:08:46 executing program 2: [ 1030.366970][T20782] binder: 20779:20782 unknown command 0 [ 1030.388876][T20782] binder: 20779:20782 ioctl c0306201 20000400 returned -22 21:08:46 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x6800, 0x0, 0x0}) 21:08:46 executing program 4: 21:08:46 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x1300, 0x0, 0x0}) 21:08:46 executing program 2: 21:08:46 executing program 4: [ 1030.505969][T20790] binder: 20788:20790 unknown command 0 [ 1030.517095][T20790] binder: 20788:20790 ioctl c0306201 20000400 returned -22 [ 1030.529625][T20791] binder: 20789:20791 unknown command 0 [ 1030.569279][T20791] binder: 20789:20791 ioctl c0306201 20000400 returned -22 21:08:46 executing program 2: 21:08:46 executing program 4: 21:08:46 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x6c00, 0x0, 0x0}) 21:08:46 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x2000, 0x0, 0x0}) 21:08:46 executing program 2: 21:08:46 executing program 4: [ 1030.694776][T20800] binder: 20799:20800 unknown command 0 [ 1030.717757][T20800] binder: 20799:20800 ioctl c0306201 20000400 returned -22 21:08:46 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x7400, 0x0, 0x0}) 21:08:46 executing program 2: 21:08:46 executing program 4: [ 1030.765265][T20804] binder: 20801:20804 unknown command 0 [ 1030.791305][T20804] binder: 20801:20804 ioctl c0306201 20000400 returned -22 21:08:46 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x2500, 0x0, 0x0}) 21:08:46 executing program 4: 21:08:46 executing program 2: [ 1030.891892][T20811] binder: 20807:20811 unknown command 0 [ 1030.914482][T20811] binder: 20807:20811 ioctl c0306201 20000400 returned -22 21:08:47 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x7a00, 0x0, 0x0}) 21:08:47 executing program 4: [ 1030.958413][T20814] binder: 20812:20814 unknown command 0 [ 1030.981398][T20814] binder: 20812:20814 ioctl c0306201 20000400 returned -22 21:08:47 executing program 2: 21:08:47 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x4800, 0x0, 0x0}) 21:08:47 executing program 4: [ 1031.084559][T20821] binder: 20819:20821 unknown command 0 [ 1031.119182][T20821] binder: 20819:20821 ioctl c0306201 20000400 returned -22 21:08:47 executing program 2: 21:08:47 executing program 4: [ 1031.139624][T20826] binder: 20823:20826 unknown command 0 [ 1031.170817][T20826] binder: 20823:20826 ioctl c0306201 20000400 returned -22 21:08:47 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x634040, 0x0, 0x0}) 21:08:47 executing program 4: 21:08:47 executing program 2: 21:08:47 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x4c00, 0x0, 0x0}) 21:08:47 executing program 4: [ 1031.314018][T20836] binder: 20832:20836 unknown command 0 [ 1031.336841][T20836] binder: 20832:20836 ioctl c0306201 20000400 returned -22 [ 1031.337464][T20837] binder: 20835:20837 unknown command 0 21:08:47 executing program 2: 21:08:47 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x1000000, 0x0, 0x0}) [ 1031.388363][T20837] binder: 20835:20837 ioctl c0306201 20000400 returned -22 21:08:47 executing program 4: 21:08:47 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x5c00, 0x0, 0x0}) 21:08:47 executing program 2: [ 1031.466563][T20844] binder: 20841:20844 unknown command 0 [ 1031.490716][T20844] binder: 20841:20844 ioctl c0306201 20000400 returned -22 21:08:47 executing program 4: 21:08:47 executing program 2: 21:08:47 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x1634040, 0x0, 0x0}) [ 1031.559804][T20849] binder: 20847:20849 unknown command 0 [ 1031.585716][T20849] binder: 20847:20849 ioctl c0306201 20000400 returned -22 21:08:47 executing program 4: 21:08:47 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x6000, 0x0, 0x0}) 21:08:47 executing program 2: [ 1031.629485][T20854] binder: 20851:20854 unknown command 0 [ 1031.649118][T20854] binder: 20851:20854 ioctl c0306201 20000400 returned -22 21:08:47 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x2000000, 0x0, 0x0}) [ 1031.735349][T20860] binder: 20858:20860 unknown command 0 [ 1031.751549][T20860] binder: 20858:20860 ioctl c0306201 20000400 returned -22 21:08:47 executing program 4: 21:08:47 executing program 2: [ 1031.782730][T20862] binder: 20861:20862 unknown command 0 [ 1031.788294][T20862] binder: 20861:20862 ioctl c0306201 20000400 returned -22 21:08:47 executing program 2: 21:08:47 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x630b, 0x0, 0x0}) 21:08:47 executing program 4: 21:08:47 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x2630440, 0x0, 0x0}) 21:08:47 executing program 2: 21:08:48 executing program 4: [ 1031.944992][T20872] binder: 20869:20872 unknown command 0 [ 1031.975678][T20872] binder: 20869:20872 ioctl c0306201 20000400 returned -22 21:08:48 executing program 2: 21:08:48 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x630c, 0x0, 0x0}) 21:08:48 executing program 4: [ 1032.030946][T20875] binder: 20873:20875 unknown command 0 [ 1032.036526][T20875] binder: 20873:20875 ioctl c0306201 20000400 returned -22 21:08:48 executing program 2: 21:08:48 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x3000000, 0x0, 0x0}) 21:08:48 executing program 4: [ 1032.129647][T20883] binder: 20878:20883 unknown command 0 [ 1032.135344][T20883] binder: 20878:20883 ioctl c0306201 20000400 returned -22 21:08:48 executing program 2: 21:08:48 executing program 4: 21:08:48 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x630d, 0x0, 0x0}) [ 1032.217162][T20888] binder: 20885:20888 unknown command 0 [ 1032.237029][T20888] binder: 20885:20888 ioctl c0306201 20000400 returned -22 21:08:48 executing program 2: 21:08:48 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x3630840, 0x0, 0x0}) 21:08:48 executing program 4: [ 1032.365965][T20894] binder: 20893:20894 unknown command 0 [ 1032.371676][T20894] binder: 20893:20894 ioctl c0306201 20000400 returned -22 21:08:48 executing program 4: 21:08:48 executing program 2: 21:08:48 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x6800, 0x0, 0x0}) [ 1032.414908][T20898] binder: 20896:20898 unknown command 0 [ 1032.445512][T20898] binder: 20896:20898 ioctl c0306201 20000400 returned -22 21:08:48 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x4000000, 0x0, 0x0}) 21:08:48 executing program 2: 21:08:48 executing program 4: [ 1032.570549][T20906] binder: 20903:20906 unknown command 0 [ 1032.577352][T20906] binder: 20903:20906 ioctl c0306201 20000400 returned -22 21:08:48 executing program 4: 21:08:48 executing program 2: 21:08:48 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x6c00, 0x0, 0x0}) [ 1032.665505][T20910] binder: 20907:20910 unknown command 0 [ 1032.700323][T20910] binder: 20907:20910 ioctl c0306201 20000400 returned -22 21:08:48 executing program 4: 21:08:48 executing program 2: 21:08:48 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x4630440, 0x0, 0x0}) 21:08:48 executing program 4: 21:08:48 executing program 2: [ 1032.829419][T20919] binder: 20916:20919 unknown command 0 [ 1032.835124][T20919] binder: 20916:20919 ioctl c0306201 20000400 returned -22 21:08:48 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x7400, 0x0, 0x0}) [ 1032.904885][T20923] binder: 20921:20923 unknown command 0 [ 1032.922320][T20923] binder: 20921:20923 ioctl c0306201 20000400 returned -22 21:08:49 executing program 2: 21:08:49 executing program 4: 21:08:49 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x5000000, 0x0, 0x0}) [ 1032.989835][T20928] binder: 20926:20928 unknown command 0 [ 1033.005344][T20928] binder: 20926:20928 ioctl c0306201 20000400 returned -22 21:08:49 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x7a00, 0x0, 0x0}) 21:08:49 executing program 4: [ 1033.056430][T20934] binder: 20932:20934 unknown command 0 [ 1033.077735][T20934] binder: 20932:20934 ioctl c0306201 20000400 returned -22 21:08:49 executing program 2: 21:08:49 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x5630440, 0x0, 0x0}) [ 1033.126553][T20937] binder: 20935:20937 unknown command 0 [ 1033.138627][T20937] binder: 20935:20937 ioctl c0306201 20000400 returned -22 21:08:49 executing program 4: 21:08:49 executing program 2: 21:08:49 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x634040, 0x0, 0x0}) 21:08:49 executing program 4: 21:08:49 executing program 2: [ 1033.245527][T20945] binder: 20941:20945 unknown command 0 [ 1033.265813][T20945] binder: 20941:20945 ioctl c0306201 20000400 returned -22 21:08:49 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x6000000, 0x0, 0x0}) 21:08:49 executing program 2: [ 1033.322945][T20947] binder: 20946:20947 unknown command 0 [ 1033.342729][T20947] binder: 20946:20947 ioctl c0306201 20000400 returned -22 21:08:49 executing program 4: 21:08:49 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x1000000, 0x0, 0x0}) 21:08:49 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$getflags(r0, 0x3) [ 1033.422598][T20955] binder: 20951:20955 unknown command 0 [ 1033.453436][T20955] binder: 20951:20955 ioctl c0306201 20000400 returned -22 21:08:49 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff}) bind$inet6(r0, 0x0, 0x0) 21:08:49 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x6630440, 0x0, 0x0}) [ 1033.535268][T20961] binder: 20958:20961 unknown command 0 [ 1033.547015][T20961] binder: 20958:20961 ioctl c0306201 20000400 returned -22 21:08:49 executing program 2: munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 21:08:49 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x1634040, 0x0, 0x0}) 21:08:49 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x8, &(0x7f0000000040), 0x4) [ 1033.642449][T20970] binder: 20965:20970 unknown command 0 [ 1033.648009][T20970] binder: 20965:20970 ioctl c0306201 20000400 returned -22 [ 1033.679241][T20971] binder: 20969:20971 unknown command 0 21:08:49 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\rc\x00\x00'], 0x0, 0x0, 0x0}) 21:08:49 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00'], 0x0, 0x0, 0x0}) [ 1033.697519][T20971] binder: 20969:20971 ioctl c0306201 20000400 returned -22 21:08:49 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x2000000, 0x0, 0x0}) 21:08:49 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x7000000, 0x0, 0x0}) [ 1033.778342][T20981] binder: 20977:20981 unknown command 0 [ 1033.794126][T20979] binder: 20978:20979 unknown command 0 [ 1033.794355][T20981] binder: 20977:20981 ioctl c0306201 20000400 returned -22 [ 1033.809296][T20979] binder: 20978:20979 ioctl c0306201 20000400 returned -22 [ 1033.820691][T20983] binder: 20980:20983 unknown command 0 21:08:49 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x7630440, 0x0, 0x0}) 21:08:49 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\rc\x00\x00'], 0x0, 0x0, 0x0}) [ 1033.839199][T20983] binder: 20980:20983 ioctl c0306201 20000400 returned -22 [ 1033.862852][T20984] binder: 20982:20984 unknown command 0 [ 1033.868563][T20984] binder: 20982:20984 ioctl c0306201 20000400 returned -22 21:08:49 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00'], 0x0, 0x0, 0x0}) 21:08:49 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x2630440, 0x0, 0x0}) [ 1033.959199][T20990] binder: 20988:20990 unknown command 0 [ 1033.964762][T20990] binder: 20988:20990 ioctl c0306201 20000400 returned -22 [ 1033.978617][T20994] binder: 20991:20994 unknown command 0 [ 1033.987358][T20993] binder: 20989:20993 unknown command 0 [ 1033.993421][T20995] binder: 20992:20995 unknown command 0 [ 1034.003561][T20993] binder: 20989:20993 ioctl c0306201 20000400 returned -22 [ 1034.006168][T20994] binder: 20991:20994 ioctl c0306201 20000400 returned -22 [ 1034.021529][T20995] binder: 20992:20995 ioctl c0306201 20000400 returned -22 21:08:50 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00'], 0x0, 0x0, 0x0}) 21:08:50 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x8000000, 0x0, 0x0}) 21:08:50 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\rc\x00\x00'], 0x0, 0x0, 0x0}) 21:08:50 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x3000000, 0x0, 0x0}) [ 1034.139997][T21002] binder: 20999:21002 unknown command 0 [ 1034.152454][T21004] binder: 21000:21004 unknown command 0 [ 1034.160283][T21002] binder: 20999:21002 ioctl c0306201 20000400 returned -22 [ 1034.166204][T21005] binder: 21001:21005 unknown command 0 [ 1034.174794][T21004] binder: 21000:21004 ioctl c0306201 20000400 returned -22 [ 1034.183432][T21006] binder: 21003:21006 unknown command 0 [ 1034.197155][T21005] binder: 21001:21005 ioctl c0306201 20000400 returned -22 [ 1034.200427][T21006] binder: 21003:21006 ioctl c0306201 20000400 returned -22 21:08:50 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00'], 0x0, 0x0, 0x0}) 21:08:50 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\rc\x00\x00'], 0x0, 0x0, 0x0}) 21:08:50 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x8631040, 0x0, 0x0}) 21:08:50 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x3630840, 0x0, 0x0}) [ 1034.305864][T21012] binder: 21010:21012 unknown command 0 [ 1034.318840][T21012] binder: 21010:21012 ioctl c0306201 20000400 returned -22 [ 1034.339915][T21013] binder: 21011:21013 unknown command 0 [ 1034.368795][T21013] binder: 21011:21013 ioctl c0306201 20000400 returned -22 [ 1034.387899][T21017] binder: 21014:21017 unknown command 0 [ 1034.394270][T21018] binder: 21016:21018 unknown command 0 [ 1034.407583][T21017] binder: 21014:21017 ioctl c0306201 20000400 returned -22 21:08:50 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00'], 0x0, 0x0, 0x0}) 21:08:50 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\rc\x00\x00'], 0x0, 0x0, 0x0}) [ 1034.416384][T21018] binder: 21016:21018 ioctl c0306201 20000400 returned -22 21:08:50 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x4000000, 0x0, 0x0}) [ 1034.502825][T21023] binder: 21020:21023 unknown command 0 [ 1034.524443][T21025] binder: 21022:21025 unknown command 0 [ 1034.532356][T21023] binder: 21020:21023 ioctl c0306201 20000400 returned -22 21:08:50 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x9000000, 0x0, 0x0}) [ 1034.556893][T21025] binder: 21022:21025 ioctl c0306201 20000400 returned -22 [ 1034.584906][T21027] binder: 21026:21027 unknown command 0 21:08:50 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00'], 0x0, 0x0, 0x0}) [ 1034.601552][T21027] binder: 21026:21027 ioctl c0306201 20000400 returned -22 21:08:50 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\rc\x00\x00'], 0x0, 0x0, 0x0}) [ 1034.637187][T21030] binder: 21028:21030 unknown command 0 [ 1034.658633][T21030] binder: 21028:21030 ioctl c0306201 20000400 returned -22 [ 1034.681060][T21032] binder: 21029:21032 unknown command 0 21:08:50 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x4630440, 0x0, 0x0}) 21:08:50 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x9631040, 0x0, 0x0}) [ 1034.686717][T21032] binder: 21029:21032 ioctl c0306201 20000400 returned -22 [ 1034.707884][T21036] binder: 21034:21036 unknown command 0 [ 1034.717154][T21036] binder: 21034:21036 ioctl c0306201 20000400 returned -22 21:08:50 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\rc\x00\x00'], 0x0, 0x0, 0x0}) [ 1034.758280][T21038] binder: 21037:21038 unknown command 0 [ 1034.769510][T21038] binder: 21037:21038 ioctl c0306201 20000400 returned -22 [ 1034.798222][T21041] binder: 21039:21041 unknown command 0 21:08:50 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00'], 0x0, 0x0, 0x0}) 21:08:50 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x5000000, 0x0, 0x0}) [ 1034.816969][T21043] binder: 21040:21043 unknown command 0 [ 1034.826235][T21041] binder: 21039:21041 ioctl c0306201 20000400 returned -22 [ 1034.853626][T21046] binder: 21044:21046 unknown command 0 21:08:50 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xa000000, 0x0, 0x0}) [ 1034.867458][T21046] binder: 21044:21046 ioctl c0306201 20000400 returned -22 [ 1034.868007][T21043] binder: 21040:21043 ioctl c0306201 20000400 returned -22 [ 1034.905883][T21049] binder: 21048:21049 unknown command 0 21:08:50 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00'], 0x0, 0x0, 0x0}) [ 1034.920605][T21049] binder: 21048:21049 ioctl c0306201 20000400 returned -22 [ 1034.952440][T21051] binder: 21050:21051 unknown command 0 21:08:51 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\rc\x00\x00'], 0x0, 0x0, 0x0}) 21:08:51 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x5630440, 0x0, 0x0}) [ 1034.973548][T21051] binder: 21050:21051 ioctl c0306201 20000400 returned -22 [ 1034.991467][T21054] binder: 21052:21054 unknown command 0 [ 1034.998392][T21054] binder: 21052:21054 ioctl c0306201 20000400 returned -22 21:08:51 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xa630840, 0x0, 0x0}) 21:08:51 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00'], 0x0, 0x0, 0x0}) [ 1035.046056][T21057] binder: 21056:21057 unknown command 0 [ 1035.054104][T21057] binder: 21056:21057 ioctl c0306201 20000400 returned -22 21:08:51 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\rc\x00\x00'], 0x0, 0x0, 0x0}) [ 1035.098060][T21062] binder: 21058:21062 unknown command 0 [ 1035.113236][T21063] binder: 21060:21063 unknown command 0 [ 1035.121397][T21064] binder: 21061:21064 unknown command 0 [ 1035.127627][T21062] binder: 21058:21062 ioctl c0306201 20000400 returned -22 [ 1035.131229][T21063] binder: 21060:21063 ioctl c0306201 20000400 returned -22 [ 1035.156841][T21064] binder: 21061:21064 ioctl c0306201 20000400 returned -22 21:08:51 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00'], 0x0, 0x0, 0x0}) 21:08:51 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xb000000, 0x0, 0x0}) 21:08:51 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x6000000, 0x0, 0x0}) [ 1035.200818][T21067] binder: 21066:21067 unknown command 0 [ 1035.228920][T21067] binder: 21066:21067 ioctl c0306201 20000400 returned -22 [ 1035.237435][T21070] binder: 21069:21070 unknown command 0 21:08:51 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\rc\x00\x00'], 0x0, 0x0, 0x0}) [ 1035.279787][T21070] binder: 21069:21070 ioctl c0306201 20000400 returned -22 [ 1035.304544][T21074] binder: 21072:21074 unknown command 0 [ 1035.310283][T21074] binder: 21072:21074 ioctl c0306201 20000400 returned -22 21:08:51 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00'], 0x0, 0x0, 0x0}) 21:08:51 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xb630000, 0x0, 0x0}) [ 1035.341438][T21075] binder: 21073:21075 unknown command 0 [ 1035.346998][T21075] binder: 21073:21075 ioctl c0306201 20000400 returned -22 21:08:51 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x6630440, 0x0, 0x0}) [ 1035.403737][T21080] binder: 21078:21080 unknown command 0 [ 1035.408865][T21081] binder: 21077:21081 unknown command 0 [ 1035.414855][T21081] binder: 21077:21081 ioctl c0306201 20000400 returned -22 [ 1035.415991][T21080] binder: 21078:21080 ioctl c0306201 20000400 returned -22 21:08:51 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\rc\x00\x00'], 0x0, 0x0, 0x0}) [ 1035.461624][T21084] binder: 21083:21084 unknown command 0 [ 1035.468397][T21084] binder: 21083:21084 ioctl c0306201 20000400 returned -22 21:08:51 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00'], 0x0, 0x0, 0x0}) 21:08:51 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xc000000, 0x0, 0x0}) [ 1035.527851][T21086] binder: 21085:21086 unknown command 0 [ 1035.543576][T21086] binder: 21085:21086 ioctl c0306201 20000400 returned -22 [ 1035.572448][T21091] binder: 21088:21091 unknown command 0 [ 1035.584879][T21092] binder: 21089:21092 unknown command 0 [ 1035.590590][T21091] binder: 21088:21091 ioctl c0306201 20000400 returned -22 [ 1035.597924][T21092] binder: 21089:21092 ioctl c0306201 20000400 returned -22 21:08:51 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x7000000, 0x0, 0x0}) 21:08:51 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\rc\x00\x00'], 0x0, 0x0, 0x0}) 21:08:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00'], 0x0, 0x0, 0x0}) [ 1035.634343][T21095] binder: 21090:21095 unknown command 0 [ 1035.670992][T21095] binder: 21090:21095 ioctl c0306201 20000400 returned -22 [ 1035.705378][T21097] binder: 21096:21097 unknown command 0 [ 1035.716640][T21097] binder: 21096:21097 ioctl c0306201 20000400 returned -22 [ 1035.733311][T21101] binder: 21098:21101 unknown command 0 21:08:51 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xc630000, 0x0, 0x0}) [ 1035.755424][T21101] binder: 21098:21101 ioctl c0306201 20000400 returned -22 21:08:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00'], 0x0, 0x0, 0x0}) 21:08:51 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x7630440, 0x0, 0x0}) 21:08:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\rc\x00\x00'], 0x0, 0x0, 0x0}) [ 1035.841971][T21107] binder: 21105:21107 unknown command 0 [ 1035.860014][T21107] binder: 21105:21107 ioctl c0306201 20000400 returned -22 21:08:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00'], 0x0, 0x0, 0x0}) [ 1035.888019][T21111] binder: 21108:21111 unknown command 0 [ 1035.903291][T21111] binder: 21108:21111 ioctl c0306201 20000400 returned -22 21:08:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\rc\x00\x00'], 0x0, 0x0, 0x0}) 21:08:51 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xd000000, 0x0, 0x0}) 21:08:52 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x8000000, 0x0, 0x0}) 21:08:52 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00'], 0x0, 0x0, 0x0}) 21:08:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\rc\x00\x00'], 0x0, 0x0, 0x0}) [ 1036.026807][T21121] binder: 21119:21121 unknown command 0 [ 1036.049714][T21121] binder: 21119:21121 ioctl c0306201 20000400 returned -22 21:08:52 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00'], 0x0, 0x0, 0x0}) [ 1036.074566][T21125] binder: 21122:21125 unknown command 0 [ 1036.092060][T21125] binder: 21122:21125 ioctl c0306201 20000400 returned -22 21:08:52 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xd630000, 0x0, 0x0}) 21:08:52 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x8631040, 0x0, 0x0}) 21:08:52 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\rc\x00\x00'], 0x0, 0x0, 0x0}) 21:08:52 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00'], 0x0, 0x0, 0x0}) [ 1036.193130][T21134] binder: 21133:21134 unknown command 0 [ 1036.212495][T21134] binder: 21133:21134 ioctl c0306201 20000400 returned -22 21:08:52 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\rc\x00\x00'], 0x0, 0x0, 0x0}) [ 1036.240604][T21138] binder: 21135:21138 unknown command 0 [ 1036.248419][T21138] binder: 21135:21138 ioctl c0306201 20000400 returned -22 21:08:52 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xe000000, 0x0, 0x0}) 21:08:52 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x9000000, 0x0, 0x0}) 21:08:52 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00'], 0x0, 0x0, 0x0}) 21:08:52 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\rc\x00\x00'], 0x0, 0x0, 0x0}) [ 1036.387172][T21151] binder: 21147:21151 unknown command 0 [ 1036.394854][T21150] binder: 21146:21150 unknown command 0 [ 1036.402293][T21151] binder: 21147:21151 ioctl c0306201 20000400 returned -22 [ 1036.422140][T21150] binder: 21146:21150 ioctl c0306201 20000400 returned -22 [ 1036.429990][T21152] binder: 21148:21152 unknown command 0 21:08:52 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00'], 0x0, 0x0, 0x0}) [ 1036.435596][T21152] binder: 21148:21152 ioctl c0306201 20000400 returned -22 21:08:52 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x9631040, 0x0, 0x0}) 21:08:52 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\rc\x00\x00'], 0x0, 0x0, 0x0}) 21:08:52 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xe630c40, 0x0, 0x0}) [ 1036.538350][T21161] binder: 21158:21161 unknown command 0 [ 1036.552303][T21161] binder: 21158:21161 ioctl c0306201 20000400 returned -22 [ 1036.571127][T21160] binder: 21157:21160 unknown command 0 [ 1036.579469][T21160] binder: 21157:21160 ioctl c0306201 20000400 returned -22 [ 1036.593014][T21164] binder: 21159:21164 unknown command 0 [ 1036.613651][T21164] binder: 21159:21164 ioctl c0306201 20000400 returned -22 [ 1036.616191][T21165] binder: 21163:21165 unknown command 0 21:08:52 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xa000000, 0x0, 0x0}) 21:08:52 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00'], 0x0, 0x0, 0x0}) 21:08:52 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\rc\x00\x00'], 0x0, 0x0, 0x0}) [ 1036.641754][T21165] binder: 21163:21165 ioctl c0306201 20000400 returned -22 21:08:52 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xf630c40, 0x0, 0x0}) [ 1036.726828][T21172] binder: 21168:21172 unknown command 0 [ 1036.741092][T21172] binder: 21168:21172 ioctl c0306201 20000400 returned -22 [ 1036.757200][T21173] binder: 21169:21173 unknown command 0 [ 1036.764255][T21174] binder: 21170:21174 unknown command 0 21:08:52 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xa630840, 0x0, 0x0}) [ 1036.773497][T21173] binder: 21169:21173 ioctl c0306201 20000400 returned -22 [ 1036.788608][T21174] binder: 21170:21174 ioctl c0306201 20000400 returned -22 [ 1036.812588][T21177] binder: 21175:21177 unknown command 0 21:08:52 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00'], 0x0, 0x0, 0x0}) 21:08:52 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\rc\x00\x00'], 0x0, 0x0, 0x0}) [ 1036.837087][T21177] binder: 21175:21177 ioctl c0306201 20000400 returned -22 [ 1036.891466][T21180] binder: 21178:21180 unknown command 0 [ 1036.902934][T21183] binder: 21179:21183 unknown command 0 21:08:52 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x10000000, 0x0, 0x0}) [ 1036.931757][T21180] binder: 21178:21180 ioctl c0306201 20000400 returned -22 [ 1036.933076][T21183] binder: 21179:21183 ioctl c0306201 20000400 returned -22 [ 1036.961920][T21186] binder: 21184:21186 unknown command 0 [ 1036.986996][T21186] binder: 21184:21186 ioctl c0306201 20000400 returned -22 [ 1037.007780][T21188] binder: 21185:21188 unknown command 0 21:08:53 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xb000000, 0x0, 0x0}) 21:08:53 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00'], 0x0, 0x0, 0x0}) 21:08:53 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\rc\x00\x00'], 0x0, 0x0, 0x0}) [ 1037.036484][T21188] binder: 21185:21188 ioctl c0306201 20000400 returned -22 21:08:53 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x10630840, 0x0, 0x0}) [ 1037.112498][T21194] binder: 21191:21194 unknown command 0 [ 1037.119018][T21195] binder: 21190:21195 unknown command 0 [ 1037.130546][T21196] binder: 21192:21196 unknown command 0 [ 1037.132933][T21194] binder: 21191:21194 ioctl c0306201 20000400 returned -22 [ 1037.152595][T21195] binder: 21190:21195 ioctl c0306201 20000400 returned -22 [ 1037.165558][T21196] binder: 21192:21196 ioctl c0306201 20000400 returned -22 [ 1037.188891][T21198] binder: 21197:21198 unknown command 0 [ 1037.206950][T21198] binder: 21197:21198 ioctl c0306201 20000400 returned -22 21:08:53 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\rc\x00\x00'], 0x0, 0x0, 0x0}) 21:08:53 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xb630000, 0x0, 0x0}) 21:08:53 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00'], 0x0, 0x0, 0x0}) 21:08:53 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x11000000, 0x0, 0x0}) [ 1037.275294][T21203] binder: 21202:21203 unknown command 0 [ 1037.294307][T21203] binder: 21202:21203 ioctl c0306201 20000400 returned -22 [ 1037.319660][T21206] binder: 21205:21206 unknown command 0 [ 1037.342635][T21208] binder: 21204:21208 unknown command 0 [ 1037.349961][T21206] binder: 21205:21206 ioctl c0306201 20000400 returned -22 [ 1037.365669][T21210] binder: 21207:21210 unknown command 0 [ 1037.377804][T21208] binder: 21204:21208 ioctl c0306201 20000400 returned -22 21:08:53 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\rc\x00\x00'], 0x0, 0x0, 0x0}) 21:08:53 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00'], 0x0, 0x0, 0x0}) [ 1037.394109][T21210] binder: 21207:21210 ioctl c0306201 20000400 returned -22 21:08:53 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xc000000, 0x0, 0x0}) 21:08:53 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x11634840, 0x0, 0x0}) [ 1037.470657][T21215] binder: 21213:21215 unknown command 0 [ 1037.497847][T21216] binder: 21214:21216 unknown command 0 [ 1037.508413][T21215] binder: 21213:21215 ioctl c0306201 20000400 returned -22 [ 1037.517565][T21216] binder: 21214:21216 ioctl c0306201 20000400 returned -22 21:08:53 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\rc\x00\x00'], 0x0, 0x0, 0x0}) 21:08:53 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00'], 0x0, 0x0, 0x0}) [ 1037.570553][T21220] binder: 21218:21220 unknown command 0 [ 1037.570583][T21221] binder: 21219:21221 unknown command 0 [ 1037.605012][T21220] binder: 21218:21220 ioctl c0306201 20000400 returned -22 [ 1037.630619][T21221] binder: 21219:21221 ioctl c0306201 20000400 returned -22 [ 1037.658265][T21226] binder: 21222:21226 unknown command 0 [ 1037.676181][T21226] binder: 21222:21226 ioctl c0306201 20000400 returned -22 [ 1037.693604][T21228] binder: 21223:21228 unknown command 0 21:08:53 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xc630000, 0x0, 0x0}) 21:08:53 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x12000000, 0x0, 0x0}) [ 1037.721829][T21228] binder: 21223:21228 ioctl c0306201 20000400 returned -22 21:08:53 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\rc\x00\x00'], 0x0, 0x0, 0x0}) 21:08:53 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00'], 0x0, 0x0, 0x0}) [ 1037.769322][T21231] binder: 21229:21231 unknown command 0 [ 1037.790787][T21231] binder: 21229:21231 ioctl c0306201 20000400 returned -22 [ 1037.792050][T21232] binder: 21230:21232 unknown command 0 [ 1037.856912][T21232] binder: 21230:21232 ioctl c0306201 20000400 returned -22 [ 1037.871902][T21237] binder: 21234:21237 unknown command 0 [ 1037.875398][T21238] binder: 21236:21238 unknown command 0 [ 1037.895581][T21238] binder: 21236:21238 ioctl c0306201 20000400 returned -22 21:08:53 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x12634840, 0x0, 0x0}) [ 1037.906664][T21237] binder: 21234:21237 ioctl c0306201 20000400 returned -22 21:08:53 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\rc\x00\x00'], 0x0, 0x0, 0x0}) 21:08:54 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xd000000, 0x0, 0x0}) [ 1037.983639][T21242] binder: 21240:21242 unknown command 0 [ 1038.002063][T21242] binder: 21240:21242 ioctl c0306201 20000400 returned -22 [ 1038.022264][T21244] binder: 21243:21244 unknown command 0 21:08:54 executing program 4: syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00'], 0x0, 0x0, 0x0}) 21:08:54 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x13000000, 0x0, 0x0}) [ 1038.034923][T21244] binder: 21243:21244 ioctl c0306201 20000400 returned -22 [ 1038.069165][T21247] binder: 21245:21247 unknown command 0 21:08:54 executing program 4: syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00'], 0x0, 0x0, 0x0}) [ 1038.108408][T21247] binder: 21245:21247 ioctl c0306201 20000400 returned -22 [ 1038.139581][T21252] binder: 21250:21252 unknown command 0 [ 1038.156227][T21252] binder: 21250:21252 ioctl c0306201 20000400 returned -22 21:08:54 executing program 2: syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\rc\x00\x00'], 0x0, 0x0, 0x0}) 21:08:54 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xd630000, 0x0, 0x0}) 21:08:54 executing program 4: syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00'], 0x0, 0x0, 0x0}) 21:08:54 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x20000000, 0x0, 0x0}) 21:08:54 executing program 2: syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\rc\x00\x00'], 0x0, 0x0, 0x0}) [ 1038.293041][T21262] binder: 21258:21262 unknown command 0 [ 1038.311905][T21262] binder: 21258:21262 ioctl c0306201 20000400 returned -22 21:08:54 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 1038.338655][T21265] binder: 21263:21265 unknown command 0 [ 1038.355203][T21265] binder: 21263:21265 ioctl c0306201 20000400 returned -22 21:08:54 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xe000000, 0x0, 0x0}) 21:08:54 executing program 2: syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\rc\x00\x00'], 0x0, 0x0, 0x0}) [ 1038.456893][T21273] binder: 21269:21273 ioctl c0306201 0 returned -14 [ 1038.467045][T21274] binder: 21272:21274 unknown command 0 21:08:54 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x25000000, 0x0, 0x0}) 21:08:54 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 1038.510023][T21274] binder: 21272:21274 ioctl c0306201 20000400 returned -22 21:08:54 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 21:08:54 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xe630c40, 0x0, 0x0}) [ 1038.569457][T21281] binder: 21279:21281 ioctl c0306201 0 returned -14 [ 1038.591196][T21280] binder: 21277:21280 unknown command 0 [ 1038.609706][T21280] binder: 21277:21280 ioctl c0306201 20000400 returned -22 21:08:54 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 21:08:54 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 1038.638450][T21285] binder: 21283:21285 ioctl c0306201 0 returned -14 [ 1038.661368][T21287] binder: 21284:21287 unknown command 0 [ 1038.675624][T21287] binder: 21284:21287 ioctl c0306201 20000400 returned -22 21:08:54 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x40046302, 0x0, 0x0}) 21:08:54 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xf630c40, 0x0, 0x0}) [ 1038.758627][T21291] binder: 21288:21291 ioctl c0306201 0 returned -14 [ 1038.785695][T21295] binder: 21290:21295 ioctl c0306201 0 returned -14 [ 1038.794494][T21296] binder: 21293:21296 unknown command 0 21:08:54 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:08:54 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 1038.816068][T21296] binder: 21293:21296 ioctl c0306201 20000400 returned -22 [ 1038.832040][T21297] binder: 21294:21297 unknown command 0 [ 1038.852968][T21297] binder: 21294:21297 ioctl c0306201 20000400 returned -22 21:08:54 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x40046304, 0x0, 0x0}) 21:08:54 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x10000000, 0x0, 0x0}) [ 1038.933206][T21303] binder: 21299:21303 ioctl c0306201 20000400 returned -14 [ 1038.939944][T21304] binder: 21302:21304 ioctl c0306201 0 returned -14 21:08:55 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:08:55 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1038.994232][T21306] binder: 21305:21306 unknown command 0 [ 1039.005310][T21306] binder: 21305:21306 ioctl c0306201 20000400 returned -22 21:08:55 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x40046305, 0x0, 0x0}) [ 1039.066278][T21311] binder: 21307:21311 unknown command 0 [ 1039.074562][T21314] binder: 21310:21314 ioctl c0306201 20000400 returned -14 [ 1039.083724][T21313] binder: 21309:21313 ioctl c0306201 20000400 returned -14 [ 1039.092131][T21311] binder: 21307:21311 ioctl c0306201 20000400 returned -22 21:08:55 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:08:55 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x10630840, 0x0, 0x0}) 21:08:55 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1039.131579][T21317] binder: 21315:21317 unknown command 0 [ 1039.157161][T21317] binder: 21315:21317 ioctl c0306201 20000400 returned -22 21:08:55 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x40046306, 0x0, 0x0}) 21:08:55 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1039.212089][T21322] binder: 21319:21322 ioctl c0306201 20000400 returned -14 [ 1039.219862][T21323] binder: 21318:21323 unknown command 0 [ 1039.232044][T21323] binder: 21318:21323 ioctl c0306201 20000400 returned -22 [ 1039.236553][T21324] binder: 21320:21324 ioctl c0306201 20000400 returned -14 21:08:55 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x11000000, 0x0, 0x0}) 21:08:55 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0}) [ 1039.326350][T21329] binder: 21327:21329 unknown command 0 [ 1039.346007][T21330] binder: 21328:21330 ioctl c0306201 20000400 returned -14 [ 1039.359282][T21329] binder: 21327:21329 ioctl c0306201 20000400 returned -22 [ 1039.408632][T21333] binder: 21331:21333 unknown command 0 [ 1039.428098][T21333] binder: 21331:21333 ioctl c0306201 20000400 returned -22 [ 1039.448333][T21336] binder: 21332:21336 unknown command 0 21:08:55 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0}) 21:08:55 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x40046307, 0x0, 0x0}) [ 1039.464194][T21336] binder: 21332:21336 ioctl c0306201 20000400 returned -22 21:08:55 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x11634840, 0x0, 0x0}) 21:08:55 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0}) [ 1039.512888][T21340] binder: 21337:21340 unknown command 0 [ 1039.520600][T21341] binder: 21339:21341 unknown command 0 [ 1039.545450][T21341] binder: 21339:21341 ioctl c0306201 20000400 returned -22 [ 1039.548159][T21340] binder: 21337:21340 ioctl c0306201 20000400 returned -22 21:08:55 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0}) [ 1039.602788][T21345] binder: 21342:21345 unknown command 0 [ 1039.617415][T21347] binder: 21343:21347 unknown command 0 [ 1039.625160][T21345] binder: 21342:21345 ioctl c0306201 20000400 returned -22 [ 1039.640137][T21347] binder: 21343:21347 ioctl c0306201 20000400 returned -22 21:08:55 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x40086303, 0x0, 0x0}) 21:08:55 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0}) 21:08:55 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x12000000, 0x0, 0x0}) [ 1039.682429][T21350] binder: 21348:21350 unknown command 0 [ 1039.717570][T21350] binder: 21348:21350 ioctl c0306201 20000400 returned -22 21:08:55 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0}) [ 1039.753183][T21354] binder: 21351:21354 unknown command 0 [ 1039.763200][T21355] binder: 21352:21355 unknown command 0 [ 1039.771776][T21354] binder: 21351:21354 ioctl c0306201 20000400 returned -22 [ 1039.804420][T21356] binder: 21353:21356 unknown command 0 [ 1039.813261][T21355] binder: 21352:21355 ioctl c0306201 20000400 returned -22 [ 1039.829004][T21356] binder: 21353:21356 ioctl c0306201 20000400 returned -22 21:08:55 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x4008630a, 0x0, 0x0}) 21:08:55 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) [ 1039.855093][T21360] binder: 21359:21360 unknown command 0 [ 1039.876148][T21360] binder: 21359:21360 ioctl c0306201 20000400 returned -22 21:08:55 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x12634840, 0x0, 0x0}) [ 1039.926788][T21363] binder: 21362:21363 unknown command 0 [ 1039.948053][T21363] binder: 21362:21363 ioctl c0306201 20000400 returned -22 [ 1039.975155][T21365] binder: 21364:21365 unknown command 0 21:08:56 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) 21:08:56 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x40086310, 0x0, 0x0}) [ 1040.001812][T21369] binder: 21367:21369 unknown command 0 [ 1040.006953][T21365] binder: 21364:21365 ioctl c0306201 20000400 returned -22 [ 1040.021864][T21369] binder: 21367:21369 ioctl c0306201 20000400 returned -22 21:08:56 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) 21:08:56 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x13000000, 0x0, 0x0}) [ 1040.099162][T21373] binder: 21370:21373 unknown command 0 [ 1040.105562][T21373] binder: 21370:21373 ioctl c0306201 20000400 returned -22 [ 1040.117853][T21374] binder: 21372:21374 unknown command 0 [ 1040.136286][T21374] binder: 21372:21374 ioctl c0306201 20000400 returned -22 21:08:56 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) [ 1040.189842][T21379] binder: 21376:21379 unknown command 0 [ 1040.208546][T21380] binder: 21377:21380 unknown command 0 [ 1040.217393][T21379] binder: 21376:21379 ioctl c0306201 20000400 returned -22 21:08:56 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x400c630e, 0x0, 0x0}) [ 1040.236807][T21380] binder: 21377:21380 ioctl c0306201 20000400 returned -22 [ 1040.253334][T21382] binder: 21381:21382 unknown command 0 [ 1040.275502][T21382] binder: 21381:21382 ioctl c0306201 20000400 returned -22 21:08:56 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) 21:08:56 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x20000000, 0x0, 0x0}) [ 1040.299878][T21385] binder: 21383:21385 unknown command 0 [ 1040.337257][T21385] binder: 21383:21385 ioctl c0306201 20000400 returned -22 21:08:56 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) [ 1040.355239][T21388] binder: 21387:21388 unknown command 0 [ 1040.376224][T21388] binder: 21387:21388 ioctl c0306201 20000400 returned -22 21:08:56 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x400c630f, 0x0, 0x0}) [ 1040.402282][T21392] binder: 21389:21392 unknown command 0 [ 1040.417021][T21393] binder: 21390:21393 unknown command 0 [ 1040.429487][T21392] binder: 21389:21392 ioctl c0306201 20000400 returned -22 21:08:56 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) [ 1040.451736][T21393] binder: 21390:21393 ioctl c0306201 20000400 returned -22 21:08:56 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\rc'], 0x0, 0x0, 0x0}) [ 1040.496538][T21396] binder: 21394:21396 unknown command 0 [ 1040.532015][T21396] binder: 21394:21396 ioctl c0306201 20000400 returned -22 [ 1040.540797][T21399] binder: 21397:21399 unknown command 0 21:08:56 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x25000000, 0x0, 0x0}) [ 1040.568936][T21399] binder: 21397:21399 ioctl c0306201 20000400 returned -22 [ 1040.600737][T21403] binder: 21400:21403 unknown command 0 21:08:56 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x40106308, 0x0, 0x0}) 21:08:56 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) [ 1040.623032][T21403] binder: 21400:21403 ioctl c0306201 20000400 returned -22 [ 1040.638050][T21404] binder: 21402:21404 unknown command 0 [ 1040.662189][T21404] binder: 21402:21404 ioctl c0306201 20000400 returned -22 21:08:56 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) 21:08:56 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x40046302, 0x0, 0x0}) [ 1040.678138][T21408] binder: 21405:21408 unknown command 0 [ 1040.699618][T21409] binder: 21406:21409 unknown command 0 [ 1040.701319][T21408] binder: 21405:21408 ioctl c0306201 20000400 returned -22 [ 1040.721023][T21409] binder: 21406:21409 ioctl c0306201 20000400 returned -22 21:08:56 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) [ 1040.768760][T21412] binder: 21411:21412 unknown command 0 [ 1040.790055][T21412] binder: 21411:21412 ioctl c0306201 20000400 returned -22 21:08:56 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x40106309, 0x0, 0x0}) 21:08:56 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) [ 1040.833699][T21415] binder: 21413:21415 unknown command 0 [ 1040.860065][T21417] binder: 21416:21417 unknown command 0 [ 1040.871010][T21415] binder: 21413:21415 ioctl c0306201 20000400 returned -22 [ 1040.873393][T21417] binder: 21416:21417 ioctl c0306201 20000400 returned -22 [ 1040.922971][T21422] binder: 21419:21422 unknown command 0 [ 1040.923726][T21421] binder: 21420:21421 unknown command 0 [ 1040.946003][T21422] binder: 21419:21422 ioctl c0306201 20000400 returned -22 21:08:57 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x40046304, 0x0, 0x0}) [ 1040.969657][T21421] binder: 21420:21421 ioctl c0306201 20000400 returned -22 21:08:57 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) 21:08:57 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x40406300, 0x0, 0x0}) 21:08:57 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) [ 1041.060010][T21427] binder: 21425:21427 unknown command 0 [ 1041.063386][T21429] binder: 21428:21429 unknown command 0 [ 1041.080078][T21429] binder: 21428:21429 ioctl c0306201 20000400 returned -22 [ 1041.097348][T21427] binder: 21425:21427 ioctl c0306201 20000400 returned -22 [ 1041.131115][T21432] binder: 21430:21432 unknown command 0 [ 1041.138651][T21433] binder: 21431:21433 unknown command 0 [ 1041.157275][T21433] binder: 21431:21433 ioctl c0306201 20000400 returned -22 [ 1041.164335][T21432] binder: 21430:21432 ioctl c0306201 20000400 returned -22 21:08:57 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\f'], 0x0, 0x0, 0x0}) 21:08:57 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x40046305, 0x0, 0x0}) 21:08:57 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\r'], 0x0, 0x0, 0x0}) 21:08:57 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x40406301, 0x0, 0x0}) [ 1041.269922][T21440] binder: 21437:21440 unknown command 12 [ 1041.281355][T21439] binder: 21438:21439 unknown command 0 [ 1041.287911][T21440] binder: 21437:21440 ioctl c0306201 20000400 returned -22 [ 1041.311783][T21443] binder: 21442:21443 unknown command 13 21:08:57 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\f'], 0x0, 0x0, 0x0}) [ 1041.313261][T21439] binder: 21438:21439 ioctl c0306201 20000400 returned -22 [ 1041.335505][T21444] binder: 21441:21444 unknown command 0 [ 1041.338535][T21443] binder: 21442:21443 ioctl c0306201 20000400 returned -22 [ 1041.354902][T21444] binder: 21441:21444 ioctl c0306201 20000400 returned -22 21:08:57 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x40046306, 0x0, 0x0}) 21:08:57 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\r'], 0x0, 0x0, 0x0}) 21:08:57 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x40486311, 0x0, 0x0}) [ 1041.455092][T21449] binder: 21448:21449 unknown command 12 [ 1041.475937][T21449] binder: 21448:21449 ioctl c0306201 20000400 returned -22 [ 1041.500436][T21453] binder: 21450:21453 unknown command 13 [ 1041.512959][T21454] binder: 21451:21454 unknown command 0 [ 1041.522585][T21455] binder: 21452:21455 unknown command 0 [ 1041.531921][T21453] binder: 21450:21453 ioctl c0306201 20000400 returned -22 [ 1041.538676][T21454] binder: 21451:21454 ioctl c0306201 20000400 returned -22 21:08:57 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\f'], 0x0, 0x0, 0x0}) 21:08:57 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\r'], 0x0, 0x0, 0x0}) [ 1041.553699][T21455] binder: 21452:21455 ioctl c0306201 20000400 returned -22 21:08:57 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x40046307, 0x0, 0x0}) 21:08:57 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x40486312, 0x0, 0x0}) [ 1041.644072][T21461] binder: 21457:21461 unknown command 12 [ 1041.646322][T21462] binder: 21460:21462 unknown command 13 [ 1041.660394][T21462] binder: 21460:21462 ioctl c0306201 20000400 returned -22 [ 1041.681974][T21461] binder: 21457:21461 ioctl c0306201 20000400 returned -22 [ 1041.706015][T21465] binder: 21463:21465 unknown command 0 [ 1041.728808][T21465] binder: 21463:21465 ioctl c0306201 20000400 returned -22 [ 1041.735211][T21466] binder: 21464:21466 unknown command 0 21:08:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:08:57 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x40086303, 0x0, 0x0}) [ 1041.767915][T21466] binder: 21464:21466 ioctl c0306201 20000400 returned -22 21:08:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:08:57 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x48000000, 0x0, 0x0}) [ 1041.879750][T21475] binder: 21473:21475 unknown command 0 [ 1041.893475][T21479] binder: 21476:21479 unknown command 0 [ 1041.898525][T21475] binder: 21473:21475 ioctl c0306201 20000400 returned -22 [ 1041.920790][T21479] binder: 21476:21479 ioctl c0306201 20000400 returned -22 21:08:58 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x4c000000, 0x0, 0x0}) 21:08:58 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x4008630a, 0x0, 0x0}) [ 1042.058884][T21486] binder: 21484:21486 unknown command 0 [ 1042.070964][T21487] binder: 21485:21487 unknown command 0 [ 1042.071220][T21486] binder: 21484:21486 ioctl c0306201 20000400 returned -22 [ 1042.091060][T21487] binder: 21485:21487 ioctl c0306201 20000400 returned -22 [ 1042.110667][T10131] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1042.157970][T11631] usb 5-1: new high-speed USB device number 20 using dummy_hcd 21:08:58 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x40086310, 0x0, 0x0}) 21:08:58 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x5c000000, 0x0, 0x0}) [ 1042.279495][T21495] binder: 21492:21495 unknown command 0 [ 1042.292649][T21495] binder: 21492:21495 ioctl c0306201 20000400 returned -22 [ 1042.296585][T21496] binder: 21494:21496 unknown command 0 21:08:58 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x400c630e, 0x0, 0x0}) [ 1042.327854][T21496] binder: 21494:21496 ioctl c0306201 20000400 returned -22 21:08:58 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x60000000, 0x0, 0x0}) [ 1042.430690][T21502] binder: 21500:21502 unknown command 0 [ 1042.436265][T21502] binder: 21500:21502 ioctl c0306201 20000400 returned -22 [ 1042.453553][T21503] binder: 21501:21503 unknown command 0 [ 1042.461073][T21503] binder: 21501:21503 ioctl c0306201 20000400 returned -22 21:08:58 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x400c630f, 0x0, 0x0}) 21:08:58 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x68000000, 0x0, 0x0}) [ 1042.518044][T11631] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1042.538071][T10131] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1042.549317][T11631] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1042.557753][T10131] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1042.585317][T11631] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.596811][T10131] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.610610][T21509] binder: 21507:21509 unknown command 0 [ 1042.616172][T21509] binder: 21507:21509 ioctl c0306201 20000400 returned -22 [ 1042.617321][T21511] binder: 21508:21511 unknown command 0 [ 1042.639736][T11631] usb 5-1: config 0 descriptor?? [ 1042.645738][T10131] usb 3-1: config 0 descriptor?? [ 1042.666657][T21511] binder: 21508:21511 ioctl c0306201 20000400 returned -22 [ 1043.118250][T11631] keytouch 0003:0926:3333.0027: fixing up Keytouch IEC report descriptor [ 1043.132774][T11631] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0027/input/input43 [ 1043.149612][T10131] keytouch 0003:0926:3333.0028: fixing up Keytouch IEC report descriptor [ 1043.173351][T10131] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0028/input/input44 [ 1043.229957][T11631] keytouch 0003:0926:3333.0027: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1043.301152][T10131] keytouch 0003:0926:3333.0028: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1043.325831][T11631] usb 5-1: USB disconnect, device number 20 [ 1043.393150][T10131] usb 3-1: USB disconnect, device number 81 21:08:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:08:59 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x6c000000, 0x0, 0x0}) 21:08:59 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x40106308, 0x0, 0x0}) 21:08:59 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) [ 1043.982056][T21596] binder: 21591:21596 unknown command 0 [ 1043.988742][T21597] binder: 21589:21597 unknown command 0 [ 1043.989946][T21596] binder: 21591:21596 ioctl c0306201 20000400 returned -22 [ 1044.016787][T21597] binder: 21589:21597 ioctl c0306201 20000400 returned -22 21:09:00 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x40106309, 0x0, 0x0}) 21:09:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x74000000, 0x0, 0x0}) [ 1044.095734][T21604] binder: 21603:21604 unknown command 0 [ 1044.106784][T21604] binder: 21603:21604 ioctl c0306201 20000400 returned -22 21:09:00 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x40406300, 0x0, 0x0}) [ 1044.175709][T21607] binder: 21606:21607 unknown command 0 [ 1044.192438][T21607] binder: 21606:21607 ioctl c0306201 20000400 returned -22 [ 1044.207633][ T5] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1044.230948][T11631] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1044.239608][T21612] binder: 21611:21612 unknown command 0 [ 1044.262497][T21612] binder: 21611:21612 ioctl c0306201 20000400 returned -22 21:09:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x7a000000, 0x0, 0x0}) 21:09:00 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x40406301, 0x0, 0x0}) [ 1044.375356][T21619] binder: 21617:21619 unknown command 0 [ 1044.384728][T21620] binder: 21618:21620 unknown command 0 [ 1044.393009][T21620] binder: 21618:21620 ioctl c0306201 20000400 returned -22 [ 1044.394044][T21619] binder: 21617:21619 ioctl c0306201 20000400 returned -22 21:09:00 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x40486311, 0x0, 0x0}) 21:09:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x1000000000000, 0x0, 0x0}) [ 1044.560085][T21627] binder: 21625:21627 unknown command 0 [ 1044.567913][T21629] binder: 21626:21629 unknown command 0 [ 1044.574156][T21627] binder: 21625:21627 ioctl c0306201 20000400 returned -22 [ 1044.585017][T21629] binder: 21626:21629 ioctl c0306201 20000400 returned -22 [ 1044.590349][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1044.603301][T11631] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1044.621793][T11631] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1044.636362][ T5] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 21:09:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x63404000000000, 0x0, 0x0}) [ 1044.657171][T11631] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.680207][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.712489][T11631] usb 5-1: config 0 descriptor?? [ 1044.736152][ T5] usb 3-1: config 0 descriptor?? [ 1044.742337][T21635] binder: 21633:21635 unknown command 0 [ 1044.779733][T21635] binder: 21633:21635 ioctl c0306201 20000400 returned -22 [ 1045.198375][T11631] keytouch 0003:0926:3333.0029: fixing up Keytouch IEC report descriptor [ 1045.224420][T11631] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0029/input/input45 [ 1045.237135][ T5] keytouch 0003:0926:3333.002A: fixing up Keytouch IEC report descriptor [ 1045.253910][ T5] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.002A/input/input46 [ 1045.360377][T11631] keytouch 0003:0926:3333.0029: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1045.410657][T11631] usb 5-1: USB disconnect, device number 21 [ 1045.429631][ T5] keytouch 0003:0926:3333.002A: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1045.483819][ T5] usb 3-1: USB disconnect, device number 82 21:09:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:09:02 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x40486312, 0x0, 0x0}) 21:09:02 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x100000000000000, 0x0, 0x0}) 21:09:02 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) [ 1046.055454][T21719] binder: 21714:21719 unknown command 0 [ 1046.056027][T21720] binder: 21715:21720 unknown command 0 [ 1046.071033][T21719] binder: 21714:21719 ioctl c0306201 20000400 returned -22 21:09:02 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x48000000, 0x0, 0x0}) [ 1046.098338][T21720] binder: 21715:21720 ioctl c0306201 20000400 returned -22 21:09:02 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x163404000000000, 0x0, 0x0}) [ 1046.180713][T21728] binder: 21727:21728 unknown command 0 [ 1046.199114][T21728] binder: 21727:21728 ioctl c0306201 20000400 returned -22 21:09:02 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x4c000000, 0x0, 0x0}) [ 1046.255892][T21734] binder: 21729:21734 unknown command 0 [ 1046.277369][T21734] binder: 21729:21734 ioctl c0306201 20000400 returned -22 [ 1046.297489][ T5] usb 3-1: new high-speed USB device number 83 using dummy_hcd 21:09:02 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x200000000000000, 0x0, 0x0}) [ 1046.337358][ T42] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1046.356260][T21737] binder: 21735:21737 unknown command 0 [ 1046.381470][T21737] binder: 21735:21737 ioctl c0306201 20000400 returned -22 [ 1046.411854][T21741] binder: 21740:21741 unknown command 0 [ 1046.424156][T21741] binder: 21740:21741 ioctl c0306201 20000400 returned -22 21:09:02 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x5c000000, 0x0, 0x0}) 21:09:02 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x263044000000000, 0x0, 0x0}) [ 1046.509822][T21747] binder: 21746:21747 unknown command 0 [ 1046.532008][T21747] binder: 21746:21747 ioctl c0306201 20000400 returned -22 21:09:02 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x60000000, 0x0, 0x0}) [ 1046.565103][T21749] binder: 21748:21749 unknown command 0 [ 1046.587231][T21749] binder: 21748:21749 ioctl c0306201 20000400 returned -22 21:09:02 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x300000000000000, 0x0, 0x0}) [ 1046.653133][T21755] binder: 21754:21755 unknown command 0 [ 1046.659489][T21755] binder: 21754:21755 ioctl c0306201 20000400 returned -22 [ 1046.675134][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1046.714407][ T5] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1046.741827][T21758] binder: 21757:21758 unknown command 0 [ 1046.755169][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.760102][T21758] binder: 21757:21758 ioctl c0306201 20000400 returned -22 [ 1046.772931][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1046.793600][ T5] usb 3-1: config 0 descriptor?? [ 1046.795465][ T42] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1046.862068][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.892384][ T42] usb 5-1: config 0 descriptor?? [ 1047.289505][ T5] keytouch 0003:0926:3333.002B: fixing up Keytouch IEC report descriptor [ 1047.306928][ T5] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.002B/input/input47 [ 1047.397660][ T42] keytouch 0003:0926:3333.002C: fixing up Keytouch IEC report descriptor [ 1047.413568][ T42] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.002C/input/input48 [ 1047.430684][ T5] keytouch 0003:0926:3333.002B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1047.495713][ T9699] usb 3-1: USB disconnect, device number 83 [ 1047.529086][ T42] keytouch 0003:0926:3333.002C: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1047.635071][ T5] usb 5-1: USB disconnect, device number 22 21:09:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) 21:09:04 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x68000000, 0x0, 0x0}) 21:09:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x363084000000000, 0x0, 0x0}) [ 1048.125637][T21840] binder: 21837:21840 unknown command 0 [ 1048.134342][T21841] binder: 21838:21841 unknown command 0 [ 1048.137812][T21840] binder: 21837:21840 ioctl c0306201 20000400 returned -22 [ 1048.151630][T21841] binder: 21838:21841 ioctl c0306201 20000400 returned -22 21:09:04 executing program 4: pipe(&(0x7f0000002380)) 21:09:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x400000000000000, 0x0, 0x0}) 21:09:04 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x6c000000, 0x0, 0x0}) 21:09:04 executing program 4: pipe2(&(0x7f0000007600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLCREATE(r0, 0x0, 0x0) [ 1048.285299][T21852] binder: 21850:21852 unknown command 0 [ 1048.302659][T21853] binder: 21851:21853 unknown command 0 [ 1048.319202][T21852] binder: 21850:21852 ioctl c0306201 20000400 returned -22 [ 1048.332898][T21853] binder: 21851:21853 ioctl c0306201 20000400 returned -22 21:09:04 executing program 4: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000580)='/proc/self\x00', 0x90200, 0x0) 21:09:04 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x74000000, 0x0, 0x0}) [ 1048.397128][ T5] usb 3-1: new high-speed USB device number 84 using dummy_hcd 21:09:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x463044000000000, 0x0, 0x0}) 21:09:04 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) [ 1048.456246][T21864] binder: 21861:21864 unknown command 0 [ 1048.475664][T21864] binder: 21861:21864 ioctl c0306201 20000400 returned -22 [ 1048.493863][T21866] binder: 21865:21866 unknown command 0 21:09:04 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x7a000000, 0x0, 0x0}) [ 1048.526083][T21866] binder: 21865:21866 ioctl c0306201 20000400 returned -22 [ 1048.607379][T21872] binder: 21871:21872 unknown command 0 [ 1048.626459][T21872] binder: 21871:21872 ioctl c0306201 20000400 returned -22 [ 1048.768669][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1048.802480][ T5] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1048.848333][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.862160][ T5] usb 3-1: config 0 descriptor?? [ 1049.417057][ T5] usbhid 3-1:0.0: can't add hid device: -71 [ 1049.423022][ T5] usbhid: probe of 3-1:0.0 failed with error -71 [ 1049.448677][ T5] usb 3-1: USB disconnect, device number 84 21:09:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) 21:09:05 executing program 4: open(&(0x7f0000000000)='./file0\x00', 0x7218c2, 0x91) 21:09:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x500000000000000, 0x0, 0x0}) 21:09:05 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x1000000000000, 0x0, 0x0}) 21:09:06 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) write$nbd(r1, 0x0, 0x0) [ 1049.921920][T21896] binder: 21892:21896 unknown command 0 [ 1049.931699][T21897] binder: 21891:21897 unknown command 0 [ 1049.935228][T21896] binder: 21892:21896 ioctl c0306201 20000400 returned -22 [ 1049.959196][T21897] binder: 21891:21897 ioctl c0306201 20000400 returned -22 21:09:06 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x63404000000000, 0x0, 0x0}) 21:09:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x563044000000000, 0x0, 0x0}) 21:09:06 executing program 4: timer_create(0x0, 0x0, &(0x7f0000000180)=0x0) timer_gettime(r0, &(0x7f0000000000)) [ 1050.061910][T21907] binder: 21904:21907 unknown command 0 [ 1050.083608][T21907] binder: 21904:21907 ioctl c0306201 20000400 returned -22 [ 1050.104348][T21909] binder: 21908:21909 unknown command 0 21:09:06 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x100000000000000, 0x0, 0x0}) [ 1050.122363][T21909] binder: 21908:21909 ioctl c0306201 20000400 returned -22 21:09:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="8400000011000100010005711371af9ad0800000", @ANYRES32=r1, @ANYBLOB="0000000000000000140003"], 0x84}}, 0x0) 21:09:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x600000000000000, 0x0, 0x0}) [ 1050.191102][T10131] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1050.229207][T21918] binder: 21917:21918 unknown command 0 [ 1050.246144][T21921] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1050.255575][T21918] binder: 21917:21918 ioctl c0306201 20000400 returned -22 21:09:06 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x163404000000000, 0x0, 0x0}) [ 1050.287523][T21922] binder: 21920:21922 unknown command 0 [ 1050.293637][T21922] binder: 21920:21922 ioctl c0306201 20000400 returned -22 [ 1050.309083][T21925] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1050.396010][T21929] binder: 21928:21929 unknown command 0 [ 1050.414554][T21929] binder: 21928:21929 ioctl c0306201 20000400 returned -22 [ 1050.587033][T10131] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1050.608963][T10131] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1050.644507][T10131] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.677388][T10131] usb 3-1: config 0 descriptor?? [ 1051.246799][T10131] usbhid 3-1:0.0: can't add hid device: -71 [ 1051.252897][T10131] usbhid: probe of 3-1:0.0 failed with error -71 [ 1051.269774][T10131] usb 3-1: USB disconnect, device number 85 21:09:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) 21:09:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002200dbdf250a00300107000002"], 0x1c}}, 0x0) 21:09:07 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x663044000000000, 0x0, 0x0}) 21:09:07 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x200000000000000, 0x0, 0x0}) [ 1051.769994][T21952] binder: 21948:21952 unknown command 0 [ 1051.770990][T21951] binder: 21947:21951 unknown command 0 [ 1051.787517][T21952] binder: 21948:21952 ioctl c0306201 20000400 returned -22 21:09:07 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x894a, &(0x7f0000000040)={'vlan0\x00', @ifru_settings={0x0, 0x0, @cisco=0x0}}) [ 1051.811433][T21951] binder: 21947:21951 ioctl c0306201 20000400 returned -22 21:09:07 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x263044000000000, 0x0, 0x0}) 21:09:07 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x700000000000000, 0x0, 0x0}) 21:09:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@setlink={0x50, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'netpci0\x00'}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x50}}, 0x0) [ 1051.936746][T21962] binder: 21961:21962 unknown command 0 [ 1051.951928][T21966] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1051.957683][T21962] binder: 21961:21962 ioctl c0306201 20000400 returned -22 [ 1051.999968][T21968] binder: 21964:21968 unknown command 0 [ 1052.005541][T21968] binder: 21964:21968 ioctl c0306201 20000400 returned -22 21:09:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@setlink={0x1c4, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40408}, [@IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_vlan\x00'}, {0x14, 0x35, 'syzkaller1\x00'}, {0x14, 0x35, 'vlan0\x00'}]}, @IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_LINK_NETNSID={0x8}, @IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'veth1_to_team\x00'}, @IFLA_VFINFO_LIST={0x120, 0x16, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x447b47c1, 0x40, 0x132}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xa095, 0xfffffeff}}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3, 0x2}}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x0, 0x0, 0x1}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xef6a, 0x80}}, @IFLA_VF_TRUST={0xc, 0x9, {0x0, 0xfffffc01}}]}, {0xb8, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7ff, 0x2}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x400, 0x7fffffff}}, @IFLA_VF_VLAN_LIST={0x90, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xf5}}, {0x14, 0x1, {0x9, 0xd1e, 0xfffffff9, 0x8100}}, {0x14, 0x1, {0x3c8e, 0xcc2, 0x9, 0x88a8}}, {0x14, 0x1, {0x5, 0x0, 0x0, 0x88a8}}, {0x14, 0x1, {0x7fff, 0x5ae, 0x1, 0x8100}}, {0x14, 0x1, {0xe8b, 0x97a, 0xcf, 0x88a8}}, {0x14, 0x1, {0x5, 0xc7e}}]}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x80000000, 0x100}}]}]}, @IFLA_TXQLEN={0x8, 0xd, 0xffffffff}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) 21:09:08 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x300000000000000, 0x0, 0x0}) 21:09:08 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x763044000000000, 0x0, 0x0}) [ 1052.056741][T10131] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1052.121548][T21973] syz_tun: refused to change device tx_queue_len [ 1052.142342][T21973] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1052.186748][T21977] binder: 21975:21977 unknown command 0 [ 1052.186914][T21978] binder: 21974:21978 unknown command 0 [ 1052.192306][T21977] binder: 21975:21977 ioctl c0306201 20000400 returned -22 21:09:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@setlink={0x1c4, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40408}, [@IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_vlan\x00'}, {0x14, 0x35, 'syzkaller1\x00'}, {0x14, 0x35, 'vlan0\x00'}]}, @IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_LINK_NETNSID={0x8}, @IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'veth1_to_team\x00'}, @IFLA_VFINFO_LIST={0x120, 0x16, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x447b47c1, 0x40, 0x132}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xa095, 0xfffffeff}}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3, 0x2}}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x0, 0x0, 0x1}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xef6a, 0x80}}, @IFLA_VF_TRUST={0xc, 0x9, {0x0, 0xfffffc01}}]}, {0xb8, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7ff, 0x2}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x400, 0x7fffffff}}, @IFLA_VF_VLAN_LIST={0x90, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xf5}}, {0x14, 0x1, {0x9, 0xd1e, 0xfffffff9, 0x8100}}, {0x14, 0x1, {0x3c8e, 0xcc2, 0x9, 0x88a8}}, {0x14, 0x1, {0x5, 0x0, 0x0, 0x88a8}}, {0x14, 0x1, {0x7fff, 0x5ae, 0x1, 0x8100}}, {0x14, 0x1, {0xe8b, 0x97a, 0xcf, 0x88a8}}, {0x14, 0x1, {0x5, 0xc7e}}]}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x80000000, 0x100}}]}]}, @IFLA_TXQLEN={0x8, 0xd, 0xffffffff}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) [ 1052.252290][T21978] binder: 21974:21978 ioctl c0306201 20000400 returned -22 [ 1052.278990][T21982] syz_tun: refused to change device tx_queue_len [ 1052.302927][T21982] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1052.446912][T10131] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1052.476698][T10131] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1052.485743][T10131] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.517394][T10131] usb 3-1: config 0 descriptor?? [ 1053.077931][T10131] usbhid 3-1:0.0: can't add hid device: -71 [ 1053.085228][T10131] usbhid: probe of 3-1:0.0 failed with error -71 [ 1053.113904][T10131] usb 3-1: USB disconnect, device number 86 21:09:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:09:09 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x800000000000000, 0x0, 0x0}) 21:09:09 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x363084000000000, 0x0, 0x0}) 21:09:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@setlink={0x1c4, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40408}, [@IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_vlan\x00'}, {0x14, 0x35, 'syzkaller1\x00'}, {0x14, 0x35, 'vlan0\x00'}]}, @IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_LINK_NETNSID={0x8}, @IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'veth1_to_team\x00'}, @IFLA_VFINFO_LIST={0x120, 0x16, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x447b47c1, 0x40, 0x132}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xa095, 0xfffffeff}}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3, 0x2}}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x0, 0x0, 0x1}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xef6a, 0x80}}, @IFLA_VF_TRUST={0xc, 0x9, {0x0, 0xfffffc01}}]}, {0xb8, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7ff, 0x2}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x400, 0x7fffffff}}, @IFLA_VF_VLAN_LIST={0x90, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xf5}}, {0x14, 0x1, {0x9, 0xd1e, 0xfffffff9, 0x8100}}, {0x14, 0x1, {0x3c8e, 0xcc2, 0x9, 0x88a8}}, {0x14, 0x1, {0x5, 0x0, 0x0, 0x88a8}}, {0x14, 0x1, {0x7fff, 0x5ae, 0x1, 0x8100}}, {0x14, 0x1, {0xe8b, 0x97a, 0xcf, 0x88a8}}, {0x14, 0x1, {0x5, 0xc7e}}]}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x80000000, 0x100}}]}]}, @IFLA_TXQLEN={0x8, 0xd, 0xffffffff}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) [ 1053.594448][T22000] binder: 21998:22000 unknown command 0 [ 1053.613428][T22000] binder: 21998:22000 ioctl c0306201 20000400 returned -22 [ 1053.634350][T22004] syz_tun: refused to change device tx_queue_len [ 1053.650580][T22004] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 21:09:09 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x863104000000000, 0x0, 0x0}) 21:09:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@setlink={0x1c4, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40408}, [@IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_vlan\x00'}, {0x14, 0x35, 'syzkaller1\x00'}, {0x14, 0x35, 'vlan0\x00'}]}, @IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_LINK_NETNSID={0x8}, @IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'veth1_to_team\x00'}, @IFLA_VFINFO_LIST={0x120, 0x16, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x447b47c1, 0x40, 0x132}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xa095, 0xfffffeff}}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3, 0x2}}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x0, 0x0, 0x1}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xef6a, 0x80}}, @IFLA_VF_TRUST={0xc, 0x9, {0x0, 0xfffffc01}}]}, {0xb8, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7ff, 0x2}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x400, 0x7fffffff}}, @IFLA_VF_VLAN_LIST={0x90, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xf5}}, {0x14, 0x1, {0x9, 0xd1e, 0xfffffff9, 0x8100}}, {0x14, 0x1, {0x3c8e, 0xcc2, 0x9, 0x88a8}}, {0x14, 0x1, {0x5, 0x0, 0x0, 0x88a8}}, {0x14, 0x1, {0x7fff, 0x5ae, 0x1, 0x8100}}, {0x14, 0x1, {0xe8b, 0x97a, 0xcf, 0x88a8}}, {0x14, 0x1, {0x5, 0xc7e}}]}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x80000000, 0x100}}]}]}, @IFLA_TXQLEN={0x8, 0xd, 0xffffffff}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) [ 1053.694389][T22009] binder: 22001:22009 unknown command 0 [ 1053.729558][T22009] binder: 22001:22009 ioctl c0306201 20000400 returned -22 21:09:09 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x400000000000000, 0x0, 0x0}) [ 1053.770174][T22011] binder: 22010:22011 unknown command 0 [ 1053.786608][T22011] binder: 22010:22011 ioctl c0306201 20000400 returned -22 [ 1053.809567][T22013] syz_tun: refused to change device tx_queue_len 21:09:09 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x900000000000000, 0x0, 0x0}) [ 1053.836552][ T5] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1053.849819][T22013] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1053.917532][T22020] binder: 22017:22020 unknown command 0 [ 1053.923101][T22020] binder: 22017:22020 ioctl c0306201 20000400 returned -22 [ 1053.942077][T22021] binder: 22015:22021 unknown command 0 21:09:09 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@setlink={0x1c4, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40408}, [@IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_vlan\x00'}, {0x14, 0x35, 'syzkaller1\x00'}, {0x14, 0x35, 'vlan0\x00'}]}, @IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_LINK_NETNSID={0x8}, @IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'veth1_to_team\x00'}, @IFLA_VFINFO_LIST={0x120, 0x16, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x447b47c1, 0x40, 0x132}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xa095, 0xfffffeff}}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3, 0x2}}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x0, 0x0, 0x1}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xef6a, 0x80}}, @IFLA_VF_TRUST={0xc, 0x9, {0x0, 0xfffffc01}}]}, {0xb8, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7ff, 0x2}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x400, 0x7fffffff}}, @IFLA_VF_VLAN_LIST={0x90, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xf5}}, {0x14, 0x1, {0x9, 0xd1e, 0xfffffff9, 0x8100}}, {0x14, 0x1, {0x3c8e, 0xcc2, 0x9, 0x88a8}}, {0x14, 0x1, {0x5, 0x0, 0x0, 0x88a8}}, {0x14, 0x1, {0x7fff, 0x5ae, 0x1, 0x8100}}, {0x14, 0x1, {0xe8b, 0x97a, 0xcf, 0x88a8}}, {0x14, 0x1, {0x5, 0xc7e}}]}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x80000000, 0x100}}]}]}, @IFLA_TXQLEN={0x8, 0xd, 0xffffffff}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) [ 1053.965427][T22021] binder: 22015:22021 ioctl c0306201 20000400 returned -22 21:09:10 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x963104000000000, 0x0, 0x0}) 21:09:10 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x463044000000000, 0x0, 0x0}) 21:09:10 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@setlink={0x1c4, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40408}, [@IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_vlan\x00'}, {0x14, 0x35, 'syzkaller1\x00'}, {0x14, 0x35, 'vlan0\x00'}]}, @IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_LINK_NETNSID={0x8}, @IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'veth1_to_team\x00'}, @IFLA_VFINFO_LIST={0x120, 0x16, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x447b47c1, 0x40, 0x132}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xa095, 0xfffffeff}}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3, 0x2}}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x0, 0x0, 0x1}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xef6a, 0x80}}, @IFLA_VF_TRUST={0xc, 0x9, {0x0, 0xfffffc01}}]}, {0xb8, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7ff, 0x2}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x400, 0x7fffffff}}, @IFLA_VF_VLAN_LIST={0x90, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xf5}}, {0x14, 0x1, {0x9, 0xd1e, 0xfffffff9, 0x8100}}, {0x14, 0x1, {0x3c8e, 0xcc2, 0x9, 0x88a8}}, {0x14, 0x1, {0x5, 0x0, 0x0, 0x88a8}}, {0x14, 0x1, {0x7fff, 0x5ae, 0x1, 0x8100}}, {0x14, 0x1, {0xe8b, 0x97a, 0xcf, 0x88a8}}, {0x14, 0x1, {0x5, 0xc7e}}]}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x80000000, 0x100}}]}]}, @IFLA_TXQLEN={0x8, 0xd, 0xffffffff}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) [ 1054.058421][T22028] binder: 22027:22028 unknown command 0 [ 1054.081506][T22028] binder: 22027:22028 ioctl c0306201 20000400 returned -22 [ 1054.111451][T22030] binder: 22029:22030 unknown command 0 [ 1054.125259][T22030] binder: 22029:22030 ioctl c0306201 20000400 returned -22 [ 1054.198201][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1054.246578][ T5] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1054.255674][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.298742][ T5] usb 3-1: config 0 descriptor?? [ 1054.836414][ T5] usbhid 3-1:0.0: can't add hid device: -71 [ 1054.836460][ T5] usbhid: probe of 3-1:0.0 failed with error -71 [ 1054.838766][ T5] usb 3-1: USB disconnect, device number 87 21:09:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:09:11 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xa00000000000000, 0x0, 0x0}) 21:09:11 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@setlink={0x1c4, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40408}, [@IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_vlan\x00'}, {0x14, 0x35, 'syzkaller1\x00'}, {0x14, 0x35, 'vlan0\x00'}]}, @IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_LINK_NETNSID={0x8}, @IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'veth1_to_team\x00'}, @IFLA_VFINFO_LIST={0x120, 0x16, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x447b47c1, 0x40, 0x132}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xa095, 0xfffffeff}}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3, 0x2}}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x0, 0x0, 0x1}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xef6a, 0x80}}, @IFLA_VF_TRUST={0xc, 0x9, {0x0, 0xfffffc01}}]}, {0xb8, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7ff, 0x2}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x400, 0x7fffffff}}, @IFLA_VF_VLAN_LIST={0x90, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xf5}}, {0x14, 0x1, {0x9, 0xd1e, 0xfffffff9, 0x8100}}, {0x14, 0x1, {0x3c8e, 0xcc2, 0x9, 0x88a8}}, {0x14, 0x1, {0x5, 0x0, 0x0, 0x88a8}}, {0x14, 0x1, {0x7fff, 0x5ae, 0x1, 0x8100}}, {0x14, 0x1, {0xe8b, 0x97a, 0xcf, 0x88a8}}, {0x14, 0x1, {0x5, 0xc7e}}]}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x80000000, 0x100}}]}]}, @IFLA_TXQLEN={0x8, 0xd, 0xffffffff}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) 21:09:11 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x500000000000000, 0x0, 0x0}) 21:09:11 executing program 4: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@setlink={0x1c4, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40408}, [@IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_vlan\x00'}, {0x14, 0x35, 'syzkaller1\x00'}, {0x14, 0x35, 'vlan0\x00'}]}, @IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_LINK_NETNSID={0x8}, @IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'veth1_to_team\x00'}, @IFLA_VFINFO_LIST={0x120, 0x16, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x447b47c1, 0x40, 0x132}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xa095, 0xfffffeff}}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3, 0x2}}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x0, 0x0, 0x1}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xef6a, 0x80}}, @IFLA_VF_TRUST={0xc, 0x9, {0x0, 0xfffffc01}}]}, {0xb8, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7ff, 0x2}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x400, 0x7fffffff}}, @IFLA_VF_VLAN_LIST={0x90, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xf5}}, {0x14, 0x1, {0x9, 0xd1e, 0xfffffff9, 0x8100}}, {0x14, 0x1, {0x3c8e, 0xcc2, 0x9, 0x88a8}}, {0x14, 0x1, {0x5, 0x0, 0x0, 0x88a8}}, {0x14, 0x1, {0x7fff, 0x5ae, 0x1, 0x8100}}, {0x14, 0x1, {0xe8b, 0x97a, 0xcf, 0x88a8}}, {0x14, 0x1, {0x5, 0xc7e}}]}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x80000000, 0x100}}]}]}, @IFLA_TXQLEN={0x8, 0xd, 0xffffffff}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) [ 1055.360241][T22056] binder: 22053:22056 unknown command 0 [ 1055.362012][T22055] binder: 22051:22055 unknown command 0 [ 1055.378880][T22056] binder: 22053:22056 ioctl c0306201 20000400 returned -22 [ 1055.395162][T22055] binder: 22051:22055 ioctl c0306201 20000400 returned -22 21:09:11 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x563044000000000, 0x0, 0x0}) 21:09:11 executing program 4: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@setlink={0x1c4, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40408}, [@IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_vlan\x00'}, {0x14, 0x35, 'syzkaller1\x00'}, {0x14, 0x35, 'vlan0\x00'}]}, @IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_LINK_NETNSID={0x8}, @IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'veth1_to_team\x00'}, @IFLA_VFINFO_LIST={0x120, 0x16, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x447b47c1, 0x40, 0x132}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xa095, 0xfffffeff}}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3, 0x2}}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x0, 0x0, 0x1}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xef6a, 0x80}}, @IFLA_VF_TRUST={0xc, 0x9, {0x0, 0xfffffc01}}]}, {0xb8, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7ff, 0x2}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x400, 0x7fffffff}}, @IFLA_VF_VLAN_LIST={0x90, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xf5}}, {0x14, 0x1, {0x9, 0xd1e, 0xfffffff9, 0x8100}}, {0x14, 0x1, {0x3c8e, 0xcc2, 0x9, 0x88a8}}, {0x14, 0x1, {0x5, 0x0, 0x0, 0x88a8}}, {0x14, 0x1, {0x7fff, 0x5ae, 0x1, 0x8100}}, {0x14, 0x1, {0xe8b, 0x97a, 0xcf, 0x88a8}}, {0x14, 0x1, {0x5, 0xc7e}}]}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x80000000, 0x100}}]}]}, @IFLA_TXQLEN={0x8, 0xd, 0xffffffff}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) 21:09:11 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xa63084000000000, 0x0, 0x0}) [ 1055.535372][T22068] binder: 22065:22068 unknown command 0 [ 1055.551308][T22068] binder: 22065:22068 ioctl c0306201 20000400 returned -22 [ 1055.571183][T22071] binder: 22066:22071 unknown command 0 21:09:11 executing program 4: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@setlink={0x1c4, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40408}, [@IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_vlan\x00'}, {0x14, 0x35, 'syzkaller1\x00'}, {0x14, 0x35, 'vlan0\x00'}]}, @IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_LINK_NETNSID={0x8}, @IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'veth1_to_team\x00'}, @IFLA_VFINFO_LIST={0x120, 0x16, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x447b47c1, 0x40, 0x132}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xa095, 0xfffffeff}}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3, 0x2}}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x0, 0x0, 0x1}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xef6a, 0x80}}, @IFLA_VF_TRUST={0xc, 0x9, {0x0, 0xfffffc01}}]}, {0xb8, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7ff, 0x2}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x400, 0x7fffffff}}, @IFLA_VF_VLAN_LIST={0x90, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xf5}}, {0x14, 0x1, {0x9, 0xd1e, 0xfffffff9, 0x8100}}, {0x14, 0x1, {0x3c8e, 0xcc2, 0x9, 0x88a8}}, {0x14, 0x1, {0x5, 0x0, 0x0, 0x88a8}}, {0x14, 0x1, {0x7fff, 0x5ae, 0x1, 0x8100}}, {0x14, 0x1, {0xe8b, 0x97a, 0xcf, 0x88a8}}, {0x14, 0x1, {0x5, 0xc7e}}]}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x80000000, 0x100}}]}]}, @IFLA_TXQLEN={0x8, 0xd, 0xffffffff}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) 21:09:11 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x600000000000000, 0x0, 0x0}) [ 1055.597847][T22071] binder: 22066:22071 ioctl c0306201 20000400 returned -22 [ 1055.629337][ T42] usb 3-1: new high-speed USB device number 88 using dummy_hcd 21:09:11 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xb00000000000000, 0x0, 0x0}) 21:09:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x40) [ 1055.685834][T22078] binder: 22077:22078 unknown command 0 [ 1055.707159][T22078] binder: 22077:22078 ioctl c0306201 20000400 returned -22 [ 1055.734376][T22082] binder: 22080:22082 unknown command 0 [ 1055.742030][T22082] binder: 22080:22082 ioctl c0306201 20000400 returned -22 [ 1056.028033][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1056.044079][ T42] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1056.076298][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.089372][ T42] usb 3-1: config 0 descriptor?? [ 1056.626182][ T42] usbhid 3-1:0.0: can't add hid device: -71 [ 1056.632280][ T42] usbhid: probe of 3-1:0.0 failed with error -71 [ 1056.658780][ T42] usb 3-1: USB disconnect, device number 88 21:09:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:09:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x40) 21:09:13 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x663044000000000, 0x0, 0x0}) 21:09:13 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xb63000000000000, 0x0, 0x0}) 21:09:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x40) [ 1057.178092][T22108] binder: 22104:22108 unknown command 0 [ 1057.182191][T22109] binder: 22103:22109 unknown command 0 [ 1057.210020][T22108] binder: 22104:22108 ioctl c0306201 20000400 returned -22 [ 1057.222977][T22109] binder: 22103:22109 ioctl c0306201 20000400 returned -22 21:09:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x40) 21:09:13 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x700000000000000, 0x0, 0x0}) 21:09:13 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xc00000000000000, 0x0, 0x0}) 21:09:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x40) [ 1057.378373][T22122] binder: 22120:22122 unknown command 0 [ 1057.389947][T22123] binder: 22121:22123 unknown command 0 [ 1057.402861][T22122] binder: 22120:22122 ioctl c0306201 20000400 returned -22 [ 1057.426208][ T42] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1057.438222][T22123] binder: 22121:22123 ioctl c0306201 20000400 returned -22 21:09:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x40) 21:09:13 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x763044000000000, 0x0, 0x0}) 21:09:13 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xc63000000000000, 0x0, 0x0}) [ 1057.546803][T22131] binder: 22130:22131 unknown command 0 [ 1057.563406][T22131] binder: 22130:22131 ioctl c0306201 20000400 returned -22 [ 1057.579540][T22134] binder: 22132:22134 unknown command 0 [ 1057.600674][T22134] binder: 22132:22134 ioctl c0306201 20000400 returned -22 [ 1057.866292][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1057.886028][ T42] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1057.895109][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.926978][ T42] usb 3-1: config 0 descriptor?? [ 1058.475962][ T42] usbhid 3-1:0.0: can't add hid device: -71 [ 1058.481956][ T42] usbhid: probe of 3-1:0.0 failed with error -71 [ 1058.500591][ T42] usb 3-1: USB disconnect, device number 89 21:09:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:09:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) 21:09:14 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x800000000000000, 0x0, 0x0}) 21:09:14 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xd00000000000000, 0x0, 0x0}) [ 1059.007820][T22157] binder: 22152:22157 unknown command 0 [ 1059.027236][T22158] binder: 22154:22158 unknown command 0 [ 1059.035106][T22157] binder: 22152:22157 ioctl c0306201 20000400 returned -22 21:09:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) [ 1059.053483][T22158] binder: 22154:22158 ioctl c0306201 20000400 returned -22 21:09:15 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xd63000000000000, 0x0, 0x0}) 21:09:15 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x863104000000000, 0x0, 0x0}) 21:09:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) [ 1059.171968][T22167] binder: 22165:22167 unknown command 0 [ 1059.180527][T22168] binder: 22166:22168 unknown command 0 [ 1059.191577][T22168] binder: 22166:22168 ioctl c0306201 20000400 returned -22 [ 1059.203778][T22167] binder: 22165:22167 ioctl c0306201 20000400 returned -22 21:09:15 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x900000000000000, 0x0, 0x0}) 21:09:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@setlink={0x1c4, 0x13, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40408}, [@IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_vlan\x00'}, {0x14, 0x35, 'syzkaller1\x00'}, {0x14, 0x35, 'vlan0\x00'}]}, @IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_LINK_NETNSID={0x8}, @IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'veth1_to_team\x00'}, @IFLA_VFINFO_LIST={0x120, 0x16, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x447b47c1, 0x40, 0x132}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xa095, 0xfffffeff}}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3, 0x2}}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x0, 0x0, 0x1}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xef6a, 0x80}}, @IFLA_VF_TRUST={0xc, 0x9, {0x0, 0xfffffc01}}]}, {0xb8, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7ff, 0x2}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x400, 0x7fffffff}}, @IFLA_VF_VLAN_LIST={0x90, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xf5}}, {0x14, 0x1, {0x9, 0xd1e, 0xfffffff9, 0x8100}}, {0x14, 0x1, {0x3c8e, 0xcc2, 0x9, 0x88a8}}, {0x14, 0x1, {0x5, 0x0, 0x0, 0x88a8}}, {0x14, 0x1, {0x7fff, 0x5ae, 0x1, 0x8100}}, {0x14, 0x1, {0xe8b, 0x97a, 0xcf, 0x88a8}}, {0x14, 0x1, {0x5, 0xc7e}}]}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x80000000, 0x100}}]}]}, @IFLA_TXQLEN={0x8, 0xd, 0xffffffff}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) 21:09:15 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xe00000000000000, 0x0, 0x0}) [ 1059.329772][T22177] binder: 22175:22177 unknown command 0 [ 1059.341812][T22177] binder: 22175:22177 ioctl c0306201 20000400 returned -22 21:09:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@setlink={0x1c4, 0x13, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40408}, [@IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_vlan\x00'}, {0x14, 0x35, 'syzkaller1\x00'}, {0x14, 0x35, 'vlan0\x00'}]}, @IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_LINK_NETNSID={0x8}, @IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'veth1_to_team\x00'}, @IFLA_VFINFO_LIST={0x120, 0x16, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x447b47c1, 0x40, 0x132}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xa095, 0xfffffeff}}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3, 0x2}}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x0, 0x0, 0x1}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xef6a, 0x80}}, @IFLA_VF_TRUST={0xc, 0x9, {0x0, 0xfffffc01}}]}, {0xb8, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7ff, 0x2}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x400, 0x7fffffff}}, @IFLA_VF_VLAN_LIST={0x90, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xf5}}, {0x14, 0x1, {0x9, 0xd1e, 0xfffffff9, 0x8100}}, {0x14, 0x1, {0x3c8e, 0xcc2, 0x9, 0x88a8}}, {0x14, 0x1, {0x5, 0x0, 0x0, 0x88a8}}, {0x14, 0x1, {0x7fff, 0x5ae, 0x1, 0x8100}}, {0x14, 0x1, {0xe8b, 0x97a, 0xcf, 0x88a8}}, {0x14, 0x1, {0x5, 0xc7e}}]}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x80000000, 0x100}}]}]}, @IFLA_TXQLEN={0x8, 0xd, 0xffffffff}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) [ 1059.375320][T22181] binder: 22179:22181 unknown command 0 [ 1059.392025][T22181] binder: 22179:22181 ioctl c0306201 20000400 returned -22 21:09:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:09:15 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xe630c4000000000, 0x0, 0x0}) 21:09:15 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x963104000000000, 0x0, 0x0}) 21:09:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@setlink={0x1c4, 0x13, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40408}, [@IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_vlan\x00'}, {0x14, 0x35, 'syzkaller1\x00'}, {0x14, 0x35, 'vlan0\x00'}]}, @IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_LINK_NETNSID={0x8}, @IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'veth1_to_team\x00'}, @IFLA_VFINFO_LIST={0x120, 0x16, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x447b47c1, 0x40, 0x132}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xa095, 0xfffffeff}}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3, 0x2}}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x0, 0x0, 0x1}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xef6a, 0x80}}, @IFLA_VF_TRUST={0xc, 0x9, {0x0, 0xfffffc01}}]}, {0xb8, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7ff, 0x2}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x400, 0x7fffffff}}, @IFLA_VF_VLAN_LIST={0x90, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xf5}}, {0x14, 0x1, {0x9, 0xd1e, 0xfffffff9, 0x8100}}, {0x14, 0x1, {0x3c8e, 0xcc2, 0x9, 0x88a8}}, {0x14, 0x1, {0x5, 0x0, 0x0, 0x88a8}}, {0x14, 0x1, {0x7fff, 0x5ae, 0x1, 0x8100}}, {0x14, 0x1, {0xe8b, 0x97a, 0xcf, 0x88a8}}, {0x14, 0x1, {0x5, 0xc7e}}]}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x80000000, 0x100}}]}]}, @IFLA_TXQLEN={0x8, 0xd, 0xffffffff}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) 21:09:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@setlink={0x1c4, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_vlan\x00'}, {0x14, 0x35, 'syzkaller1\x00'}, {0x14, 0x35, 'vlan0\x00'}]}, @IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_LINK_NETNSID={0x8}, @IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'veth1_to_team\x00'}, @IFLA_VFINFO_LIST={0x120, 0x16, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x447b47c1, 0x40, 0x132}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xa095, 0xfffffeff}}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3, 0x2}}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x0, 0x0, 0x1}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xef6a, 0x80}}, @IFLA_VF_TRUST={0xc, 0x9, {0x0, 0xfffffc01}}]}, {0xb8, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7ff, 0x2}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x400, 0x7fffffff}}, @IFLA_VF_VLAN_LIST={0x90, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xf5}}, {0x14, 0x1, {0x9, 0xd1e, 0xfffffff9, 0x8100}}, {0x14, 0x1, {0x3c8e, 0xcc2, 0x9, 0x88a8}}, {0x14, 0x1, {0x5, 0x0, 0x0, 0x88a8}}, {0x14, 0x1, {0x7fff, 0x5ae, 0x1, 0x8100}}, {0x14, 0x1, {0xe8b, 0x97a, 0xcf, 0x88a8}}, {0x14, 0x1, {0x5, 0xc7e}}]}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x80000000, 0x100}}]}]}, @IFLA_TXQLEN={0x8, 0xd, 0xffffffff}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) [ 1059.625707][T22193] binder: 22191:22193 unknown command 0 [ 1059.631033][T22194] binder: 22190:22194 unknown command 0 [ 1059.637804][T22193] binder: 22191:22193 ioctl c0306201 20000400 returned -22 [ 1059.663510][T22194] binder: 22190:22194 ioctl c0306201 20000400 returned -22 21:09:15 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xa00000000000000, 0x0, 0x0}) 21:09:15 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xf630c4000000000, 0x0, 0x0}) [ 1059.737164][T22200] syz_tun: refused to change device tx_queue_len [ 1059.758462][T22200] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 21:09:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@setlink={0x1bc, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_vlan\x00'}, {0x14, 0x35, 'syzkaller1\x00'}, {0x14, 0x35, 'vlan0\x00'}]}, @IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_LINK_NETNSID={0x8}, @IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'veth1_to_team\x00'}, @IFLA_VFINFO_LIST={0x120, 0x16, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x447b47c1, 0x40, 0x132}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xa095, 0xfffffeff}}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3, 0x2}}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x0, 0x0, 0x1}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xef6a, 0x80}}, @IFLA_VF_TRUST={0xc, 0x9, {0x0, 0xfffffc01}}]}, {0xb8, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7ff, 0x2}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x400, 0x7fffffff}}, @IFLA_VF_VLAN_LIST={0x90, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xf5}}, {0x14, 0x1, {0x9, 0xd1e, 0xfffffff9, 0x8100}}, {0x14, 0x1, {0x3c8e, 0xcc2, 0x9, 0x88a8}}, {0x14, 0x1, {0x5, 0x0, 0x0, 0x88a8}}, {0x14, 0x1, {0x7fff, 0x5ae, 0x1, 0x8100}}, {0x14, 0x1, {0xe8b, 0x97a, 0xcf, 0x88a8}}, {0x14, 0x1, {0x5, 0xc7e}}]}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x80000000, 0x100}}]}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) [ 1059.811289][T22204] binder: 22203:22204 unknown command 0 [ 1059.817689][T22205] binder: 22202:22205 unknown command 0 [ 1059.830029][T22204] binder: 22203:22204 ioctl c0306201 20000400 returned -22 [ 1059.835208][T22205] binder: 22202:22205 ioctl c0306201 20000400 returned -22 21:09:15 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xa63084000000000, 0x0, 0x0}) 21:09:15 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x1000000000000000, 0x0, 0x0}) [ 1059.913800][T22210] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1059.979887][T22212] binder: 22211:22212 unknown command 0 [ 1059.994593][T22212] binder: 22211:22212 ioctl c0306201 20000400 returned -22 21:09:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@setlink={0x9c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_vlan\x00'}, {0x14, 0x35, 'syzkaller1\x00'}, {0x14, 0x35, 'vlan0\x00'}]}, @IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_LINK_NETNSID={0x8}, @IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'veth1_to_team\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) [ 1060.026224][T22215] binder: 22213:22215 unknown command 0 [ 1060.056668][T22215] binder: 22213:22215 ioctl c0306201 20000400 returned -22 21:09:16 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x1063084000000000, 0x0, 0x0}) 21:09:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:09:16 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xb00000000000000, 0x0, 0x0}) 21:09:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@setlink={0x88, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_vlan\x00'}, {0x14, 0x35, 'syzkaller1\x00'}, {0x14, 0x35, 'vlan0\x00'}]}, @IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_LINK_NETNSID={0x8}, @IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) [ 1060.188023][T22227] binder: 22220:22227 unknown command 0 [ 1060.191389][T22226] binder: 22223:22226 unknown command 0 [ 1060.202239][T22227] binder: 22220:22227 ioctl c0306201 20000400 returned -22 [ 1060.225538][T22226] binder: 22223:22226 ioctl c0306201 20000400 returned -22 21:09:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@setlink={0x88, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_vlan\x00'}, {0x14, 0x35, 'syzkaller1\x00'}, {0x14, 0x35, 'vlan0\x00'}]}, @IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_LINK_NETNSID={0x8}, @IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) 21:09:16 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x1100000000000000, 0x0, 0x0}) 21:09:16 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xb63000000000000, 0x0, 0x0}) 21:09:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@setlink={0x88, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_vlan\x00'}, {0x14, 0x35, 'syzkaller1\x00'}, {0x14, 0x35, 'vlan0\x00'}]}, @IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_LINK_NETNSID={0x8}, @IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) [ 1060.338718][T22236] binder: 22235:22236 unknown command 0 [ 1060.344577][T22236] binder: 22235:22236 ioctl c0306201 20000400 returned -22 21:09:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@setlink={0x88, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_vlan\x00'}, {0x14, 0x35, 'syzkaller1\x00'}, {0x14, 0x35, 'vlan0\x00'}]}, @IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_LINK_NETNSID={0x8}, @IFLA_IFALIAS={0x14, 0x14, 'veth1_to_team\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) 21:09:16 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x1163484000000000, 0x0, 0x0}) [ 1060.434234][T22241] binder: 22237:22241 unknown command 0 [ 1060.440757][T22241] binder: 22237:22241 ioctl c0306201 20000400 returned -22 21:09:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@setlink={0x88, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_vlan\x00'}, {0x14, 0x35, 'syzkaller1\x00'}, {0x14, 0x35, 'vlan0\x00'}]}, @IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_LINK_NETNSID={0x8}, @IFLA_IFALIAS={0x14, 0x14, 'veth1_to_team\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) 21:09:16 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xc00000000000000, 0x0, 0x0}) [ 1060.507397][T22247] binder: 22246:22247 unknown command 0 [ 1060.513027][T22247] binder: 22246:22247 ioctl c0306201 20000400 returned -22 21:09:16 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x1200000000000000, 0x0, 0x0}) [ 1060.604793][T22252] binder: 22250:22252 unknown command 0 [ 1060.616137][T22252] binder: 22250:22252 ioctl c0306201 20000400 returned -22 21:09:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:09:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@setlink={0x88, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_vlan\x00'}, {0x14, 0x35, 'syzkaller1\x00'}, {0x14, 0x35, 'vlan0\x00'}]}, @IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_LINK_NETNSID={0x8}, @IFLA_IFALIAS={0x14, 0x14, 'veth1_to_team\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) 21:09:16 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xc63000000000000, 0x0, 0x0}) [ 1060.704374][T22256] binder: 22255:22256 unknown command 0 [ 1060.717246][T22256] binder: 22255:22256 ioctl c0306201 20000400 returned -22 21:09:16 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x1263484000000000, 0x0, 0x0}) 21:09:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@setlink={0x94, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_vlan\x00'}, {0x14, 0x35, 'syzkaller1\x00'}, {0x14, 0x35, 'vlan0\x00'}]}, @IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'veth1_to_team\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) [ 1060.818395][T22266] binder: 22262:22266 unknown command 0 [ 1060.823972][T22266] binder: 22262:22266 ioctl c0306201 20000400 returned -22 [ 1060.838117][T22267] binder: 22264:22267 unknown command 0 [ 1060.843680][T22267] binder: 22264:22267 ioctl c0306201 20000400 returned -22 21:09:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@setlink={0x88, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_vlan\x00'}, {0x14, 0x35, 'syzkaller1\x00'}, {0x14, 0x35, 'vlan0\x00'}]}, @IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'veth1_to_team\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) 21:09:16 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x1300000000000000, 0x0, 0x0}) 21:09:16 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xd00000000000000, 0x0, 0x0}) [ 1060.974692][T22276] binder: 22274:22276 unknown command 0 21:09:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@setlink={0x48, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'veth1_to_team\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) [ 1061.017694][T22276] binder: 22274:22276 ioctl c0306201 20000400 returned -22 [ 1061.019527][T22279] binder: 22277:22279 unknown command 0 [ 1061.037249][T21681] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1061.059824][T22279] binder: 22277:22279 ioctl c0306201 20000400 returned -22 21:09:17 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xd63000000000000, 0x0, 0x0}) 21:09:17 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x2000000000000000, 0x0, 0x0}) 21:09:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@setlink={0x48, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'veth1_to_team\x00'}]}, 0x48}}, 0x40) [ 1061.186791][T22288] binder: 22286:22288 unknown command 0 [ 1061.198915][T22288] binder: 22286:22288 ioctl c0306201 20000400 returned -22 [ 1061.215480][T22290] binder: 22287:22290 unknown command 0 [ 1061.225514][T22290] binder: 22287:22290 ioctl c0306201 20000400 returned -22 [ 1061.395644][T21681] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1061.420829][T21681] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1061.454314][T21681] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.473181][T21681] usb 3-1: config 0 descriptor?? [ 1061.966064][T21681] keytouch 0003:0926:3333.002D: fixing up Keytouch IEC report descriptor [ 1061.987145][T21681] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.002D/input/input49 [ 1062.096796][T21681] keytouch 0003:0926:3333.002D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1062.170526][T21681] usb 3-1: USB disconnect, device number 90 21:09:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:09:18 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x2500000000000000, 0x0, 0x0}) 21:09:18 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@setlink={0x48, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'veth1_to_team\x00'}]}, 0x48}}, 0x0) 21:09:18 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xe00000000000000, 0x0, 0x0}) 21:09:18 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_LINKMODE={0x5}]}, 0x3c}}, 0x0) [ 1062.754703][T22342] binder: 22337:22342 unknown command 0 [ 1062.761104][T22343] binder: 22340:22343 unknown command 0 [ 1062.779780][T22342] binder: 22337:22342 ioctl c0306201 20000400 returned -22 [ 1062.782198][T22343] binder: 22340:22343 ioctl c0306201 20000400 returned -22 21:09:18 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x4800000000000000, 0x0, 0x0}) 21:09:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x29, 0x3, 0x0, 0x0) 21:09:18 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xe630c4000000000, 0x0, 0x0}) [ 1062.921652][T22354] binder: 22353:22354 unknown command 0 [ 1062.939181][T22357] binder: 22355:22357 unknown command 0 [ 1062.940526][T22354] binder: 22353:22354 ioctl c0306201 20000400 returned -22 [ 1062.951291][T22357] binder: 22355:22357 ioctl c0306201 20000400 returned -22 21:09:19 executing program 4: prctl$PR_SET_SECUREBITS(0x1c, 0x5b79009a05968f67) 21:09:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x4c00000000000000, 0x0, 0x0}) [ 1063.035430][T21681] usb 3-1: new high-speed USB device number 91 using dummy_hcd 21:09:19 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0xf630c4000000000, 0x0, 0x0}) 21:09:19 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x125f, 0xffffffffffffffff) [ 1063.098883][T22366] binder: 22364:22366 unknown command 0 [ 1063.104518][T22366] binder: 22364:22366 ioctl c0306201 20000400 returned -22 [ 1063.168479][T22371] binder: 22368:22371 unknown command 0 [ 1063.179451][T22371] binder: 22368:22371 ioctl c0306201 20000400 returned -22 [ 1063.405442][T21681] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1063.437196][T21681] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1063.465375][T21681] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.484372][T21681] usb 3-1: config 0 descriptor?? [ 1063.995768][T21681] keytouch 0003:0926:3333.002E: fixing up Keytouch IEC report descriptor [ 1064.027099][T21681] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.002E/input/input50 [ 1064.117436][T21681] keytouch 0003:0926:3333.002E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1064.197336][T10131] usb 3-1: USB disconnect, device number 91 21:09:20 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:09:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x29, 0x14, 0x0, 0x0) 21:09:20 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x5c00000000000000, 0x0, 0x0}) 21:09:20 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x1000000000000000, 0x0, 0x0}) 21:09:20 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x221dcb2, 0x0) [ 1064.765102][T22423] binder: 22420:22423 unknown command 0 [ 1064.780983][T22424] binder: 22421:22424 unknown command 0 [ 1064.789264][T22423] binder: 22420:22423 ioctl c0306201 20000400 returned -22 [ 1064.799959][T22424] binder: 22421:22424 ioctl c0306201 20000400 returned -22 21:09:20 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x6000000000000000, 0x0, 0x0}) 21:09:20 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x1063084000000000, 0x0, 0x0}) 21:09:20 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x35, &(0x7f0000000100), 0x4) [ 1064.929077][T22436] binder: 22435:22436 unknown command 0 [ 1064.949428][T22436] binder: 22435:22436 ioctl c0306201 20000400 returned -22 21:09:21 executing program 4: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x76) [ 1064.976285][T22439] binder: 22437:22439 unknown command 0 [ 1064.995922][T22439] binder: 22437:22439 ioctl c0306201 20000400 returned -22 21:09:21 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x6800000000000000, 0x0, 0x0}) 21:09:21 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x1100000000000000, 0x0, 0x0}) [ 1065.046788][T21681] usb 3-1: new high-speed USB device number 92 using dummy_hcd 21:09:21 executing program 4: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xaefc, 0x0) [ 1065.110408][T22448] binder: 22447:22448 unknown command 0 [ 1065.127959][T22448] binder: 22447:22448 ioctl c0306201 20000400 returned -22 [ 1065.149332][T22451] binder: 22449:22451 unknown command 0 [ 1065.161582][T22451] binder: 22449:22451 ioctl c0306201 20000400 returned -22 [ 1065.415423][T21681] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1065.437650][T21681] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1065.463862][T21681] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.496467][T21681] usb 3-1: config 0 descriptor?? [ 1065.975620][T21681] keytouch 0003:0926:3333.002F: fixing up Keytouch IEC report descriptor [ 1065.994262][T21681] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.002F/input/input51 [ 1066.127251][T21681] keytouch 0003:0926:3333.002F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1066.178267][ T9699] usb 3-1: USB disconnect, device number 92 21:09:22 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:09:22 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x6c00000000000000, 0x0, 0x0}) 21:09:22 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x9, [@var={0x8}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000080)=""/231, 0x31, 0xe7, 0x1}, 0x20) 21:09:22 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x1163484000000000, 0x0, 0x0}) 21:09:22 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$vcs(0xffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1066.782638][T22505] binder: 22500:22505 unknown command 0 [ 1066.795122][T22506] binder: 22502:22506 unknown command 0 [ 1066.803373][T22505] binder: 22500:22505 ioctl c0306201 20000400 returned -22 [ 1066.821801][T22506] binder: 22502:22506 ioctl c0306201 20000400 returned -22 21:09:22 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x1200000000000000, 0x0, 0x0}) 21:09:22 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x7400000000000000, 0x0, 0x0}) [ 1066.954497][T22518] binder: 22516:22518 unknown command 0 [ 1066.976859][T22518] binder: 22516:22518 ioctl c0306201 20000400 returned -22 [ 1066.984883][T22519] binder: 22517:22519 unknown command 0 [ 1067.014603][T22519] binder: 22517:22519 ioctl c0306201 20000400 returned -22 [ 1067.021921][T21681] usb 3-1: new high-speed USB device number 93 using dummy_hcd 21:09:23 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x1263484000000000, 0x0, 0x0}) 21:09:23 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x7a00000000000000, 0x0, 0x0}) [ 1067.173365][T22527] binder: 22525:22527 unknown command 0 [ 1067.175474][T22530] binder: 22526:22530 unknown command 0 [ 1067.192178][T22530] binder: 22526:22530 ioctl c0306201 20000400 returned -22 [ 1067.198040][T22527] binder: 22525:22527 ioctl c0306201 20000400 returned -22 21:09:23 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x2, 0x0}) 21:09:23 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0xda, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000480)='/proc/schedstat\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 21:09:23 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x19, 0x0, 0x7) [ 1067.319133][T22540] binder: 22536:22540 unknown command 0 [ 1067.349468][T22540] binder: 22536:22540 ioctl c0306201 20000400 returned -22 [ 1067.396646][T21681] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1067.420792][T21681] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1067.460478][T21681] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.481821][T21681] usb 3-1: config 0 descriptor?? [ 1067.976632][T21681] keytouch 0003:0926:3333.0030: fixing up Keytouch IEC report descriptor [ 1067.997878][T21681] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0030/input/input52 [ 1068.106651][T21681] keytouch 0003:0926:3333.0030: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1068.178319][T21681] usb 3-1: USB disconnect, device number 93 21:09:24 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:09:24 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x1300000000000000, 0x0, 0x0}) 21:09:24 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1b) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 21:09:24 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x3, 0x0}) [ 1068.779018][T22588] binder: 22585:22588 unknown command 0 [ 1068.791536][T22591] binder: 22587:22591 unknown command 0 [ 1068.806855][T22588] binder: 22585:22588 ioctl c0306201 20000400 returned -22 [ 1068.819712][T22591] binder: 22587:22591 ioctl c0306201 20000400 returned -22 21:09:24 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x2000000000000000, 0x0, 0x0}) 21:09:24 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x4, 0x0}) 21:09:24 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1b) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) [ 1068.960851][T22601] binder: 22600:22601 unknown command 0 [ 1068.978637][T22601] binder: 22600:22601 ioctl c0306201 20000400 returned -22 21:09:25 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x2500000000000000, 0x0, 0x0}) [ 1069.008107][T22605] binder: 22602:22605 unknown command 0 [ 1069.040741][T22605] binder: 22602:22605 ioctl c0306201 20000400 returned -22 [ 1069.044769][T21681] usb 3-1: new high-speed USB device number 94 using dummy_hcd 21:09:25 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1b) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 21:09:25 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x5, 0x0}) [ 1069.136593][T22613] binder: 22611:22613 unknown command 0 [ 1069.152135][T22613] binder: 22611:22613 ioctl c0306201 20000400 returned -22 21:09:25 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x4800000000000000, 0x0, 0x0}) [ 1069.220181][T22619] binder: 22617:22619 unknown command 0 [ 1069.236896][T22619] binder: 22617:22619 ioctl c0306201 20000400 returned -22 [ 1069.253901][T22623] binder: 22621:22623 unknown command 0 21:09:25 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1b) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) [ 1069.283554][T22623] binder: 22621:22623 ioctl c0306201 20000400 returned -22 [ 1069.444872][T21681] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1069.464735][T21681] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1069.494011][T21681] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.516743][T21681] usb 3-1: config 0 descriptor?? [ 1069.995208][T21681] keytouch 0003:0926:3333.0031: fixing up Keytouch IEC report descriptor [ 1070.024570][T21681] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0031/input/input53 [ 1070.116121][T21681] keytouch 0003:0926:3333.0031: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1070.198687][T21681] usb 3-1: USB disconnect, device number 94 21:09:26 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:09:26 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x6, 0x0}) 21:09:26 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x4c00000000000000, 0x0, 0x0}) 21:09:26 executing program 4: gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1b) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 21:09:26 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x7, 0x0}) [ 1070.798230][T22677] binder: 22673:22677 unknown command 0 [ 1070.804256][T22677] binder: 22673:22677 ioctl c0306201 20000400 returned -22 [ 1070.820163][T22678] binder: 22675:22678 unknown command 0 [ 1070.826855][T22678] binder: 22675:22678 ioctl c0306201 20000400 returned -22 21:09:26 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x5c00000000000000, 0x0, 0x0}) [ 1070.872479][T22685] binder: 22682:22685 unknown command 0 [ 1070.886109][T22685] binder: 22682:22685 ioctl c0306201 20000400 returned -22 21:09:27 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x8, 0x0}) 21:09:27 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x6000000000000000, 0x0, 0x0}) [ 1070.927571][T22688] binder: 22686:22688 unknown command 0 [ 1070.933467][T22688] binder: 22686:22688 ioctl c0306201 20000400 returned -22 21:09:27 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x9, 0x0}) [ 1071.023554][T22696] binder: 22693:22696 unknown command 0 [ 1071.026349][T22695] binder: 22694:22695 unknown command 0 [ 1071.029231][T22696] binder: 22693:22696 ioctl c0306201 20000400 returned -22 [ 1071.055877][T22695] binder: 22694:22695 ioctl c0306201 20000400 returned -22 21:09:27 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x6800000000000000, 0x0, 0x0}) [ 1071.136295][T22701] binder: 22699:22701 unknown command 0 [ 1071.154515][T22701] binder: 22699:22701 ioctl c0306201 20000400 returned -22 [ 1071.180856][T22704] binder: 22702:22704 unknown command 0 21:09:27 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0xa, 0x0}) 21:09:27 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x6c00000000000000, 0x0, 0x0}) [ 1071.188189][T22704] binder: 22702:22704 ioctl c0306201 20000400 returned -22 [ 1071.245963][T22708] binder: 22706:22708 unknown command 0 [ 1071.263195][T22708] binder: 22706:22708 ioctl c0306201 20000400 returned -22 21:09:27 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:09:27 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0xb, 0x0}) [ 1071.324894][T22710] binder: 22709:22710 unknown command 0 [ 1071.330459][T22710] binder: 22709:22710 ioctl c0306201 20000400 returned -22 21:09:27 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0xc, 0x0}) [ 1071.366123][T22715] binder: 22714:22715 unknown command 0 [ 1071.372044][T22715] binder: 22714:22715 ioctl c0306201 20000400 returned -22 [ 1071.425115][T22720] binder: 22719:22720 unknown command 0 [ 1071.430744][T22720] binder: 22719:22720 ioctl c0306201 20000400 returned -22 21:09:27 executing program 4: gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1b) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 21:09:27 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x7400000000000000, 0x0, 0x0}) 21:09:27 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0xd, 0x0}) [ 1071.667855][T22730] binder: 22726:22730 unknown command 0 [ 1071.677202][T22729] binder: 22727:22729 unknown command 0 [ 1071.678156][T22730] binder: 22726:22730 ioctl c0306201 20000400 returned -22 [ 1071.690001][T22729] binder: 22727:22729 ioctl c0306201 20000400 returned -22 21:09:27 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x7a00000000000000, 0x0, 0x0}) 21:09:27 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0xe, 0x0}) [ 1071.800061][T22737] binder: 22736:22737 unknown command 0 [ 1071.816007][T22739] binder: 22738:22739 unknown command 0 [ 1071.816636][T22737] binder: 22736:22737 ioctl c0306201 20000400 returned -22 [ 1071.844658][T22739] binder: 22738:22739 ioctl c0306201 20000400 returned -22 21:09:27 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x2, 0x0}) 21:09:27 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:09:27 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x10, 0x0}) [ 1071.975918][T22749] binder: 22744:22749 unknown command 0 [ 1071.994764][T22751] binder: 22747:22751 unknown command 0 [ 1072.000454][T22749] binder: 22744:22749 ioctl c0306201 20000400 returned -22 21:09:28 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x3, 0x0}) [ 1072.031172][T22751] binder: 22747:22751 ioctl c0306201 20000400 returned -22 21:09:28 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x11, 0x0}) [ 1072.127041][T22758] binder: 22755:22758 unknown command 0 [ 1072.133229][T22758] binder: 22755:22758 ioctl c0306201 20000400 returned -22 21:09:28 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x4, 0x0}) [ 1072.187972][T22761] binder: 22759:22761 unknown command 0 [ 1072.204461][T22761] binder: 22759:22761 ioctl c0306201 20000400 returned -22 21:09:28 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x12, 0x0}) [ 1072.265016][T22765] binder: 22763:22765 unknown command 0 [ 1072.282473][T22765] binder: 22763:22765 ioctl c0306201 20000400 returned -22 [ 1072.364184][T22769] binder: 22767:22769 unknown command 0 [ 1072.371973][T22769] binder: 22767:22769 ioctl c0306201 20000400 returned -22 21:09:28 executing program 4: gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1b) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 21:09:28 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x5, 0x0}) 21:09:28 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x13, 0x0}) 21:09:28 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) [ 1072.583497][T22780] binder: 22775:22780 unknown command 0 [ 1072.586384][T22779] binder: 22776:22779 unknown command 0 [ 1072.599498][T22780] binder: 22775:22780 ioctl c0306201 20000400 returned -22 [ 1072.615446][T22779] binder: 22776:22779 ioctl c0306201 20000400 returned -22 21:09:28 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x6, 0x0}) 21:09:28 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x25, 0x0}) [ 1072.720457][T22789] binder: 22787:22789 unknown command 0 [ 1072.734154][T22789] binder: 22787:22789 ioctl c0306201 20000400 returned -22 [ 1072.744908][T22790] binder: 22788:22790 unknown command 0 [ 1072.763623][T22790] binder: 22788:22790 ioctl c0306201 20000400 returned -22 21:09:28 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x48, 0x0}) 21:09:28 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x7, 0x0}) [ 1072.864317][ T5] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1072.906100][T22797] binder: 22795:22797 unknown command 0 [ 1072.916111][T22797] binder: 22795:22797 ioctl c0306201 20000400 returned -22 [ 1072.944197][T22799] binder: 22798:22799 unknown command 0 [ 1072.960029][T22799] binder: 22798:22799 ioctl c0306201 20000400 returned -22 21:09:29 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x4c, 0x0}) 21:09:29 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x8, 0x0}) [ 1073.064290][ T5] usb 3-1: device descriptor read/64, error 18 [ 1073.074133][T22804] binder: 22803:22804 unknown command 0 [ 1073.090411][T22804] binder: 22803:22804 ioctl c0306201 20000400 returned -22 21:09:29 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x5c, 0x0}) [ 1073.121761][T22806] binder: 22805:22806 unknown command 0 [ 1073.132947][T22806] binder: 22805:22806 ioctl c0306201 20000400 returned -22 21:09:29 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x9, 0x0}) [ 1073.214622][T22812] binder: 22811:22812 unknown command 0 [ 1073.228203][T22812] binder: 22811:22812 ioctl c0306201 20000400 returned -22 [ 1073.251281][T22814] binder: 22813:22814 unknown command 0 [ 1073.263231][T22814] binder: 22813:22814 ioctl c0306201 20000400 returned -22 21:09:29 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1b) tkill(r0, 0x1000000000016) [ 1073.339074][ T5] usb 3-1: new high-speed USB device number 96 using dummy_hcd 21:09:29 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0xa, 0x0}) 21:09:29 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x60, 0x0}) [ 1073.447842][T22825] binder: 22823:22825 unknown command 0 [ 1073.462526][T22827] binder: 22824:22827 unknown command 0 [ 1073.473592][T22825] binder: 22823:22825 ioctl c0306201 20000400 returned -22 [ 1073.489972][T22827] binder: 22824:22827 ioctl c0306201 20000400 returned -22 [ 1073.544260][ T5] usb 3-1: device descriptor read/64, error 18 [ 1073.664275][ T5] usb usb3-port1: attempt power cycle [ 1074.374221][ T5] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1074.464298][ T5] usb 3-1: Invalid ep0 maxpacket: 0 [ 1074.614213][ T5] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1074.704320][ T5] usb 3-1: Invalid ep0 maxpacket: 0 [ 1074.709617][ T5] usb usb3-port1: unable to enumerate USB device 21:09:31 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:09:31 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0xb, 0x0}) 21:09:31 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x68, 0x0}) [ 1075.683297][T22843] binder: 22841:22843 unknown command 0 [ 1075.690275][T22845] binder: 22842:22845 unknown command 0 [ 1075.697228][T22843] binder: 22841:22843 ioctl c0306201 20000400 returned -22 [ 1075.706292][T22845] binder: 22842:22845 ioctl c0306201 20000400 returned -22 21:09:31 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x6c, 0x0}) 21:09:31 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0xc, 0x0}) [ 1075.820548][T22851] binder: 22849:22851 unknown command 0 [ 1075.834347][T22851] binder: 22849:22851 ioctl c0306201 20000400 returned -22 [ 1075.842195][T22852] binder: 22850:22852 unknown command 0 [ 1075.864621][T22852] binder: 22850:22852 ioctl c0306201 20000400 returned -22 21:09:31 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x74, 0x0}) 21:09:31 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0xd, 0x0}) [ 1075.960875][T22858] binder: 22857:22858 unknown command 0 [ 1075.981177][T22858] binder: 22857:22858 ioctl c0306201 20000400 returned -22 [ 1075.985664][T22860] binder: 22859:22860 unknown command 0 [ 1076.005642][T22860] binder: 22859:22860 ioctl c0306201 20000400 returned -22 21:09:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x7a, 0x0}) 21:09:32 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0xe, 0x0}) [ 1076.043964][T11631] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1076.113604][T22867] binder: 22865:22867 unknown command 0 [ 1076.117596][T22868] binder: 22866:22868 unknown command 0 [ 1076.131052][T22867] binder: 22865:22867 ioctl c0306201 20000400 returned -22 [ 1076.134851][T22868] binder: 22866:22868 ioctl c0306201 20000400 returned -22 [ 1076.260793][T11631] usb 3-1: device descriptor read/64, error 18 21:09:32 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1b) tkill(r0, 0x1000000000016) 21:09:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x300, 0x0}) 21:09:32 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x10, 0x0}) [ 1076.493185][T22879] binder: 22877:22879 unknown command 0 [ 1076.501372][T22881] binder: 22876:22881 unknown command 0 [ 1076.511337][T22879] binder: 22877:22879 ioctl c0306201 20000400 returned -22 [ 1076.527001][T22881] binder: 22876:22881 ioctl c0306201 20000400 returned -22 [ 1076.534492][T11631] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1076.733890][T11631] usb 3-1: device descriptor read/64, error 18 [ 1076.853934][T11631] usb usb3-port1: attempt power cycle [ 1077.563799][T11631] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1077.663993][T11631] usb 3-1: Invalid ep0 maxpacket: 0 [ 1077.813833][T11631] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1077.903941][T11631] usb 3-1: Invalid ep0 maxpacket: 0 [ 1077.909287][T11631] usb usb3-port1: unable to enumerate USB device 21:09:34 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:09:34 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x500, 0x0}) 21:09:34 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x11, 0x0}) 21:09:34 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x12, 0x0}) [ 1078.701880][T22897] binder: 22894:22897 unknown command 0 [ 1078.708066][T22896] binder: 22893:22896 unknown command 0 [ 1078.714872][T22896] binder: 22893:22896 ioctl c0306201 20000400 returned -22 [ 1078.734228][T22897] binder: 22894:22897 ioctl c0306201 20000400 returned -22 21:09:34 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x600, 0x0}) 21:09:34 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x13, 0x0}) [ 1078.808776][T22903] binder: 22902:22903 unknown command 0 [ 1078.833660][T22903] binder: 22902:22903 ioctl c0306201 20000400 returned -22 [ 1078.906781][T22908] binder: 22905:22908 unknown command 0 [ 1078.912348][T22908] binder: 22905:22908 ioctl c0306201 20000400 returned -22 [ 1078.919363][T22909] binder: 22907:22909 unknown command 0 [ 1078.933193][T22909] binder: 22907:22909 ioctl c0306201 20000400 returned -22 21:09:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x25, 0x0}) 21:09:35 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x700, 0x0}) [ 1079.046255][T22914] binder: 22913:22914 unknown command 0 [ 1079.057914][T22914] binder: 22913:22914 ioctl c0306201 20000400 returned -22 21:09:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x48, 0x0}) [ 1079.093791][T21681] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1079.107440][T22916] binder: 22915:22916 unknown command 0 [ 1079.112998][T22916] binder: 22915:22916 ioctl c0306201 20000400 returned -22 [ 1079.163939][T22920] binder: 22919:22920 unknown command 0 [ 1079.169518][T22920] binder: 22919:22920 ioctl c0306201 20000400 returned -22 [ 1079.283612][T21681] usb 3-1: device descriptor read/64, error 18 21:09:35 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1b) tkill(r0, 0x1000000000016) 21:09:35 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x900, 0x0}) 21:09:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x4c, 0x0}) [ 1079.480820][T22927] binder: 22926:22927 unknown command 0 [ 1079.486854][T22928] binder: 22925:22928 unknown command 0 [ 1079.496287][T22927] binder: 22926:22927 ioctl c0306201 20000400 returned -22 [ 1079.518444][T22928] binder: 22925:22928 ioctl c0306201 20000400 returned -22 [ 1079.554928][T21681] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1079.743540][T21681] usb 3-1: device descriptor read/64, error 18 [ 1079.865144][T21681] usb usb3-port1: attempt power cycle [ 1080.573445][T21681] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1080.664750][T21681] usb 3-1: Invalid ep0 maxpacket: 0 [ 1080.813478][T21681] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1080.904724][T21681] usb 3-1: Invalid ep0 maxpacket: 0 [ 1080.910003][T21681] usb usb3-port1: unable to enumerate USB device 21:09:37 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:09:37 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x5c, 0x0}) 21:09:37 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0xa00, 0x0}) [ 1081.740635][T22947] binder: 22945:22947 unknown command 0 [ 1081.744994][T22948] binder: 22944:22948 unknown command 0 [ 1081.752232][T22947] binder: 22945:22947 ioctl c0306201 20000400 returned -22 [ 1081.755156][T22948] binder: 22944:22948 ioctl c0306201 20000400 returned -22 21:09:37 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0xb00, 0x0}) 21:09:37 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x60, 0x0}) [ 1081.882909][T22955] binder: 22953:22955 unknown command 0 [ 1081.896526][T22956] binder: 22954:22956 unknown command 0 [ 1081.897381][T22955] binder: 22953:22955 ioctl c0306201 20000400 returned -22 [ 1081.919384][T22956] binder: 22954:22956 ioctl c0306201 20000400 returned -22 21:09:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0xb63, 0x0}) 21:09:38 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x68, 0x0}) [ 1082.031269][T22963] binder: 22960:22963 unknown command 0 [ 1082.041851][T22964] binder: 22962:22964 unknown command 0 [ 1082.049016][T22963] binder: 22960:22963 ioctl c0306201 20000400 returned -22 [ 1082.052910][T22964] binder: 22962:22964 ioctl c0306201 20000400 returned -22 21:09:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0xc00, 0x0}) 21:09:38 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x6c, 0x0}) [ 1082.175821][T22969] binder: 22968:22969 unknown command 0 [ 1082.193289][T10131] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1082.202131][T22969] binder: 22968:22969 ioctl c0306201 20000400 returned -22 [ 1082.216292][T22971] binder: 22970:22971 unknown command 0 [ 1082.237208][T22971] binder: 22970:22971 ioctl c0306201 20000400 returned -22 21:09:38 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1b) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 21:09:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0xc63, 0x0}) 21:09:38 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x74, 0x0}) [ 1082.573699][T22982] binder: 22980:22982 unknown command 0 [ 1082.583383][T22982] binder: 22980:22982 ioctl c0306201 20000400 returned -22 [ 1082.584598][T22983] binder: 22981:22983 unknown command 0 [ 1082.613508][T10131] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1082.636048][T22983] binder: 22981:22983 ioctl c0306201 20000400 returned -22 [ 1082.642790][T10131] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1082.670296][T10131] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.698470][T10131] usb 3-1: config 0 descriptor?? [ 1082.765898][T10131] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 21:09:40 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:09:40 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1b) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 21:09:40 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0xd00, 0x0}) 21:09:40 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x7a, 0x0}) [ 1084.724500][T11631] usb 3-1: USB disconnect, device number 107 21:09:40 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1b) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) [ 1084.785561][T23008] binder: 23006:23008 unknown command 0 [ 1084.795740][T23011] binder: 23005:23011 unknown command 0 [ 1084.805668][T23008] binder: 23006:23008 ioctl c0306201 20000400 returned -22 [ 1084.816762][T23011] binder: 23005:23011 ioctl c0306201 20000400 returned -22 21:09:40 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x300, 0x0}) 21:09:40 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0xd63, 0x0}) 21:09:40 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1b) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) [ 1084.945891][T23020] binder: 23018:23020 unknown command 0 [ 1084.951572][T23020] binder: 23018:23020 ioctl c0306201 20000400 returned -22 [ 1084.971311][T23021] binder: 23019:23021 unknown command 0 21:09:41 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x500, 0x0}) 21:09:41 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1b) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) [ 1084.997184][T23021] binder: 23019:23021 ioctl c0306201 20000400 returned -22 21:09:41 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0xe00, 0x0}) [ 1085.056675][T23028] binder: 23025:23028 unknown command 0 [ 1085.074872][T23028] binder: 23025:23028 ioctl c0306201 20000400 returned -22 21:09:41 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x600, 0x0}) [ 1085.148030][T23034] binder: 23033:23034 unknown command 0 [ 1085.164556][T23034] binder: 23033:23034 ioctl c0306201 20000400 returned -22 [ 1085.181108][T11631] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1085.204600][T23036] binder: 23035:23036 unknown command 0 [ 1085.223059][T23036] binder: 23035:23036 ioctl c0306201 20000400 returned -22 [ 1085.553126][T11631] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1085.589715][T11631] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1085.622882][T11631] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.631839][T11631] usb 3-1: config 0 descriptor?? [ 1085.686229][T11631] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 21:09:43 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:09:43 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1b) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 21:09:43 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x1100, 0x0}) 21:09:43 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x700, 0x0}) [ 1087.776826][T10131] usb 3-1: USB disconnect, device number 108 21:09:43 executing program 4: r0 = gettid() r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1b) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) [ 1087.878674][T23066] binder: 23061:23066 unknown command 0 [ 1087.889022][T23065] binder: 23060:23065 unknown command 0 [ 1087.899068][T23066] binder: 23061:23066 ioctl c0306201 20000400 returned -22 [ 1087.903482][T23065] binder: 23060:23065 ioctl c0306201 20000400 returned -22 21:09:44 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x1200, 0x0}) 21:09:44 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x900, 0x0}) [ 1088.029895][T23076] binder: 23073:23076 unknown command 0 [ 1088.044023][T23076] binder: 23073:23076 ioctl c0306201 20000400 returned -22 [ 1088.044447][T23077] binder: 23074:23077 unknown command 0 21:09:44 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x1300, 0x0}) [ 1088.096273][T23077] binder: 23074:23077 ioctl c0306201 20000400 returned -22 21:09:44 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0xa00, 0x0}) [ 1088.141180][T23082] binder: 23080:23082 unknown command 0 [ 1088.155391][T23082] binder: 23080:23082 ioctl c0306201 20000400 returned -22 21:09:44 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x2000, 0x0}) [ 1088.222608][T10131] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1088.246374][T23087] binder: 23086:23087 unknown command 0 [ 1088.260928][T23087] binder: 23086:23087 ioctl c0306201 20000400 returned -22 21:09:44 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0xb00, 0x0}) [ 1088.277260][T23089] binder: 23088:23089 unknown command 0 [ 1088.302629][T23089] binder: 23088:23089 ioctl c0306201 20000400 returned -22 21:09:44 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x2500, 0x0}) [ 1088.381973][T23095] binder: 23094:23095 unknown command 0 [ 1088.402347][T23095] binder: 23094:23095 ioctl c0306201 20000400 returned -22 [ 1088.447030][T23097] binder: 23096:23097 unknown command 0 [ 1088.456699][T23097] binder: 23096:23097 ioctl c0306201 20000400 returned -22 [ 1088.603638][T10131] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1088.618266][T10131] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1088.642857][T10131] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.661907][T10131] usb 3-1: config 0 descriptor?? [ 1088.714694][T10131] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 21:09:46 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:09:46 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0xb63, 0x0}) 21:09:46 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x4800, 0x0}) [ 1090.847648][ T42] usb 3-1: USB disconnect, device number 109 21:09:46 executing program 4: r0 = gettid() r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1b) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) [ 1090.913001][T23118] binder: 23114:23118 unknown command 0 [ 1090.918628][T23118] binder: 23114:23118 ioctl c0306201 20000400 returned -22 [ 1090.937522][T23120] binder: 23113:23120 unknown command 0 [ 1090.950867][T23120] binder: 23113:23120 ioctl c0306201 20000400 returned -22 21:09:47 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0xc00, 0x0}) 21:09:47 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x4c00, 0x0}) [ 1091.085551][T23131] binder: 23128:23131 unknown command 0 [ 1091.091125][T23131] binder: 23128:23131 ioctl c0306201 20000400 returned -22 [ 1091.109256][T23132] binder: 23129:23132 unknown command 0 [ 1091.123497][T23132] binder: 23129:23132 ioctl c0306201 20000400 returned -22 21:09:47 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0xc63, 0x0}) 21:09:47 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x5c00, 0x0}) [ 1091.195308][T23137] binder: 23136:23137 unknown command 0 [ 1091.207462][T23137] binder: 23136:23137 ioctl c0306201 20000400 returned -22 21:09:47 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0xd00, 0x0}) [ 1091.272533][T23143] binder: 23140:23143 unknown command 0 [ 1091.293254][T23143] binder: 23140:23143 ioctl c0306201 20000400 returned -22 [ 1091.314126][T23145] binder: 23144:23145 unknown command 0 [ 1091.321895][T23145] binder: 23144:23145 ioctl c0306201 20000400 returned -22 [ 1091.352832][ T42] usb 3-1: new high-speed USB device number 110 using dummy_hcd 21:09:47 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x6000, 0x0}) 21:09:47 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0xd63, 0x0}) [ 1091.430484][T23152] binder: 23150:23152 unknown command 0 [ 1091.442253][T23152] binder: 23150:23152 ioctl c0306201 20000400 returned -22 [ 1091.464679][T23153] binder: 23151:23153 unknown command 0 [ 1091.475826][T23153] binder: 23151:23153 ioctl c0306201 20000400 returned -22 21:09:47 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x630b, 0x0}) [ 1091.577332][T23159] binder: 23158:23159 unknown command 0 [ 1091.589647][T23159] binder: 23158:23159 ioctl c0306201 20000400 returned -22 [ 1091.742287][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1091.759292][ T42] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1091.771628][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.792948][ T42] usb 3-1: config 0 descriptor?? [ 1091.844694][ T42] usbhid 3-1:0.0: can't add hid device: -22 [ 1091.850635][ T42] usbhid: probe of 3-1:0.0 failed with error -22 21:09:49 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:09:49 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0xe00, 0x0}) 21:09:49 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x630c, 0x0}) [ 1093.914431][T21681] usb 3-1: USB disconnect, device number 110 21:09:50 executing program 4: r0 = gettid() r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1b) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) [ 1094.000052][T23179] binder: 23177:23179 unknown command 0 [ 1094.008162][T23181] binder: 23176:23181 unknown command 0 [ 1094.018224][T23179] binder: 23177:23179 ioctl c0306201 20000400 returned -22 [ 1094.031846][T23181] binder: 23176:23181 ioctl c0306201 20000400 returned -22 21:09:50 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x630d, 0x0}) 21:09:50 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x1100, 0x0}) [ 1094.146009][T23190] binder: 23188:23190 unknown command 0 [ 1094.149919][T23191] binder: 23189:23191 unknown command 0 [ 1094.165237][T23190] binder: 23188:23190 ioctl c0306201 20000400 returned -22 [ 1094.184553][T23191] binder: 23189:23191 ioctl c0306201 20000400 returned -22 21:09:50 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x6800, 0x0}) 21:09:50 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x1200, 0x0}) [ 1094.298929][T23199] binder: 23196:23199 unknown command 0 [ 1094.314884][T23199] binder: 23196:23199 ioctl c0306201 20000400 returned -22 [ 1094.336153][T23201] binder: 23197:23201 unknown command 0 21:09:50 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x6c00, 0x0}) [ 1094.351936][T21681] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1094.361612][T23201] binder: 23197:23201 ioctl c0306201 20000400 returned -22 21:09:50 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x1300, 0x0}) [ 1094.444929][T23207] binder: 23204:23207 unknown command 0 [ 1094.463664][T23207] binder: 23204:23207 ioctl c0306201 20000400 returned -22 21:09:50 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x7400, 0x0}) [ 1094.501764][T23210] binder: 23208:23210 unknown command 0 [ 1094.524330][T23210] binder: 23208:23210 ioctl c0306201 20000400 returned -22 [ 1094.550436][T23213] binder: 23212:23213 unknown command 0 21:09:50 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x2000, 0x0}) [ 1094.573600][T23213] binder: 23212:23213 ioctl c0306201 20000400 returned -22 [ 1094.659466][T23218] binder: 23216:23218 unknown command 0 [ 1094.678381][T23218] binder: 23216:23218 ioctl c0306201 20000400 returned -22 [ 1094.712161][T21681] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1094.733556][T21681] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1094.759103][T21681] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.801227][T21681] usb 3-1: config 0 descriptor?? [ 1094.854107][T21681] usbhid 3-1:0.0: can't add hid device: -22 [ 1094.880933][T21681] usbhid: probe of 3-1:0.0 failed with error -22 21:09:53 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:09:53 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x7a00, 0x0}) 21:09:53 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x2500, 0x0}) [ 1096.978142][T21681] usb 3-1: USB disconnect, device number 111 21:09:53 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1b) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x1000000000016) [ 1097.054401][T23237] binder: 23230:23237 unknown command 0 [ 1097.059006][T23236] binder: 23231:23236 unknown command 0 [ 1097.066829][T23237] binder: 23230:23237 ioctl c0306201 20000400 returned -22 [ 1097.086386][T23236] binder: 23231:23236 ioctl c0306201 20000400 returned -22 21:09:53 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x634040, 0x0}) 21:09:53 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x4800, 0x0}) [ 1097.188536][T23247] binder: 23246:23247 unknown command 0 [ 1097.201073][T23247] binder: 23246:23247 ioctl c0306201 20000400 returned -22 [ 1097.225130][T23249] binder: 23248:23249 unknown command 0 [ 1097.237667][T23249] binder: 23248:23249 ioctl c0306201 20000400 returned -22 21:09:53 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x1000000, 0x0}) 21:09:53 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x4c00, 0x0}) [ 1097.362963][T23257] binder: 23255:23257 unknown command 0 [ 1097.377070][T23258] binder: 23256:23258 unknown command 0 [ 1097.381603][T23257] binder: 23255:23257 ioctl c0306201 20000400 returned -22 [ 1097.390759][T23258] binder: 23256:23258 ioctl c0306201 20000400 returned -22 [ 1097.431607][T21681] usb 3-1: new high-speed USB device number 112 using dummy_hcd 21:09:53 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x5c00, 0x0}) 21:09:53 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x1634040, 0x0}) [ 1097.538129][T23267] binder: 23264:23267 unknown command 0 [ 1097.556994][T23268] binder: 23265:23268 unknown command 0 [ 1097.563590][T23267] binder: 23264:23267 ioctl c0306201 20000400 returned -22 [ 1097.571022][T23268] binder: 23265:23268 ioctl c0306201 20000400 returned -22 21:09:53 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x2000000, 0x0}) 21:09:53 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x6000, 0x0}) [ 1097.670415][T23272] binder: 23271:23272 unknown command 0 [ 1097.680057][T23272] binder: 23271:23272 ioctl c0306201 20000400 returned -22 [ 1097.729609][T23277] binder: 23275:23277 unknown command 0 [ 1097.748269][T23277] binder: 23275:23277 ioctl c0306201 20000400 returned -22 [ 1097.801712][T21681] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1097.824522][T21681] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1097.854442][T21681] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.868202][T21681] usb 3-1: config 0 descriptor?? [ 1097.914176][T21681] usbhid 3-1:0.0: can't add hid device: -22 [ 1097.922981][T21681] usbhid: probe of 3-1:0.0 failed with error -22 21:09:56 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) [ 1100.052396][ T9699] usb 3-1: USB disconnect, device number 112 21:09:56 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x2630440, 0x0}) 21:09:56 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x630b, 0x0}) 21:09:56 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1b) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x1000000000016) [ 1100.155195][T23299] binder: 23294:23299 unknown command 0 [ 1100.180234][T23304] binder: 23295:23304 unknown command 0 [ 1100.193865][T23299] binder: 23294:23299 ioctl c0306201 20000400 returned -22 [ 1100.208833][T23304] binder: 23295:23304 ioctl c0306201 20000400 returned -22 21:09:56 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x630c, 0x0}) 21:09:56 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x3000000, 0x0}) [ 1100.314630][T23310] binder: 23308:23310 unknown command 0 [ 1100.326849][T23310] binder: 23308:23310 ioctl c0306201 20000400 returned -22 [ 1100.342594][T23311] binder: 23309:23311 unknown command 0 [ 1100.361073][T23311] binder: 23309:23311 ioctl c0306201 20000400 returned -22 21:09:56 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x630d, 0x0}) 21:09:56 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x3630840, 0x0}) [ 1100.436979][T23317] binder: 23316:23317 unknown command 0 [ 1100.457746][T23317] binder: 23316:23317 ioctl c0306201 20000400 returned -22 21:09:56 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x6800, 0x0}) [ 1100.500008][T23320] binder: 23318:23320 unknown command 0 [ 1100.520209][T23320] binder: 23318:23320 ioctl c0306201 20000400 returned -22 [ 1100.531528][ T9699] usb 3-1: new high-speed USB device number 113 using dummy_hcd 21:09:56 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x4000000, 0x0}) [ 1100.588298][T23325] binder: 23324:23325 unknown command 0 [ 1100.600800][T23325] binder: 23324:23325 ioctl c0306201 20000400 returned -22 21:09:56 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x6c00, 0x0}) [ 1100.646851][T23328] binder: 23326:23328 unknown command 0 [ 1100.660208][T23328] binder: 23326:23328 ioctl c0306201 20000400 returned -22 [ 1100.710452][T23332] binder: 23330:23332 unknown command 0 [ 1100.722893][T23332] binder: 23330:23332 ioctl c0306201 20000400 returned -22 21:09:56 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x4630440, 0x0}) [ 1100.826762][T23336] binder: 23335:23336 unknown command 0 [ 1100.845612][T23336] binder: 23335:23336 ioctl c0306201 20000400 returned -22 [ 1100.932941][ T9699] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1100.953355][ T9699] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1100.985666][ T9699] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1101.017812][ T9699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.041155][ T9699] usb 3-1: config 0 descriptor?? [ 1101.551726][ T9699] keytouch 0003:0926:3333.0032: fixing up Keytouch IEC report descriptor [ 1101.571002][ T9699] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0032/input/input54 [ 1101.673345][ T9699] keytouch 0003:0926:3333.0032: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1101.757628][ T9699] usb 3-1: USB disconnect, device number 113 21:09:58 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:09:58 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x7400, 0x0}) 21:09:58 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x5000000, 0x0}) 21:09:58 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1b) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x1000000000016) [ 1102.347869][T23386] binder: 23382:23386 unknown command 0 [ 1102.362395][T23386] binder: 23382:23386 ioctl c0306201 20000400 returned -22 [ 1102.364168][T23388] binder: 23381:23388 unknown command 0 21:09:58 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x5630440, 0x0}) [ 1102.408883][T23388] binder: 23381:23388 ioctl c0306201 20000400 returned -22 21:09:58 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x7a00, 0x0}) [ 1102.484137][T23396] binder: 23394:23396 unknown command 0 [ 1102.504786][T23396] binder: 23394:23396 ioctl c0306201 20000400 returned -22 21:09:58 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x6000000, 0x0}) [ 1102.540605][T23398] binder: 23397:23398 unknown command 0 [ 1102.559106][T23398] binder: 23397:23398 ioctl c0306201 20000400 returned -22 21:09:58 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x634040, 0x0}) [ 1102.601112][ T5] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1102.664093][T23404] binder: 23403:23404 unknown command 0 [ 1102.677811][T23404] binder: 23403:23404 ioctl c0306201 20000400 returned -22 [ 1102.692560][T23407] binder: 23405:23407 unknown command 0 21:09:58 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x6630440, 0x0}) [ 1102.716478][T23407] binder: 23405:23407 ioctl c0306201 20000400 returned -22 21:09:58 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x1000000, 0x0}) [ 1102.807214][T23412] binder: 23410:23412 unknown command 0 [ 1102.823345][T23412] binder: 23410:23412 ioctl c0306201 20000400 returned -22 21:09:58 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x7000000, 0x0}) [ 1102.856708][T23414] binder: 23413:23414 unknown command 0 [ 1102.878472][T23414] binder: 23413:23414 ioctl c0306201 20000400 returned -22 21:09:59 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x1634040, 0x0}) [ 1102.945507][T23419] binder: 23418:23419 unknown command 0 [ 1102.958927][T23419] binder: 23418:23419 ioctl c0306201 20000400 returned -22 [ 1102.972600][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1103.001272][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1103.041389][T23422] binder: 23420:23422 unknown command 0 [ 1103.045680][ T5] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1103.055760][T23422] binder: 23420:23422 ioctl c0306201 20000400 returned -22 [ 1103.081357][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.124697][ T5] usb 3-1: config 0 descriptor?? [ 1103.632808][ T5] keytouch 0003:0926:3333.0033: fixing up Keytouch IEC report descriptor [ 1103.654300][ T5] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0033/input/input55 [ 1103.762569][ T5] keytouch 0003:0926:3333.0033: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1103.834291][ T5] usb 3-1: USB disconnect, device number 114 21:10:00 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:10:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x7630440, 0x0}) 21:10:00 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x2000000, 0x0}) 21:10:00 executing program 4: r0 = gettid() timer_create(0x0, 0x0, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1b) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) [ 1104.416682][T23472] binder: 23470:23472 unknown command 0 [ 1104.433305][T23472] binder: 23470:23472 ioctl c0306201 20000400 returned -22 [ 1104.456032][T23476] binder: 23473:23476 unknown command 0 [ 1104.467095][T23476] binder: 23473:23476 ioctl c0306201 20000400 returned -22 21:10:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x8000000, 0x0}) 21:10:00 executing program 4: r0 = gettid() timer_create(0x0, 0x0, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1b) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 21:10:00 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x2630440, 0x0}) [ 1104.576048][T23485] binder: 23483:23485 unknown command 0 [ 1104.587102][T23485] binder: 23483:23485 ioctl c0306201 20000400 returned -22 21:10:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x8631040, 0x0}) [ 1104.653315][T23491] binder: 23488:23491 unknown command 0 [ 1104.670885][T10131] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1104.674932][T23491] binder: 23488:23491 ioctl c0306201 20000400 returned -22 21:10:00 executing program 4: r0 = gettid() timer_create(0x0, 0x0, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1b) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) [ 1104.719330][T23494] binder: 23493:23494 unknown command 0 [ 1104.742474][T23494] binder: 23493:23494 ioctl c0306201 20000400 returned -22 21:10:00 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x3000000, 0x0}) 21:10:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x9000000, 0x0}) 21:10:00 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1b) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) [ 1104.848949][T23504] binder: 23502:23504 unknown command 0 [ 1104.862794][T23505] binder: 23503:23505 unknown command 0 [ 1104.863524][T23504] binder: 23502:23504 ioctl c0306201 20000400 returned -22 [ 1104.891537][T23505] binder: 23503:23505 ioctl c0306201 20000400 returned -22 [ 1105.071061][T10131] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1105.091984][T10131] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1105.122281][T10131] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1105.147659][T10131] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.161880][T10131] usb 3-1: config 0 descriptor?? [ 1105.632930][T10131] keytouch 0003:0926:3333.0034: fixing up Keytouch IEC report descriptor [ 1105.654348][T10131] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0034/input/input56 [ 1105.763628][T10131] keytouch 0003:0926:3333.0034: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1105.840221][ T5] usb 3-1: USB disconnect, device number 115 21:10:02 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:10:02 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x3630840, 0x0}) 21:10:02 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x9631040, 0x0}) [ 1106.459776][T23560] binder: 23558:23560 unknown command 0 [ 1106.465917][T23559] binder: 23557:23559 unknown command 0 [ 1106.474200][T23560] binder: 23558:23560 ioctl c0306201 20000400 returned -22 [ 1106.477019][T23559] binder: 23557:23559 ioctl c0306201 20000400 returned -22 21:10:02 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x4000000, 0x0}) 21:10:02 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0xa000000, 0x0}) [ 1106.607695][T23568] binder: 23566:23568 unknown command 0 [ 1106.608428][T23569] binder: 23567:23569 unknown command 0 [ 1106.628772][T23568] binder: 23566:23568 ioctl c0306201 20000400 returned -22 [ 1106.630703][T23569] binder: 23567:23569 ioctl c0306201 20000400 returned -22 21:10:02 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0xa630840, 0x0}) 21:10:02 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x4630440, 0x0}) [ 1106.690636][ T9699] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1106.759683][T23576] binder: 23574:23576 unknown command 0 [ 1106.770855][T23577] binder: 23575:23577 unknown command 0 [ 1106.771944][T23576] binder: 23574:23576 ioctl c0306201 20000400 returned -22 [ 1106.789575][T23577] binder: 23575:23577 ioctl c0306201 20000400 returned -22 21:10:02 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0xb000000, 0x0}) 21:10:02 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x5000000, 0x0}) [ 1106.906942][T23584] binder: 23582:23584 unknown command 0 [ 1106.923019][T23584] binder: 23582:23584 ioctl c0306201 20000400 returned -22 21:10:03 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0xb630000, 0x0}) [ 1106.970622][T23587] binder: 23585:23587 unknown command 0 [ 1106.989557][T23587] binder: 23585:23587 ioctl c0306201 20000400 returned -22 [ 1107.043025][T23590] binder: 23589:23590 unknown command 0 [ 1107.059736][T23590] binder: 23589:23590 ioctl c0306201 20000400 returned -22 21:10:03 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x5630440, 0x0}) [ 1107.112190][ T9699] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1107.133805][ T9699] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1107.161889][ T9699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.183674][ T9699] usb 3-1: config 0 descriptor?? [ 1107.196121][T23595] binder: 23593:23595 unknown command 0 [ 1107.217595][T23595] binder: 23593:23595 ioctl c0306201 20000400 returned -22 [ 1107.740524][ T9699] usbhid 3-1:0.0: can't add hid device: -71 [ 1107.746902][ T9699] usbhid: probe of 3-1:0.0 failed with error -71 [ 1107.776825][ T9699] usb 3-1: USB disconnect, device number 116 21:10:03 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1b) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 21:10:04 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) 21:10:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0xc000000, 0x0}) 21:10:04 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x6000000, 0x0}) [ 1108.240991][T23619] binder: 23617:23619 unknown command 0 [ 1108.256209][T23621] binder: 23618:23621 unknown command 0 [ 1108.263027][T23619] binder: 23617:23619 ioctl c0306201 20000400 returned -22 [ 1108.283848][T23621] binder: 23618:23621 ioctl c0306201 20000400 returned -22 21:10:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0xc630000, 0x0}) 21:10:04 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x6630440, 0x0}) 21:10:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0xd000000, 0x0}) [ 1108.382736][T23629] binder: 23628:23629 unknown command 0 [ 1108.389115][T23629] binder: 23628:23629 ioctl c0306201 20000400 returned -22 21:10:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0xd630000, 0x0}) [ 1108.429496][T23632] binder: 23631:23632 unknown command 0 [ 1108.438735][T23632] binder: 23631:23632 ioctl c0306201 20000400 returned -22 [ 1108.454966][T23634] binder: 23633:23634 unknown command 0 [ 1108.463111][T23634] binder: 23633:23634 ioctl c0306201 20000400 returned -22 21:10:04 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x7000000, 0x0}) [ 1108.510485][ T9699] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1108.526377][T23640] binder: 23639:23640 unknown command 0 [ 1108.544180][T23640] binder: 23639:23640 ioctl c0306201 20000400 returned -22 21:10:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0xe000000, 0x0}) [ 1108.565240][T23642] binder: 23641:23642 unknown command 0 [ 1108.586526][T23642] binder: 23641:23642 ioctl c0306201 20000400 returned -22 21:10:04 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x7630440, 0x0}) [ 1108.639259][T23647] binder: 23645:23647 unknown command 0 [ 1108.653741][T23647] binder: 23645:23647 ioctl c0306201 20000400 returned -22 21:10:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0xe630c40, 0x0}) [ 1108.706937][T23650] binder: 23648:23650 unknown command 0 [ 1108.713305][T23650] binder: 23648:23650 ioctl c0306201 20000400 returned -22 [ 1108.743167][T23653] binder: 23651:23653 unknown command 0 [ 1108.762846][T23653] binder: 23651:23653 ioctl c0306201 20000400 returned -22 [ 1108.922474][ T9699] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1108.943259][ T9699] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1108.972187][ T9699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.002406][ T9699] usb 3-1: config 0 descriptor?? [ 1109.570436][ T9699] usbhid 3-1:0.0: can't add hid device: -71 [ 1109.581909][ T9699] usbhid: probe of 3-1:0.0 failed with error -71 [ 1109.609808][ T9699] usb 3-1: USB disconnect, device number 117 21:10:06 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1b) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 21:10:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0xf630c40, 0x0}) 21:10:06 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x8000000, 0x0}) 21:10:06 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) [ 1110.992314][T23675] binder: 23671:23675 unknown command 0 [ 1110.998431][T23677] binder: 23672:23677 unknown command 0 [ 1111.004524][T23675] binder: 23671:23675 ioctl c0306201 20000400 returned -22 [ 1111.021486][T23677] binder: 23672:23677 ioctl c0306201 20000400 returned -22 21:10:07 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x10000000, 0x0}) 21:10:07 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x8631040, 0x0}) [ 1111.134751][T23687] binder: 23686:23687 unknown command 0 [ 1111.142143][T23687] binder: 23686:23687 ioctl c0306201 20000400 returned -22 [ 1111.171817][T23689] binder: 23688:23689 unknown command 0 21:10:07 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x10630840, 0x0}) [ 1111.186997][T23689] binder: 23688:23689 ioctl c0306201 20000400 returned -22 21:10:07 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x9000000, 0x0}) [ 1111.250232][ T5] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1111.281979][T23695] binder: 23694:23695 unknown command 0 [ 1111.295063][T23695] binder: 23694:23695 ioctl c0306201 20000400 returned -22 21:10:07 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x11000000, 0x0}) [ 1111.327277][T23698] binder: 23696:23698 unknown command 0 [ 1111.347185][T23698] binder: 23696:23698 ioctl c0306201 20000400 returned -22 21:10:07 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x9631040, 0x0}) [ 1111.452984][T23703] binder: 23701:23703 unknown command 0 [ 1111.470531][T23703] binder: 23701:23703 ioctl c0306201 20000400 returned -22 [ 1111.492581][T23705] binder: 23704:23705 unknown command 0 21:10:07 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x11634840, 0x0}) [ 1111.506988][T23705] binder: 23704:23705 ioctl c0306201 20000400 returned -22 21:10:07 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0xa000000, 0x0}) [ 1111.601284][T23710] binder: 23709:23710 unknown command 0 [ 1111.618858][T23710] binder: 23709:23710 ioctl c0306201 20000400 returned -22 [ 1111.641576][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1111.663766][T23712] binder: 23711:23712 unknown command 0 [ 1111.671597][ T5] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1111.701480][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.705131][T23712] binder: 23711:23712 ioctl c0306201 20000400 returned -22 [ 1111.727866][ T5] usb 3-1: config 0 descriptor?? [ 1112.280089][ T5] usbhid 3-1:0.0: can't add hid device: -71 [ 1112.289043][ T5] usbhid: probe of 3-1:0.0 failed with error -71 [ 1112.307584][ T5] usb 3-1: USB disconnect, device number 118 21:10:10 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1b) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 21:10:10 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x12000000, 0x0}) 21:10:10 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0xa630840, 0x0}) 21:10:10 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) [ 1114.079137][T23738] binder: 23735:23738 unknown command 0 [ 1114.081586][T23739] binder: 23734:23739 unknown command 0 [ 1114.094666][T23738] binder: 23735:23738 ioctl c0306201 20000400 returned -22 [ 1114.113966][T23739] binder: 23734:23739 ioctl c0306201 20000400 returned -22 21:10:10 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0xb000000, 0x0}) 21:10:10 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x12634840, 0x0}) [ 1114.228387][T23749] binder: 23747:23749 unknown command 0 [ 1114.241259][T23749] binder: 23747:23749 ioctl c0306201 20000400 returned -22 [ 1114.244082][T23750] binder: 23748:23750 unknown command 0 [ 1114.288518][T23750] binder: 23748:23750 ioctl c0306201 20000400 returned -22 21:10:10 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0xb630000, 0x0}) 21:10:10 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x13000000, 0x0}) [ 1114.349823][ T9699] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1114.390954][T23759] binder: 23755:23759 unknown command 0 [ 1114.391468][T23760] binder: 23756:23760 unknown command 0 [ 1114.396800][T23759] binder: 23755:23759 ioctl c0306201 20000400 returned -22 21:10:10 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0xc000000, 0x0}) [ 1114.471532][T23760] binder: 23756:23760 ioctl c0306201 20000400 returned -22 [ 1114.501583][T23764] binder: 23762:23764 unknown command 0 [ 1114.507372][T23764] binder: 23762:23764 ioctl c0306201 20000400 returned -22 21:10:10 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x20000000, 0x0}) 21:10:10 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0xc630000, 0x0}) [ 1114.591668][T23769] binder: 23768:23769 unknown command 0 [ 1114.597418][T23769] binder: 23768:23769 ioctl c0306201 20000400 returned -22 21:10:10 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x25000000, 0x0}) [ 1114.638868][T23772] binder: 23770:23772 unknown command 0 [ 1114.657569][T23772] binder: 23770:23772 ioctl c0306201 20000400 returned -22 [ 1114.720877][T23776] binder: 23774:23776 unknown command 0 [ 1114.726441][T23776] binder: 23774:23776 ioctl c0306201 20000400 returned -22 [ 1114.742191][ T9699] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1114.769784][ T9699] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1114.778922][ T9699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.820471][ T9699] usb 3-1: config 0 descriptor?? [ 1115.369723][ T9699] usbhid 3-1:0.0: can't add hid device: -71 [ 1115.375789][ T9699] usbhid: probe of 3-1:0.0 failed with error -71 [ 1115.403148][ T9699] usb 3-1: USB disconnect, device number 119 21:10:13 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1b) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 21:10:13 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0xd000000, 0x0}) 21:10:13 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x40046302, 0x0}) 21:10:13 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) [ 1117.112980][T23796] binder: 23795:23796 unknown command 0 [ 1117.134701][T23796] binder: 23795:23796 ioctl c0306201 20000400 returned -22 [ 1117.156056][T23799] binder: 23797:23799 unknown command 0 21:10:13 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0xd630000, 0x0}) [ 1117.173758][T23799] binder: 23797:23799 ioctl c0306201 20000400 returned -22 21:10:13 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x40046304, 0x0}) [ 1117.256087][T23809] binder: 23808:23809 unknown command 0 [ 1117.267248][T23809] binder: 23808:23809 ioctl c0306201 20000400 returned -22 21:10:13 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0xe000000, 0x0}) [ 1117.319938][T23812] binder: 23810:23812 unknown command 0 [ 1117.331476][T23812] binder: 23810:23812 ioctl c0306201 20000400 returned -22 21:10:13 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x40046305, 0x0}) [ 1117.388933][T23817] binder: 23816:23817 unknown command 0 [ 1117.402043][T23817] binder: 23816:23817 ioctl c0306201 20000400 returned -22 [ 1117.430937][ T5] usb 3-1: new high-speed USB device number 120 using dummy_hcd 21:10:13 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0xe630c40, 0x0}) [ 1117.481102][T23821] binder: 23818:23821 unknown command 0 [ 1117.495209][T23821] binder: 23818:23821 ioctl c0306201 20000400 returned -22 21:10:13 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x40046306, 0x0}) [ 1117.544227][T23824] binder: 23822:23824 unknown command 0 [ 1117.565090][T23824] binder: 23822:23824 ioctl c0306201 20000400 returned -22 [ 1117.603003][T23828] binder: 23825:23828 unknown command 0 21:10:13 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0xf630c40, 0x0}) [ 1117.637565][T23828] binder: 23825:23828 ioctl c0306201 20000400 returned -22 21:10:13 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x40046307, 0x0}) [ 1117.679819][T23831] binder: 23829:23831 unknown command 0 [ 1117.698941][T23831] binder: 23829:23831 ioctl c0306201 20000400 returned -22 [ 1117.763015][T23835] binder: 23834:23835 unknown command 0 [ 1117.777593][T23835] binder: 23834:23835 ioctl c0306201 20000400 returned -22 [ 1117.789738][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1117.810988][ T5] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1117.842291][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.881728][ T5] usb 3-1: config 0 descriptor?? [ 1118.419433][ T5] usbhid 3-1:0.0: can't add hid device: -71 [ 1118.425467][ T5] usbhid: probe of 3-1:0.0 failed with error -71 [ 1118.452804][ T5] usb 3-1: USB disconnect, device number 120 21:10:16 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1b) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 21:10:16 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x10000000, 0x0}) 21:10:16 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x40086303, 0x0}) 21:10:16 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) [ 1120.188009][T23856] binder: 23852:23856 unknown command 0 [ 1120.196207][T23857] binder: 23854:23857 unknown command 0 [ 1120.207364][T23856] binder: 23852:23856 ioctl c0306201 20000400 returned -22 [ 1120.223397][T23857] binder: 23854:23857 ioctl c0306201 20000400 returned -22 21:10:16 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x10630840, 0x0}) 21:10:16 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x4008630a, 0x0}) [ 1120.367840][T23866] binder: 23865:23866 unknown command 0 [ 1120.379585][T23868] binder: 23867:23868 unknown command 0 [ 1120.386508][T23866] binder: 23865:23866 ioctl c0306201 20000400 returned -22 [ 1120.393016][T23868] binder: 23867:23868 ioctl c0306201 20000400 returned -22 21:10:16 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x40086310, 0x0}) [ 1120.451438][ T5] usb 3-1: new high-speed USB device number 121 using dummy_hcd 21:10:16 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x11000000, 0x0}) [ 1120.522988][T23874] binder: 23873:23874 unknown command 0 [ 1120.540516][T23874] binder: 23873:23874 ioctl c0306201 20000400 returned -22 [ 1120.542771][T23878] binder: 23875:23878 unknown command 0 [ 1120.566711][T23878] binder: 23875:23878 ioctl c0306201 20000400 returned -22 21:10:16 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x11634840, 0x0}) 21:10:16 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x400c630e, 0x0}) [ 1120.670732][T23883] binder: 23881:23883 unknown command 0 [ 1120.685073][T23883] binder: 23881:23883 ioctl c0306201 20000400 returned -22 [ 1120.703077][T23885] binder: 23884:23885 unknown command 0 21:10:16 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x12000000, 0x0}) [ 1120.716216][T23885] binder: 23884:23885 ioctl c0306201 20000400 returned -22 21:10:16 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x400c630f, 0x0}) [ 1120.812142][T23890] binder: 23888:23890 unknown command 0 [ 1120.817731][T23890] binder: 23888:23890 ioctl c0306201 20000400 returned -22 [ 1120.826379][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1120.852232][ T5] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1120.858346][T23892] binder: 23891:23892 unknown command 0 [ 1120.879159][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.892818][T23892] binder: 23891:23892 ioctl c0306201 20000400 returned -22 [ 1120.916664][ T5] usb 3-1: config 0 descriptor?? [ 1121.491236][ T5] usbhid 3-1:0.0: can't add hid device: -71 [ 1121.497286][ T5] usbhid: probe of 3-1:0.0 failed with error -71 [ 1121.530757][ T5] usb 3-1: USB disconnect, device number 121 21:10:19 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1b) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 21:10:19 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x12634840, 0x0}) 21:10:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x40106308, 0x0}) 21:10:19 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:10:19 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1b) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) [ 1123.210446][T23918] binder: 23912:23918 unknown command 0 [ 1123.212084][T23917] binder: 23914:23917 unknown command 0 [ 1123.223863][T23918] binder: 23912:23918 ioctl c0306201 20000400 returned -22 [ 1123.245452][T23917] binder: 23914:23917 ioctl c0306201 20000400 returned -22 21:10:19 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x13000000, 0x0}) 21:10:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x40106309, 0x0}) 21:10:19 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1b) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) [ 1123.361253][T23932] binder: 23930:23932 unknown command 0 [ 1123.384185][T23932] binder: 23930:23932 ioctl c0306201 20000400 returned -22 [ 1123.398393][T23934] binder: 23933:23934 unknown command 0 21:10:19 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x20000000, 0x0}) [ 1123.432941][T23934] binder: 23933:23934 ioctl c0306201 20000400 returned -22 [ 1123.468971][T11631] usb 3-1: new high-speed USB device number 122 using dummy_hcd 21:10:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x40406300, 0x0}) 21:10:19 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1b) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) [ 1123.523011][T23944] binder: 23943:23944 unknown command 0 [ 1123.539996][T23944] binder: 23943:23944 ioctl c0306201 20000400 returned -22 21:10:19 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x25000000, 0x0}) 21:10:19 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1b) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) [ 1123.591378][T23950] binder: 23945:23950 unknown command 0 [ 1123.618603][T23950] binder: 23945:23950 ioctl c0306201 20000400 returned -22 [ 1123.640838][T23952] binder: 23951:23952 unknown command 0 [ 1123.653139][T23952] binder: 23951:23952 ioctl c0306201 20000400 returned -22 21:10:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x40406301, 0x0}) 21:10:19 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x40046302, 0x0}) [ 1123.746339][T23960] binder: 23959:23960 unknown command 0 [ 1123.761798][T23960] binder: 23959:23960 ioctl c0306201 20000400 returned -22 [ 1123.794684][T23962] binder: 23961:23962 unknown command 0 [ 1123.808825][T23962] binder: 23961:23962 ioctl c0306201 20000400 returned -22 [ 1123.839090][T11631] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1123.861360][T11631] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1123.896623][T11631] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.915940][T11631] usb 3-1: config 0 descriptor?? [ 1124.458770][T11631] usbhid 3-1:0.0: can't add hid device: -71 [ 1124.464764][T11631] usbhid: probe of 3-1:0.0 failed with error -71 [ 1124.493270][T11631] usb 3-1: USB disconnect, device number 122 21:10:20 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:10:20 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1b) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 21:10:20 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x40486311, 0x0}) 21:10:20 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x40046304, 0x0}) 21:10:21 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1b) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) [ 1124.982772][T23986] binder: 23982:23986 unknown command 0 [ 1124.994960][T23986] binder: 23982:23986 ioctl c0306201 20000400 returned -22 [ 1125.011664][T23987] binder: 23981:23987 unknown command 0 21:10:21 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x40046305, 0x0}) [ 1125.050281][T23987] binder: 23981:23987 ioctl c0306201 20000400 returned -22 21:10:21 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x40486312, 0x0}) 21:10:21 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1b) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) [ 1125.121615][T23996] binder: 23995:23996 unknown command 0 [ 1125.145298][T23996] binder: 23995:23996 ioctl c0306201 20000400 returned -22 21:10:21 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x40046306, 0x0}) 21:10:21 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1b) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) [ 1125.238696][ T42] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1125.251447][T24004] binder: 24001:24004 unknown command 0 21:10:21 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1b) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) [ 1125.280369][T24005] binder: 24003:24005 unknown command 0 [ 1125.289925][T24004] binder: 24001:24004 ioctl c0306201 20000400 returned -22 [ 1125.303788][T24005] binder: 24003:24005 ioctl c0306201 20000400 returned -22 21:10:21 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x48000000, 0x0}) [ 1125.412515][T24014] binder: 24012:24014 unknown command 0 [ 1125.426919][T24014] binder: 24012:24014 ioctl c0306201 20000400 returned -22 [ 1125.628867][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1125.656626][ T42] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1125.690684][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.709498][ T42] usb 3-1: config 0 descriptor?? [ 1126.239970][ T42] usbhid 3-1:0.0: can't add hid device: -71 [ 1126.246016][ T42] usbhid: probe of 3-1:0.0 failed with error -71 [ 1126.269381][ T42] usb 3-1: USB disconnect, device number 123 21:10:22 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:10:22 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x40046307, 0x0}) 21:10:22 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1b) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 21:10:22 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x4c000000, 0x0}) [ 1126.729471][T24036] binder: 24033:24036 unknown command 0 [ 1126.753425][T24037] binder: 24032:24037 unknown command 0 [ 1126.766522][T24036] binder: 24033:24036 ioctl c0306201 20000400 returned -22 [ 1126.777096][T24037] binder: 24032:24037 ioctl c0306201 20000400 returned -22 21:10:22 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1b) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 21:10:22 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x5c000000, 0x0}) 21:10:22 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x40086303, 0x0}) 21:10:22 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1b) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) [ 1126.918418][T24048] binder: 24046:24048 unknown command 0 [ 1126.929008][T24048] binder: 24046:24048 ioctl c0306201 20000400 returned -22 [ 1126.949285][T24050] binder: 24049:24050 unknown command 0 21:10:23 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x60000000, 0x0}) [ 1126.974238][T24050] binder: 24049:24050 ioctl c0306201 20000400 returned -22 21:10:23 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x4008630a, 0x0}) [ 1127.018509][T21681] usb 3-1: new high-speed USB device number 124 using dummy_hcd 21:10:23 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1b) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) [ 1127.063260][T24058] binder: 24057:24058 unknown command 0 [ 1127.074724][T24058] binder: 24057:24058 ioctl c0306201 20000400 returned -22 21:10:23 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1b) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) [ 1127.104716][T24060] binder: 24059:24060 unknown command 0 [ 1127.135256][T24060] binder: 24059:24060 ioctl c0306201 20000400 returned -22 [ 1127.388872][T21681] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1127.402725][T21681] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1127.426213][T21681] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.443552][T21681] usb 3-1: config 0 descriptor?? [ 1127.988476][T21681] usbhid 3-1:0.0: can't add hid device: -71 [ 1127.994504][T21681] usbhid: probe of 3-1:0.0 failed with error -71 [ 1128.026336][T21681] usb 3-1: USB disconnect, device number 124 21:10:24 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) 21:10:24 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x68000000, 0x0}) 21:10:24 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x40086310, 0x0}) 21:10:24 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(r1, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 21:10:24 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(r1, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) [ 1128.524561][T24091] binder: 24086:24091 unknown command 0 [ 1128.537034][T24090] binder: 24084:24090 unknown command 0 [ 1128.545701][T24090] binder: 24084:24090 ioctl c0306201 20000400 returned -22 [ 1128.548458][T24091] binder: 24086:24091 ioctl c0306201 20000400 returned -22 21:10:24 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x400c630e, 0x0}) 21:10:24 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x6c000000, 0x0}) 21:10:24 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(r1, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) [ 1128.711028][T24104] binder: 24100:24104 unknown command 0 [ 1128.723552][T24105] binder: 24101:24105 unknown command 0 [ 1128.732408][T24104] binder: 24100:24104 ioctl c0306201 20000400 returned -22 [ 1128.753322][T24105] binder: 24101:24105 ioctl c0306201 20000400 returned -22 21:10:24 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1b) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x1000000000016) 21:10:24 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x400c630f, 0x0}) [ 1128.760794][ T42] usb 3-1: new high-speed USB device number 125 using dummy_hcd 21:10:24 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x74000000, 0x0}) [ 1128.864284][T24114] binder: 24112:24114 unknown command 0 [ 1128.878635][T24114] binder: 24112:24114 ioctl c0306201 20000400 returned -22 [ 1128.897283][T24115] binder: 24113:24115 unknown command 0 21:10:24 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x40106308, 0x0}) [ 1128.915479][T24115] binder: 24113:24115 ioctl c0306201 20000400 returned -22 [ 1129.003885][T24121] binder: 24119:24121 unknown command 0 [ 1129.013418][T24121] binder: 24119:24121 ioctl c0306201 20000400 returned -22 [ 1129.180285][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1129.196970][ T42] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1129.224416][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.245774][ T42] usb 3-1: config 0 descriptor?? [ 1129.828321][ T42] usbhid 3-1:0.0: can't add hid device: -71 [ 1129.834350][ T42] usbhid: probe of 3-1:0.0 failed with error -71 [ 1129.861154][ T42] usb 3-1: USB disconnect, device number 125 21:10:26 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) 21:10:26 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x7a000000, 0x0}) 21:10:26 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x40106309, 0x0}) [ 1130.367763][T24139] binder: 24137:24139 unknown command 0 [ 1130.378493][T24141] binder: 24138:24141 unknown command 0 [ 1130.384091][T24141] binder: 24138:24141 ioctl c0306201 20000400 returned -22 [ 1130.399337][T24139] binder: 24137:24139 ioctl c0306201 20000400 returned -22 21:10:26 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x40406300, 0x0}) 21:10:26 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x1000000000000, 0x0}) [ 1130.513246][T24149] binder: 24148:24149 unknown command 0 [ 1130.528351][T24149] binder: 24148:24149 ioctl c0306201 20000400 returned -22 21:10:26 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x40406301, 0x0}) [ 1130.566189][T24152] binder: 24150:24152 unknown command 0 [ 1130.593938][T24152] binder: 24150:24152 ioctl c0306201 20000400 returned -22 21:10:26 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x63404000000000, 0x0}) [ 1130.639353][ T42] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1130.662419][T24157] binder: 24155:24157 unknown command 0 21:10:26 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x40486311, 0x0}) [ 1130.708129][T24157] binder: 24155:24157 ioctl c0306201 20000400 returned -22 [ 1130.735407][T24162] binder: 24160:24162 unknown command 0 [ 1130.750840][T24162] binder: 24160:24162 ioctl c0306201 20000400 returned -22 [ 1130.851607][T24166] binder: 24165:24166 unknown command 0 [ 1130.858139][T24166] binder: 24165:24166 ioctl c0306201 20000400 returned -22 [ 1131.078531][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1131.099604][ T42] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1131.119120][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.137108][ T42] usb 3-1: config 0 descriptor?? [ 1131.688054][ T42] usbhid 3-1:0.0: can't add hid device: -71 [ 1131.694024][ T42] usbhid: probe of 3-1:0.0 failed with error -71 [ 1131.728116][ T42] usb 3-1: USB disconnect, device number 126 [ 1131.796232][ T8463] ================================================================== [ 1131.804444][ T8463] BUG: KCSAN: data-race in exit_signals / prepare_signal [ 1131.812167][ T8463] [ 1131.814497][ T8463] read-write to 0xffff88810a8d9064 of 4 bytes by task 24109 on cpu 1: [ 1131.822636][ T8463] exit_signals+0x108/0x530 [ 1131.827113][ T8463] do_exit+0x158/0x15a0 [ 1131.831243][ T8463] do_group_exit+0xc8/0x170 [ 1131.835735][ T8463] get_signal+0xf9b/0x1510 [ 1131.840119][ T8463] arch_do_signal+0x25/0x260 [ 1131.844679][ T8463] exit_to_user_mode_prepare+0xde/0x170 [ 1131.850193][ T8463] syscall_exit_to_user_mode+0x16/0x30 [ 1131.855631][ T8463] do_syscall_64+0x45/0x80 [ 1131.860019][ T8463] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1131.865874][ T8463] [ 1131.868177][ T8463] read to 0xffff88810a8d9064 of 4 bytes by task 8463 on cpu 0: [ 1131.875690][ T8463] prepare_signal+0x891/0xda0 [ 1131.880427][ T8463] __send_signal+0x64/0x780 [ 1131.884898][ T8463] send_signal+0x39f/0x3d0 [ 1131.889294][ T8463] do_send_sig_info+0x9b/0xe0 [ 1131.893939][ T8463] kill_pid_info+0x7f/0x100 [ 1131.898420][ T8463] __se_sys_kill+0xd3/0x450 [ 1131.902893][ T8463] __x64_sys_kill+0x2d/0x40 [ 1131.907375][ T8463] do_syscall_64+0x39/0x80 [ 1131.912371][ T8463] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1131.918244][ T8463] [ 1131.920554][ T8463] Reported by Kernel Concurrency Sanitizer on: [ 1131.926702][ T8463] CPU: 0 PID: 8463 Comm: syz-executor.4 Not tainted 5.10.0-rc1-syzkaller #0 [ 1131.935349][ T8463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1131.945471][ T8463] ================================================================== [ 1131.953618][ T8463] Kernel panic - not syncing: panic_on_warn set ... [ 1131.960226][ T8463] CPU: 0 PID: 8463 Comm: syz-executor.4 Not tainted 5.10.0-rc1-syzkaller #0 [ 1131.968987][ T8463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1131.979243][ T8463] Call Trace: [ 1131.982620][ T8463] dump_stack+0x116/0x15d [ 1131.986943][ T8463] panic+0x1e7/0x5fa [ 1131.990989][ T8463] ? vprintk_emit+0x2f2/0x370 [ 1131.995641][ T8463] kcsan_report+0x67b/0x680 [ 1132.000838][ T8463] ? kcsan_setup_watchpoint+0x46a/0x4d0 [ 1132.006360][ T8463] ? prepare_signal+0x891/0xda0 [ 1132.011195][ T8463] ? __send_signal+0x64/0x780 [ 1132.015859][ T8463] ? send_signal+0x39f/0x3d0 [ 1132.020433][ T8463] ? do_send_sig_info+0x9b/0xe0 [ 1132.025352][ T8463] ? kill_pid_info+0x7f/0x100 [ 1132.030003][ T8463] ? __se_sys_kill+0xd3/0x450 [ 1132.034831][ T8463] ? __x64_sys_kill+0x2d/0x40 [ 1132.039489][ T8463] ? do_syscall_64+0x39/0x80 [ 1132.044049][ T8463] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1132.050090][ T8463] kcsan_setup_watchpoint+0x46a/0x4d0 [ 1132.055519][ T8463] prepare_signal+0x891/0xda0 [ 1132.060166][ T8463] __send_signal+0x64/0x780 [ 1132.064639][ T8463] send_signal+0x39f/0x3d0 [ 1132.069203][ T8463] do_send_sig_info+0x9b/0xe0 [ 1132.073849][ T8463] kill_pid_info+0x7f/0x100 [ 1132.078323][ T8463] __se_sys_kill+0xd3/0x450 [ 1132.082815][ T8463] __x64_sys_kill+0x2d/0x40 [ 1132.087290][ T8463] do_syscall_64+0x39/0x80 [ 1132.091686][ T8463] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1132.097592][ T8463] RIP: 0033:0x425fb7 [ 1132.101552][ T8463] Code: 44 00 00 48 c7 c2 d4 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 3e 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 dd 32 ff ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1132.121143][ T8463] RSP: 002b:00007ffdcdce5668 EFLAGS: 00000217 ORIG_RAX: 000000000000003e [ 1132.129612][ T8463] RAX: ffffffffffffffda RBX: 0000000000000064 RCX: 0000000000425fb7 [ 1132.137738][ T8463] RDX: 0000000000000bb8 RSI: 0000000000000009 RDI: 0000000000001842 [ 1132.145690][ T8463] RBP: 0000000000001842 R08: 0000000000000000 R09: 00000000032c2940 [ 1132.153634][ T8463] R10: 0000000000000000 R11: 0000000000000217 R12: 0000000000000005 [ 1132.161575][ T8463] R13: 00007ffdcdce56a0 R14: 00000000001139b1 R15: 00007ffdcdce56b0 [ 1133.232984][ T8463] Shutting down cpus with NMI [ 1133.238439][ T8463] Kernel Offset: disabled [ 1133.242754][ T8463] Rebooting in 86400 seconds..