_tcp_int(r0, 0x6, 0xa, &(0x7f00000002c0)=0x40000000000ffb, 0x306) bind$inet(r0, &(0x7f0000000040)={0x2, 0x8000004e23, @multicast2}, 0x10) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000300)=@assoc_value={0x0, 0x52cf}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000380)={r5, @in6={{0xa, 0x4e24, 0x1, @remote, 0xfffffffffffffff9}}, 0x8000000000000, 0x7ff, 0x3, 0x8, 0xe0}, 0x98) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x101000, 0x0) dup(r4) ioctl$VIDIOC_ENUMSTD(r6, 0xc0485619, &(0x7f0000000140)={0x8, 0x400, "f8f3c1154ad220e8ef7fb257dd336127d85736323894865a", {0x9, 0x1000}, 0x100}) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000000080)={0x2, 0x200000004e23, @loopback}, 0x10) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000180)=0x7, 0x4) setsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000200), 0x4) socket$inet_smc(0x2b, 0x1, 0x0) sendto(r0, &(0x7f00000022c0)="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", 0xffc, 0x0, 0x0, 0x0) r7 = getpgid(0xffffffffffffffff) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000100)=0x0) kcmp(r7, r8, 0x5, r6, r0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='dctcp\x00', 0x2) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000012c0)=""/4096, 0xffc}], 0x1}, 0x400100) [ 916.863358][T31283] binder: 31277:31283 unknown command 536871488 [ 916.878991][T31283] binder: 31277:31283 ioctl c0306201 20000440 returned -22 00:22:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000074000018"]], 0x0, 0x0, 0x0}) [ 916.956269][T31289] binder: BINDER_SET_CONTEXT_MGR already set [ 916.982371][T31289] binder: 31288:31289 ioctl 40046207 0 returned -16 [ 917.008632][T31300] binder: 31288:31300 unknown command 536871488 [ 917.030188][T31300] binder: 31288:31300 ioctl c0306201 20000440 returned -22 00:22:21 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x9, 0x0, &(0x7f00000000c0)) [ 917.055404][T31303] binder: 31302:31303 unknown command 536871488 [ 917.061820][T31303] binder: 31302:31303 ioctl c0306201 20000440 returned -22 [ 917.080141][T31289] binder: BINDER_SET_CONTEXT_MGR already set [ 917.080185][T31300] binder: 31288:31300 unknown command 536871488 [ 917.091421][T31305] binder: 31302:31305 unknown command 536871488 00:22:21 executing program 2: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000002c0)=0x40000000000ffb, 0x306) bind$inet(r0, &(0x7f0000000040)={0x2, 0x8000004e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000000080)={0x2, 0x200000004e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) sendto(r0, &(0x7f00000022c0)="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", 0xffc, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x8000, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000012c0)=""/4096, 0xffc}], 0x1}, 0x400100) [ 917.120822][T31305] binder: 31302:31305 ioctl c0306201 20000440 returned -22 [ 917.154709][T31289] binder: 31288:31289 ioctl 40046207 0 returned -16 [ 917.188086][T31300] binder: 31288:31300 ioctl c0306201 20000440 returned -22 00:22:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000002000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="00000000007a000018"]], 0x0, 0x0, 0x0}) 00:22:21 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0xa, 0x0, &(0x7f00000000c0)) 00:22:21 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) [ 917.285493][T31314] binder: 31313:31314 unknown command 536871488 [ 917.303893][T31314] binder: 31313:31314 ioctl c0306201 20000440 returned -22 [ 917.316135][T31319] binder: BINDER_SET_CONTEXT_MGR already set [ 917.326623][T31319] binder: 31317:31319 ioctl 40046207 0 returned -16 [ 917.344691][T31323] binder: 31313:31323 unknown command 536871488 [ 917.345037][T31319] binder: 31317:31319 unknown command 536871488 [ 917.362927][T31319] binder: 31317:31319 ioctl c0306201 20000440 returned -22 [ 917.382103][T31323] binder: 31313:31323 ioctl c0306201 20000440 returned -22 [ 917.393323][T31324] binder: 31317:31324 unknown command 536871488 [ 917.400292][T31314] binder: BINDER_SET_CONTEXT_MGR already set [ 917.410046][T31324] binder: 31317:31324 ioctl c0306201 20000440 returned -22 [ 917.419990][T31314] binder: 31313:31314 ioctl 40046207 0 returned -16 00:22:21 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x300, 0x7fff}], 0x1) 00:22:21 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f00000000c0)) 00:22:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000030018"]], 0x0, 0x0, 0x0}) 00:22:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000003f00000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:21 executing program 2: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000002c0)=0x40000000000ffb, 0x306) bind$inet(r0, &(0x7f0000000040)={0x2, 0x8000004e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000000080)={0x2, 0x200000004e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) sendto(r0, &(0x7f00000022c0)="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", 0xffc, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000012c0)=""/4096, 0xffc}], 0x1}, 0x400100) 00:22:21 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) [ 917.771540][T31341] binder: BINDER_SET_CONTEXT_MGR already set [ 917.795156][T31336] binder: 31335:31336 unknown command 536871488 [ 917.809267][T31341] binder: 31334:31341 ioctl 40046207 0 returned -16 00:22:21 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0xc, 0x0, &(0x7f00000000c0)) [ 917.817609][T31336] binder: 31335:31336 ioctl c0306201 20000440 returned -22 [ 917.828046][T31346] binder: 31334:31346 unknown command 536871488 [ 917.841574][T31346] binder: 31334:31346 ioctl c0306201 20000440 returned -22 [ 917.859193][T31341] binder: BINDER_SET_CONTEXT_MGR already set [ 917.867106][T31346] binder: 31334:31346 unknown command 536871488 [ 917.889148][T31341] binder: 31334:31341 ioctl 40046207 0 returned -16 [ 917.899163][T31351] binder: 31335:31351 unknown command 536871488 [ 917.914157][T31346] binder: 31334:31346 ioctl c0306201 20000440 returned -22 00:22:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000050018"]], 0x0, 0x0, 0x0}) [ 917.926472][T31351] binder: 31335:31351 ioctl c0306201 20000440 returned -22 00:22:21 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, 0x0, &(0x7f00000000c0)) 00:22:22 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x10, 0x0, &(0x7f00000000c0)) 00:22:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000004000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:22 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) [ 918.083153][T31361] binder: 31360:31361 unknown command 536871488 [ 918.116087][T31361] binder: 31360:31361 ioctl c0306201 20000440 returned -22 [ 918.147967][T31371] binder: 31360:31371 unknown command 536871488 [ 918.152681][T31368] binder: BINDER_SET_CONTEXT_MGR already set [ 918.167343][T31368] binder: 31367:31368 ioctl 40046207 0 returned -16 [ 918.182844][T31368] binder: 31367:31368 unknown command 536871488 [ 918.187402][T31371] binder: 31360:31371 ioctl c0306201 20000440 returned -22 [ 918.190192][T31368] binder: 31367:31368 ioctl c0306201 20000440 returned -22 [ 918.209959][T31368] binder: BINDER_SET_CONTEXT_MGR already set [ 918.223860][T31373] binder: 31367:31373 unknown command 536871488 [ 918.245636][T31368] binder: 31367:31368 ioctl 40046207 0 returned -16 [ 918.257440][T31373] binder: 31367:31373 ioctl c0306201 20000440 returned -22 00:22:22 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x3f00, 0x7fff}], 0x1) 00:22:22 executing program 2 (fault-call:2 fault-nth:0): semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) 00:22:22 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x11, 0x0, &(0x7f00000000c0)) 00:22:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000060018"]], 0x0, 0x0, 0x0}) 00:22:22 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:22:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000004800000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:22 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x12, 0x0, &(0x7f00000000c0)) [ 918.672707][T31386] binder: BINDER_SET_CONTEXT_MGR already set [ 918.672730][T31380] binder: 31378:31380 unknown command 536871488 [ 918.707645][T31386] binder: 31382:31386 ioctl 40046207 0 returned -16 00:22:22 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) 00:22:22 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) [ 918.752157][T31380] binder: 31378:31380 ioctl c0306201 20000440 returned -22 [ 918.766024][T31395] binder: 31382:31395 unknown command 536871488 00:22:22 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x13, 0x0, &(0x7f00000000c0)) [ 918.809447][T31380] binder: BINDER_SET_CONTEXT_MGR already set [ 918.812159][T31395] binder: 31382:31395 ioctl c0306201 20000440 returned -22 [ 918.831214][T31400] binder: 31378:31400 unknown command 536871488 [ 918.864502][T31380] binder: 31378:31380 ioctl 40046207 0 returned -16 [ 918.880704][T31395] binder: 31382:31395 unknown command 536871488 [ 918.887190][T31400] binder: 31378:31400 ioctl c0306201 20000440 returned -22 00:22:22 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:22:22 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x14, 0x0, &(0x7f00000000c0)) [ 918.934896][T31395] binder: 31382:31395 ioctl c0306201 20000440 returned -22 00:22:23 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x3000000, 0x7fff}], 0x1) 00:22:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000004c00000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000070018"]], 0x0, 0x0, 0x0}) 00:22:23 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x3f00, 0x7fff, 0x1000}], 0x1) 00:22:23 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:22:23 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x15, 0x0, &(0x7f00000000c0)) [ 919.602164][T31430] binder: 31427:31430 unknown command 536871488 [ 919.620289][T31429] binder: BINDER_SET_CONTEXT_MGR already set [ 919.634824][T31430] binder: 31427:31430 ioctl c0306201 20000440 returned -22 00:22:23 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:22:23 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x17, 0x0, &(0x7f00000000c0)) [ 919.651645][T31429] binder: 31422:31429 ioctl 40046207 0 returned -16 [ 919.662733][T31437] binder: 31427:31437 unknown command 536871488 [ 919.677881][T31437] binder: 31427:31437 ioctl c0306201 20000440 returned -22 [ 919.684411][T31439] binder: 31422:31439 unknown command 536871488 00:22:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000200018"]], 0x0, 0x0, 0x0}) [ 919.711396][T31439] binder: 31422:31439 ioctl c0306201 20000440 returned -22 [ 919.743577][T31445] binder: 31443:31445 unknown command 536871488 [ 919.750058][T31445] binder: 31443:31445 ioctl c0306201 20000440 returned -22 [ 919.758784][T31429] binder: BINDER_SET_CONTEXT_MGR already set [ 919.769906][T31439] binder: 31422:31439 unknown command 536871488 [ 919.776985][T31446] binder: 31443:31446 unknown command 536871488 [ 919.785615][T31446] binder: 31443:31446 ioctl c0306201 20000440 returned -22 [ 919.796050][T31429] binder: 31422:31429 ioctl 40046207 0 returned -16 00:22:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0000000000003f0018"]], 0x0, 0x0, 0x0}) 00:22:23 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:22:23 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x18, 0x0, &(0x7f00000000c0)) [ 919.817733][T31439] binder: 31422:31439 ioctl c0306201 20000440 returned -22 [ 919.892019][ C0] net_ratelimit: 18 callbacks suppressed [ 919.892027][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 919.903557][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 919.917327][T31454] binder: 31453:31454 unknown command 536871488 [ 919.937790][T31454] binder: 31453:31454 ioctl c0306201 20000440 returned -22 [ 919.951298][T31459] binder: 31453:31459 unknown command 536871488 [ 919.958108][T31459] binder: 31453:31459 ioctl c0306201 20000440 returned -22 00:22:24 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x3f000000, 0x7fff}], 0x1) 00:22:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000006000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:24 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x19, 0x0, &(0x7f00000000c0)) 00:22:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000400018"]], 0x0, 0x0, 0x0}) 00:22:24 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:22:24 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x4000, 0x7fff, 0x1000}], 0x1) [ 920.549723][T31474] binder: BINDER_SET_CONTEXT_MGR already set [ 920.556504][T31472] binder: 31467:31472 unknown command 536871488 [ 920.573293][T31474] binder: 31470:31474 ioctl 40046207 0 returned -16 [ 920.579311][T31472] binder: 31467:31472 ioctl c0306201 20000440 returned -22 00:22:24 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:22:24 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1b, 0x0, &(0x7f00000000c0)) [ 920.601039][T31481] binder: 31470:31481 unknown command 536871488 [ 920.623745][T31482] binder: 31467:31482 unknown command 536871488 [ 920.628609][T31481] binder: 31470:31481 ioctl c0306201 20000440 returned -22 [ 920.644619][T31482] binder: 31467:31482 ioctl c0306201 20000440 returned -22 00:22:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000006800000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:24 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f00000000c0)) [ 920.678606][T31474] binder: BINDER_SET_CONTEXT_MGR already set [ 920.688834][T31481] binder: 31470:31481 unknown command 536871488 [ 920.711858][T31474] binder: 31470:31474 ioctl 40046207 0 returned -16 00:22:24 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) [ 920.745600][T31481] binder: 31470:31481 ioctl c0306201 20000440 returned -22 [ 920.774855][T31494] binder: 31493:31494 unknown command 536871488 00:22:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000480018"]], 0x0, 0x0, 0x0}) [ 920.794771][T31494] binder: 31493:31494 ioctl c0306201 20000440 returned -22 [ 920.834542][T31500] binder: 31493:31500 unknown command 536871488 [ 920.862076][T31500] binder: 31493:31500 ioctl c0306201 20000440 returned -22 [ 920.891253][T31503] binder: BINDER_SET_CONTEXT_MGR already set [ 920.912044][T31503] binder: 31502:31503 ioctl 40046207 0 returned -16 [ 920.930723][T31503] binder: 31502:31503 unknown command 536871488 [ 920.937610][T31503] binder: 31502:31503 ioctl c0306201 20000440 returned -22 [ 920.949416][T31505] binder: 31502:31505 unknown command 536871488 [ 920.955901][T31505] binder: 31502:31505 ioctl c0306201 20000440 returned -22 [ 921.012030][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 921.017888][ C1] protocol 88fb is buggy, dev hsr_slave_1 00:22:25 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x300000000000000, 0x7fff}], 0x1) 00:22:25 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1d, 0x0, &(0x7f00000000c0)) 00:22:25 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:22:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000006c00000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0000000000004c0018"]], 0x0, 0x0, 0x0}) 00:22:25 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0xff7f, 0x7fff, 0x1000}], 0x1) [ 921.500905][T31519] binder: 31514:31519 unknown command 536871488 [ 921.500955][T31513] binder: BINDER_SET_CONTEXT_MGR already set [ 921.526782][T31513] binder: 31512:31513 ioctl 40046207 0 returned -16 [ 921.537641][T31519] binder: 31514:31519 ioctl c0306201 20000440 returned -22 00:22:25 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1e, 0x0, &(0x7f00000000c0)) 00:22:25 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) [ 921.560071][T31513] binder: 31512:31513 unknown command 536871488 [ 921.569161][T31513] binder: 31512:31513 ioctl c0306201 20000440 returned -22 [ 921.578914][T31527] binder: 31514:31527 unknown command 536871488 [ 921.597295][T31527] binder: 31514:31527 ioctl c0306201 20000440 returned -22 00:22:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000600018"]], 0x0, 0x0, 0x0}) 00:22:25 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f00000000c0)) 00:22:25 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) [ 921.639457][T31513] binder: BINDER_SET_CONTEXT_MGR already set [ 921.661910][T31534] binder: 31512:31534 unknown command 536871488 [ 921.662427][T31513] binder: 31512:31513 ioctl 40046207 0 returned -16 [ 921.680307][T31534] binder: 31512:31534 ioctl c0306201 20000440 returned -22 00:22:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000007400000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 921.735464][T31539] binder: 31537:31539 unknown command 536871488 [ 921.763874][T31539] binder: 31537:31539 ioctl c0306201 20000440 returned -22 [ 921.823648][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 921.830748][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 921.836781][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 921.844456][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 921.852142][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 921.858512][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 921.873666][T31546] binder: 31537:31546 unknown command 536871488 [ 921.884951][T31549] binder: BINDER_SET_CONTEXT_MGR already set [ 921.891348][T31549] binder: 31547:31549 ioctl 40046207 0 returned -16 [ 921.907822][T31549] binder: 31547:31549 unknown command 536871488 [ 921.918629][T31549] binder: 31547:31549 ioctl c0306201 20000440 returned -22 [ 921.925533][T31546] binder: 31537:31546 ioctl c0306201 20000440 returned -22 [ 921.936963][T31549] binder: BINDER_SET_CONTEXT_MGR already set [ 921.947623][T31550] binder: 31547:31550 unknown command 536871488 [ 921.957514][T31549] binder: 31547:31549 ioctl 40046207 0 returned -16 [ 921.968073][T31550] binder: 31547:31550 ioctl c0306201 20000440 returned -22 00:22:26 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x3f00000000000000, 0x7fff}], 0x1) 00:22:26 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x22, 0x0, &(0x7f00000000c0)) 00:22:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000007a00000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000680018"]], 0x0, 0x0, 0x0}) 00:22:26 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:22:26 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x1000000, 0x7fff, 0x1000}], 0x1) 00:22:26 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, 0x0, &(0x7f00000000c0)) [ 922.454842][T31562] binder: BINDER_SET_CONTEXT_MGR already set [ 922.461011][T31562] binder: 31561:31562 ioctl 40046207 0 returned -16 [ 922.475623][T31558] binder: 31557:31558 unknown command 536871488 [ 922.527212][T31558] binder: 31557:31558 ioctl c0306201 20000440 returned -22 [ 922.565776][T31562] binder: 31561:31562 unknown command 536871488 [ 922.581679][T31562] binder: 31561:31562 ioctl c0306201 20000440 returned -22 [ 922.610771][T31562] binder: BINDER_SET_CONTEXT_MGR already set [ 922.621313][T31580] binder: 31561:31580 unknown command 536871488 [ 922.631383][T31562] binder: 31561:31562 ioctl 40046207 0 returned -16 [ 922.634220][T31579] binder: 31557:31579 unknown command 536871488 [ 922.641608][T31580] binder: 31561:31580 ioctl c0306201 20000440 returned -22 00:22:26 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x3f000000, 0x7fff, 0x1000}], 0x1) 00:22:26 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x24, 0x0, &(0x7f00000000c0)) 00:22:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="00000000ff00000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 922.686546][T31579] binder: 31557:31579 ioctl c0306201 20000440 returned -22 00:22:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0000000000006c0018"]], 0x0, 0x0, 0x0}) [ 922.824831][T31586] binder: BINDER_SET_CONTEXT_MGR already set 00:22:26 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)=0x14) [ 922.897222][T31586] binder: 31584:31586 ioctl 40046207 0 returned -16 [ 922.897759][T31591] binder: 31584:31591 unknown command 536871488 [ 922.927801][T31593] binder: 31590:31593 unknown command 536871488 [ 922.951134][T31593] binder: 31590:31593 ioctl c0306201 20000440 returned -22 [ 922.999665][T31591] binder: 31584:31591 ioctl c0306201 20000440 returned -22 [ 923.019969][T31599] binder: 31590:31599 unknown command 536871488 [ 923.050155][T31599] binder: 31590:31599 ioctl c0306201 20000440 returned -22 [ 923.065251][T31586] binder: BINDER_SET_CONTEXT_MGR already set [ 923.091691][T31591] binder: 31584:31591 unknown command 536871488 [ 923.098295][T31586] binder: 31584:31586 ioctl 40046207 0 returned -16 [ 923.105290][T31591] binder: 31584:31591 ioctl c0306201 20000440 returned -22 00:22:27 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x3}], 0x1) 00:22:27 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:22:27 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)=0x1400) 00:22:27 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x40000000, 0x7fff, 0x1000}], 0x1) 00:22:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000740018"]], 0x0, 0x0, 0x0}) 00:22:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000010018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 923.387150][T31614] binder: BINDER_SET_CONTEXT_MGR already set [ 923.397249][T31615] binder: 31605:31615 unknown command 536871488 [ 923.414360][T31614] binder: 31607:31614 ioctl 40046207 0 returned -16 [ 923.421074][T31615] binder: 31605:31615 ioctl c0306201 20000440 returned -22 00:22:27 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)=0x14000000) [ 923.438316][T31620] binder: 31607:31620 unknown command 536871488 [ 923.451527][T31620] binder: 31607:31620 ioctl c0306201 20000440 returned -22 [ 923.463418][T31623] binder: 31605:31623 unknown command 536871488 [ 923.471471][T31614] binder: BINDER_SET_CONTEXT_MGR already set [ 923.480254][T31620] binder: 31607:31620 unknown command 536871488 [ 923.490867][T31614] binder: 31607:31614 ioctl 40046207 0 returned -16 [ 923.500277][T31620] binder: 31607:31620 ioctl c0306201 20000440 returned -22 00:22:27 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0xff7f0000, 0x7fff, 0x1000}], 0x1) 00:22:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000020018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 923.563740][T31623] binder: 31605:31623 ioctl c0306201 20000440 returned -22 00:22:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0000000000007a0018"]], 0x0, 0x0, 0x0}) 00:22:27 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)=0x7ffffffff000) [ 923.680152][T31633] binder: 31631:31633 unknown command 536871488 [ 923.710932][T31633] binder: 31631:31633 ioctl c0306201 20000440 returned -22 [ 923.754084][T31639] binder: 31631:31639 unknown command 536871488 [ 923.766089][T31636] binder: BINDER_SET_CONTEXT_MGR already set [ 923.777221][T31639] binder: 31631:31639 ioctl c0306201 20000440 returned -22 00:22:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000030018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 923.812551][T31636] binder: 31635:31636 ioctl 40046207 0 returned -16 [ 923.814180][T31643] binder: 31635:31643 unknown command 536871488 [ 923.876466][T31643] binder: 31635:31643 ioctl c0306201 20000440 returned -22 [ 923.920794][T31643] binder: 31635:31643 unknown command 536871488 [ 923.924448][T31646] binder: BINDER_SET_CONTEXT_MGR already set [ 923.933210][T31643] binder: 31635:31643 ioctl c0306201 20000440 returned -22 [ 923.966513][T31646] binder: 31645:31646 ioctl 40046207 0 returned -16 [ 923.991488][T31646] binder: 31645:31646 unknown command 536871488 [ 923.998801][T31646] binder: 31645:31646 ioctl c0306201 20000440 returned -22 [ 924.008910][T31649] binder: 31645:31649 unknown command 536871488 [ 924.015273][T31649] binder: 31645:31649 ioctl c0306201 20000440 returned -22 00:22:28 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x300}], 0x1) 00:22:28 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)=0xf0ffffff7f0000) 00:22:28 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x100000000000000, 0x7fff, 0x1000}], 0x1) 00:22:28 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:22:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000ff0018"]], 0x0, 0x0, 0x0}) 00:22:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000040018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 924.330057][T31657] binder: BINDER_SET_CONTEXT_MGR already set [ 924.336911][T31661] binder: 31656:31661 unknown command 536871488 00:22:28 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)=0x1400000000000000) [ 924.372167][T31657] binder: 31655:31657 ioctl 40046207 0 returned -16 [ 924.387108][T31661] binder: 31656:31661 ioctl c0306201 20000440 returned -22 [ 924.396431][T31668] binder: 31655:31668 unknown command 536871488 [ 924.415253][T31668] binder: 31655:31668 ioctl c0306201 20000440 returned -22 [ 924.453491][T31673] binder: BINDER_SET_CONTEXT_MGR already set [ 924.461886][T31674] binder: 31656:31674 unknown command 536871488 [ 924.478461][T31668] binder: 31655:31668 unknown command 536871488 00:22:28 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x3f00000000000000, 0x7fff, 0x1000}], 0x1) 00:22:28 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.swap.current\x00', 0x0, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000180), 0x4) r1 = socket$inet(0x2, 0x4040000000000001, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000040)={{0x2, 0x4e24, @multicast1}, {0x307, @broadcast}, 0x2, {0x2, 0x4e24, @multicast1}, 'veth0\x00'}) prctl$PR_GET_KEEPCAPS(0x7) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x700, 0x70bd28, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4048000) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000140)={0x6, 0x1, 0x9303}) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) shutdown(r1, 0x0) [ 924.497797][T31673] binder: 31656:31673 ioctl 40046207 0 returned -16 [ 924.510590][T31668] binder: 31655:31668 ioctl c0306201 20000440 returned -22 [ 924.541680][T31674] binder: 31656:31674 ioctl c0306201 20000440 returned -22 00:22:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000050018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00/']], 0x0, 0x0, 0x0}) [ 924.707998][T31685] binder: 31684:31685 unknown command 536871488 [ 924.724846][T31685] binder: 31684:31685 ioctl c0306201 20000440 returned -22 [ 924.733225][T31688] binder: BINDER_SET_CONTEXT_MGR already set [ 924.739425][T31688] binder: 31686:31688 ioctl 40046207 0 returned -16 [ 924.751388][T31689] binder: 31684:31689 unknown command 536871488 00:22:28 executing program 3: r0 = open(&(0x7f0000000040)='./file0\x00', 0x101000, 0x88) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000080)) r1 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) [ 924.759597][T31688] binder: 31686:31688 unknown command 536871488 [ 924.767417][T31689] binder: 31684:31689 ioctl c0306201 20000440 returned -22 [ 924.775396][T31688] binder: 31686:31688 ioctl c0306201 20000440 returned -22 [ 924.820028][T31688] binder: BINDER_SET_CONTEXT_MGR already set [ 924.861411][T31692] binder: 31686:31692 unknown command 536871488 [ 924.880701][T31688] binder: 31686:31688 ioctl 40046207 0 returned -16 [ 924.887186][T31692] binder: 31686:31692 ioctl c0306201 20000440 returned -22 00:22:29 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x3f00}], 0x1) 00:22:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000060018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:29 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:22:29 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x4000000000000000, 0x7fff, 0x1000}], 0x1) 00:22:29 executing program 3: r0 = socket$inet(0x2, 0x4040000000000000, 0x3) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) socketpair(0x0, 0x8000b, 0xea2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r2, 0x810, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xf2a}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10000}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x40}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) getsockopt$inet_tcp_buf(r1, 0x6, 0x1c, 0x0, &(0x7f0000000200)=0x14f) 00:22:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00E']], 0x0, 0x0, 0x0}) [ 925.172038][ C1] net_ratelimit: 12 callbacks suppressed [ 925.172045][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 925.183539][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 925.245744][T31705] binder: 31704:31705 unknown command 536871488 [ 925.258548][T31710] binder: BINDER_SET_CONTEXT_MGR already set [ 925.266820][T31705] binder: 31704:31705 ioctl c0306201 20000440 returned -22 [ 925.286354][T31710] binder: 31700:31710 ioctl 40046207 0 returned -16 [ 925.294723][T31710] binder: 31700:31710 unknown command 536871488 [ 925.301456][T31710] binder: 31700:31710 ioctl c0306201 20000440 returned -22 [ 925.317783][T31705] binder: BINDER_SET_CONTEXT_MGR already set [ 925.329000][T31721] binder: 31700:31721 unknown command 536871488 [ 925.337284][T31718] binder: 31704:31718 unknown command 536871488 00:22:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000070018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 925.346099][T31721] binder: 31700:31721 ioctl c0306201 20000440 returned -22 [ 925.353524][T31705] binder: 31704:31705 ioctl 40046207 0 returned -16 [ 925.369544][T31718] binder: 31704:31718 ioctl c0306201 20000440 returned -22 00:22:29 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0xff7f000000000000, 0x7fff, 0x1000}], 0x1) 00:22:29 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockname$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$RTC_AIE_ON(r1, 0x7001) 00:22:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00P']], 0x0, 0x0, 0x0}) [ 925.558941][T31729] binder: 31727:31729 unknown command 536871488 [ 925.605282][T31729] binder: 31727:31729 ioctl c0306201 20000440 returned -22 [ 925.627746][T31733] binder: BINDER_SET_CONTEXT_MGR already set [ 925.637185][T31737] binder: 31727:31737 unknown command 536871488 [ 925.643821][T31737] binder: 31727:31737 ioctl c0306201 20000440 returned -22 [ 925.652764][T31733] binder: 31732:31733 ioctl 40046207 0 returned -16 00:22:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000080018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 925.679695][T31733] binder: 31732:31733 unknown command 536871488 [ 925.692157][T31733] binder: 31732:31733 ioctl c0306201 20000440 returned -22 [ 925.721674][T31743] binder: 31732:31743 unknown command 536871488 [ 925.726825][T31744] binder: 31741:31744 unknown command 536871488 [ 925.742320][T31744] binder: 31741:31744 ioctl c0306201 20000440 returned -22 [ 925.760865][T31745] binder: 31741:31745 unknown command 536871488 00:22:29 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xf8d0d597571fa465) getsockopt$inet_tcp_buf(r0, 0x6, 0x16, 0x0, &(0x7f0000000080)) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x4000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000100)={{0xa, 0x4e23, 0x1ff, @mcast1, 0x7}, {0xa, 0x4e23, 0x1f, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1000}, 0x3, [0xfffffffffffffff7, 0xf, 0x8, 0x6, 0xffffffffffffffff, 0xff, 0x0, 0xfff]}, 0x5c) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) [ 925.768701][T31745] binder: 31741:31745 ioctl c0306201 20000440 returned -22 [ 925.770650][T31743] binder: 31732:31743 ioctl c0306201 20000440 returned -22 [ 925.972050][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 925.977883][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 925.983739][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 925.989482][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 925.995326][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 926.001059][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:22:30 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x3000000}], 0x1) 00:22:30 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0xffffffff00000000, 0x7fff, 0x1000}], 0x1) 00:22:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000200018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:30 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:22:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000000ff"]], 0x0, 0x0, 0x0}) 00:22:30 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x0, 0x200) ioctl$CAPI_GET_ERRCODE(r0, 0x80024321, &(0x7f0000002540)) r1 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f00000024c0)={{0x2, 0xfffffffffffffffa}, {0x10001, 0x7}, 0x3, 0x4, 0x55}) fcntl$getownex(r2, 0x10, &(0x7f0000003580)={0x0, 0x0}) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000002580)=0x300, &(0x7f00000025c0)=0xfffffffffffffcc4) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f0000003800)={{0x2, 0x7, 0x2, 0xffff, '\x00', 0x70}, 0x1, 0x20000261, 0x2, r3, 0x1, 0x5, 'syz0\x00', &(0x7f00000037c0)=['eth1$bdev\x00'], 0xa, [], [0x1ff, 0x0, 0xfff, 0x9]}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000035c0)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f00000036c0)=0xe8) sendmsg$inet6(r2, &(0x7f0000003780)={&(0x7f0000003940)={0xa, 0x4e24, 0x81, @ipv4={[], [], @broadcast}, 0x7}, 0x1c, &(0x7f00000034c0)=[{&(0x7f0000000140)="1930abaafcb5b0292509a927d76f7f2e", 0x10}, {&(0x7f0000000180)="ce3c647118be8787cda29fd22fe17e9931ff33e64cd4ac8a966aeba48bff416257ee1ebea9521aca0e996428448adaa017ca206f127c4594dd98f7b66775e2a4c0380f9c8bc4948307190ea6ec68aef559133a4e6c77458b24ec6919fa0631043af69a348d87b6c7f7438d6f029c2c40a0bceb6d6b848be6ff962d64f6235a759b1903e0b4fcf1fccf4bc3254d1b272b7ff983425dbdc36bf6d286ef8bb3c09948eb2d80893f78d834d036f232f1c33601854a47abec701b2d1adaa76c5d9de04ec9db5699e01d47da2ec39650a67ecd95e5f549e37235c8443e50585da7a91a0a69ef0acb1b325dfa7ac353ca90bb734446d0f184e084a7e8c7ea5f87fa2ec8bf06fc00b011d24e0e19d3b094f7fa4efce16ca9db55052d7f983ae451a3c345d70d3c3f52e3a2f7af866f374fc5cadbd968f4606334b09e026c1654816bc982c5793d1a1741b15b1a82774604dde0a647ca7e090e96a8e163b18e876e45660de39cadb11fcb9e51da06e0dfe37ce3aea91302d5768ba0164309853ff4c43d475ca81b0c898ff534cfbf03eee430b3d368bf2fee406c3f3644f389d738b23a399d577fe865528f040bf76306f8b6b1e1fd91138637e100c59d738bd0de7098cb02154eab851586aff6c14ebe260fcb823b63fb3c04f4a01d8fd01729de9315d67c5257e60f013f333c3e4c0c849557fdb1dc638e4a29f8b03e85b14e26c31f5153464b09ded9edbe9bb57336997445eb3d450d9e0a79566e06d46909ce24660fe6c8afc458f666429c844fe3ab3cf8c42f3fa07045c200479080916e76c8655e4bed1c881320ab5ba31a38266db217747f7a2a674020ebd8328902a5128243afe3ac3b96c8961d75840283bd68eddf980c1783fa86cb5534bbc5ab6bdf24df3b9dc7d1ac289156afb0a732c9cacf6455117d182d89cf23d2ccc7766a64c6d4730c775bbab3d5ef464f529a7540e7a7934cd7a5eb5fabdeb3f074115e0d2abbecd897c6a00deda8f8082ae38d6d0ab13988ee82b92f10fb8645232644e18084679b3f44af38f6f0706952f6644406bf95cfff95b4a3d36d3506c22ed8bf442ea0e8df5dedcec2022d807578e440e9fa21d79e8ef7f64ef51bd9765de094365493b4199ba77e27c0319dc96abab04cf1fcf4dc1192378ebfab81ecdcad8a5456022d1e4a6c8b771ffbc254d45bff313caaa41bdea16997c894238e7ac0209c7bd67a7b7bdb79126ef9f2053a969d0dd04090505516ebcdc49c0ebee7d5612c32b6a54956d5de28c305bb2bfdfa31aa00b9a4912835e0d82f591cc6fbb334945129cf4f972f6f3a2a3e55430e7a48446d1c3e8a816a505bb653f8deda08baa7f48b2ffa88c4b7fefcb8b9d154f5daf1d864ffdb6d3c2cae04eb018d6ad852ab510ee1a3fb0c492445cb4549110a749554ec26ca2e851c772c3563f22a2f167f3f5cec4ee7fa0732d7792d69c9268e70262b31fc6594cecf889fa00c465655d9b5fd362549140c7cfeebdd273483ef60b990f7b055a09b1f454f02b4f3494ec6226d4f4cc2219477c1fbe9cef86143e25107de90ad949684275e8174a2fb1f1e8390f1f025bd7a5656644996c513356587b81b88198654cf8174cd5c0f08ba041cb7083f14ad0d521060205ea1921259f061f546b99b97df7054864c9973c396084ca6c01a3b568c33d37354ec69654b08d1a4f9b6d7505a125dc757e921fc8bf350c87a2049016dd13b567c9c43f5993f01a2b3f40f900d32b77e653c331aba2d752cd18795ce835eb493335734a7b600638bfad184db6cf71192bbb476d1490860648285e15a0cbe7c87fe686a16be128c33913a47a5e6e6c8ee3ec7d6514a5cfec3f79c738276c791ca8399b36106123debb8df79240702440e036b160473c754d03c5f8d968c8faea2f819384f0d5bf26ce40166f502acc8be17a6b8a671823ae73c7d7c5798b1a8d3f958e3e419405a2e7fe71b0c6f722fdaa777594a8af93cd1b62f97ae15011e3e3816bf55ac0011931ad24c3ccdfd914dfd0c2ce6695c1e8040b34513b7da32a85ba898a5ff41ac67856283d21e205762ed150c05e021824c20d52feabf53056201ee862ecdcc83a01d910c17c50ae0fa3e51fe6f2850e54bf888d3375312ede37b5f6ddd1a73d1065406686efedd7a7b8fe78bc8f9e0cfb2232941be05aa4c55a035fcba3e6546ebe5ecd53d1160b65a610622110b494286bc56f245a19ea0994233a2c829af5cda3134c9228762c91f345ceb5eb214f3e1e6c5289e6ad2478d200ee0ab595fed1ffec27c05c3c2f3a1cc2730b78f69484154df0899cc7bda31873e3529cc9db3364dd14c4bdf3852b41a50adbc9916767f7893f3970a5a50560e2a66b9031bf1ec2757cbb7f46404d3318265857819505e563c67c3fec9e660465e4f0e38713bae2ed549ca3b165ba64b56c8b7288f329c8d42dcda28826aee27014a728d993c0b66a629ff6b342161710aa98a4b85d5c3b5cb9e5e28252a3e9cd064576089462c049420b2a8a7983a7cee2204e6661a9221905cf5a2d151cf67f84dd6d0ca85c968fb7a9bd16372a43ec23288ae8e2dc00c2fed420e4db732f7a5fbbc510cebf57bcbe6ff77591d05d6764e5df59fdb2d62c6024c813cf5fc766903a25f15a0edb26aa094957b64024296df29b4b9c46fa4df1c88c43f49f109373eeec91b9dda7c9b84ee7f956919f95e8f7f85cb61abd3c054c2127103d64ecdb1b3cfd7012f5ef1b8fa9a4e6953c2252fd98057eb2d4cb5ee5846a307fdec6ad272e16a86355fbc316970c687fe06fe04c1907258772cab2ce17ce4ea55ff2e3ae1f782beb184a84f4c4c585c1165804bd46cc96bf33afe553e008a725a78315f558b5d18f09501086b5bba73284bc8b7cdb47e0a86df4aa7d78ddb4ff4e31593224593cea0f4a4627a16f9343fe474fe2df75317a59e98e539efd6c57493c4f00055322f4b511847b34dee47f584f514230d3657e47e4e033a11653c9864435468d1c6a63033cb350029fbb785e40131fd832fc8c317f328a63fe2d105383e511e8ffba5aa5c7a1d2ee87a9aabf82c4949380ca259316ee0268d1f2eac4d9c26b92ee2a592e09ce3db25db9038323a2c64c8c3b8e8f4868f22cce1dc8961a3d088396e77eaefc8bbb11a3a44d3241c2161dc29acda146855fee44af80f3c3b27d15e44a9a54878f60c1acf9904a5adebd4f86d013645773f59a79daf6b3ccb3a4eef5db6924a06b549a3045da4ddddb6d76edbbb6f2cfcc50635421ab9869bd7f03eef2c395b2814e3eee8829a4aabcdbbb1772f5be3d17e8bfc80e75b402fe68bc7345e7d4cc897506d1138377e3c4f3b852af5e417f07670d8772de3c6e84d74ad53625c799e01abe1aaa0b98787483acfec59c7c090c0d7d27acb1f7d31d702c708f930be928ff909b18610c76bc6ffacbdbcb1da4abc2b7c9fad9150f3e99a5524011e24176e587faa2504229bfa1c580a0f0859e3e864171bd806a136dd8c7968b06b52941b259e31e41e1f41cd8542fdde1cca0c507ff0642c4e0b620beb7d790429769857d5934e64f26eccbaad9cbff07c669c3b097d1da5e8d25760baacfa9d5f28fe72d9a810f071906ca5baa6db8b0348385efcecab014a0eaf509842f5101a2b5e6636cdbc4021b78b5c6862966759e4880a91c7d83d81c9858dc43e7029b304321dcbe359924cdc8b0352553227997ba10798dae06cb169dd91da989e1b8be61f5cd22b4c9f79ac7db501f2b8d941a721768e86319f84cf1ba98dcd9d8c4d6b230ad6d107baaf937b5fcf55dead98c9a3cb7ed0cf2619d5b86b1b31db090dc922fd091ac39431866517f6d1ad097f6d28527fbdbc438a487703cbe3fe3a43d38ee31260cfa0bd07d33360bb422bc85e7b3b5a0770371d5d715f5c80e7a83a96e73b38fa8a10247a54ac44f720d3359756bee4f4c2fab18f9586e88f4251d018497861e50d55d822febb297d64e291e6b8203ebb859a521461f5de291ec57bcb03ea7936317f266730102dc2eed02483815c4a81c6cc7d5cdf5cbaac0c3bafd2da94246060dde32eb55a85323fa66f2b448cc56892c4cf1816daf3b00bc5729f30ebab9d3885498f1fb400b6540d4888ac26911446052614846df4f11ff1356abc04647709cce9309cd75b05fdf9701feaae0757b862fade7a062603b45cfa6060f439900806a45624f4f04626c020fe4092d68148a75a1ad3d9c5493309821e6ed3332a5e75cb1190b1d2b73cc6fbd39365b68d2bee1eeedfd5fb68b472ea5aee75440c8e80ff8823700c1a3c9882845312b7d8a81c611863ee0168f93ef74d05af3e8f1ac71d4c89b1def29f4aaab301ae8f7cbe14f60e008a34922ecf352601ddbf70a0a4ba93e1e637dc073a8f881c82dadd627f8a89731b8ea6c61746bdda56f099e5b83a49178cf8799c88a14c0de412410648af3a8f6f0680cf9fcf6d9d1e35d65903553cbdd181cf3b0e0dabfe2cd7569f8293f8dfb8f6f6c66e38a6eee2f44e5467bdb170ecd08a5879d5bd744dcb3db48a956ebd6115cb2fb1fda33db69160ea053f86e2cd5b592b4ed79c68f8cf19fcb96f81e7ff8c8e61b1a7405b13be2221c153d8d0d4cc7e2375b0a394fd5a65c9e244e6ba1e7f70448a321fde6a37bd47db81994eaf2bda164c3c8d266d451432a855b7f33fa1e8234a62a4815d2d7b6cdaa2c63059bfae7179ab209f856cfad2a40f94505494dd2de21d3997140e5e1d7b1bc942604677bef72eb1615ce52fa8bd012bf33e671f8541d077c3557d65ed87f9de35b712ae79fbaf9d7cbe4ab2949647cfcf001c3bcb6da1ebc46ec92096de6baef5b9ed6b626186878edcd9bb70ac18b7319bfa9f95b7da1095776308d5c5eac3090c7ae5c6ebf1b9033863ba1ad1c49c0d2a99dcc6074bb05298ad2c1a98b94ac9439355729edc412f021f2425b91d5561d67d671e9eee07871396079e46488f36e8b5e09baa395366ec27042748d5d745c4c5ec6f58df6ca7f9746331b313e1be16237d6ab4a91ccde5c1f02042bafba074b2e03611ad9c825ffd4e1ad6fe7aabe386c8a84348a33757df7522c6f476a0f6a3f3b8f4971af4d3b0cb6f9db5a046230cd1a329b6b19f4da23a4d3b69fb9f3ec9fbe9a8521c26a66873b0a745259bff58a3b807c624897b2d25824e9f5dcd37200cec7148b54cba4d6479b1e3d180aef2bb867620a29954eb87348ded6b392a4b1c3a988787654e4c795f2a40fa9e697802da253ff7937055c5885f4f5ddf97b340fd0ca9cc0ff4d24873541bdb2806a436646854599465d9b375c9d249bacfc363f5410c7a6065d879287bf5da27e2a5b9762b49ec345f6a358a323e28482dde7c4fd45028355b3b7c6ce4f945c4164f1e65451653ba733629eec721d042d4e1522e6857e6d35f46abf55fc89cc9fccede2e0ead16955178fa088a58e6793872e77a4f83a4b6f6790036769fc54b6c74c66869972c184f387aaeb48470bec594515bd548941bd60be916ced5b7aaca19e047263678896cba9b1c055f38643de77bed1aac4781b6f699ff2415d0b78ce692859891e73bb9b5200889453326148c209ea4afb7b7a8b30902505730cc7fa109146949e9e34a7df436605633390588fd43aa9c024c10d5434d823e8514f1452c3bada9258a5aa666dfba23ebdb444270a3065319c85e857092e177c702a83a26c47bc89a56392048254032267622813a70503bdf64976840fb74f64735c213a467418e54609815554e318107705df21525b0f669ec68a050c1a712eb14d62a54f10b", 0x1000}, {&(0x7f0000001180)="f3836c6513b529734663ec7c1c1535292b581740501a8fce2e190d91b4a2ea90ddfba1480b4ee5891159e31f48d63f258cb26a2dc1964386e143fe0505f21679ddc62b2cd0ca762c5dab4ff2f5c2b8d887bad5721b800a1cea0590bf36bde49f602c1960f49bb5c65a7f9f861db286bbeb8425bebe298c5632e6304954554e0559e300446c4bf76e967a8bb266856f904cbe2e9c7c85f23391a8400509ce267e7a365892eddf0bbc35fd329e8462f5e0d8bf2017c28ca49ace00c8e6c3a8ed6db3e5b9fe7f4cb1f14dc475be4c032de8a3b37f73653bd18fef245b60af47cf4fba5df09f4ad1d5dfe8", 0xe9}, {&(0x7f0000001280)="100d9e4833e188aa690ca90e1593577e7a098acec61b151a94f1ccbad73a1f95fd860aecc16cabe75aeedc0c1800d917c6094a959460e2497e7962bcadab69e2e2dcd845cc5a6785425112fbd82fbe29369c90b25bb6a1314f92d917683371665decc676c088bb8bf46d9372fa3bd95ea00b580a5081c260cb01f9438ed280df43da73da1860628f00b9e6223a20e8081d49cbd5f36633d9422ee752ea83410692e871241043f9ce1a24f5c28877c2b1e8", 0xb1}, {&(0x7f0000001340)="4be8da33fbb5ea2f1a0d965bb15150dd7414367ca7bd9698a3c783ca306c9eae95f8c8a95df5b2b927ee9e6c957b5f9620bde80956b019309357d9de0736e7786698eae0ca9875d618ed6706fcb294e025fdaa72decfe6c725153ebd5a3698f8ef99c043cd55e8ee5185365dd293d1e85337aef6925bf375f5fdfe9b5d97dc440d0a91ec1a8165fe8e53712a53a56ee1fed45b5740c6ae25cf5212aa70373d715b21a899064ac270eeee556f1f9f88f853ac7849443aa6af41bc247d11e4d5bafa2ceecf401ee0dad6e6b8f673d535846268c1137b5ad0285c9c64", 0xdb}, {&(0x7f0000001440)="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"/4096, 0x1000}, {&(0x7f0000002440)="83b0335ff749b45b32aef2399520f590dfd93d5def361ba02b08791afed7f21398d722a8ebdb120f30d97428ee", 0x2d}, {&(0x7f0000002480)="4f0c8480d2dba4e8cd6e5ee73382291ee1e7b4a386d1c5c247b5af2877bbf49002b3ef799d1a13659ce845a0eaba70543651dfaf12619aa0546ec5f2cf720c6d", 0x40}, {&(0x7f0000003980)="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", 0x1000}], 0x9, &(0x7f0000002600)=ANY=[@ANYBLOB="240000000000000029b188aea6ac4dd2049a93601f000000320000000000558d71c3de41ec0000c1deed66de88bd59857c", @ANYRES32=r4, @ANYBLOB="00000000140000000000000029000000080000000000008000000000140000000000000029000000080000000100000000000000"], 0x58}, 0x4) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000080)={0x5, 0x7, 0x3}) [ 926.132030][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 926.138010][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 926.173840][T31757] binder: 31756:31757 unknown command 536871488 [ 926.173927][T31761] binder: BINDER_SET_CONTEXT_MGR already set [ 926.210945][T31757] binder: 31756:31757 ioctl c0306201 20000440 returned -22 [ 926.211637][T31761] binder: 31760:31761 ioctl 40046207 0 returned -16 00:22:30 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0xf, 0x0, &(0x7f0000000040)) [ 926.250207][T31771] binder: 31760:31771 unknown command 536871488 [ 926.260479][T31771] binder: 31760:31771 ioctl c0306201 20000440 returned -22 [ 926.277137][T31774] binder: 31756:31774 unknown command 536871488 00:22:30 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x2) [ 926.319652][T31771] binder: 31760:31771 unknown command 536871488 [ 926.330232][T31774] binder: 31756:31774 ioctl c0306201 20000440 returned -22 [ 926.347011][T31771] binder: 31760:31771 ioctl c0306201 20000440 returned -22 00:22:30 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x800, 0x0) sendmmsg$alg(r1, &(0x7f0000004800)=[{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001100)="d207d4a49bdcf59432547c920714e5ff9acb0369e0b82ea4aa40ddd5694804b1d4849757d84914d2f404ede2f872d1c3c178698dcabfa2fe8baf672d1795d655beb0b4c334cc18b68a87008d39fa91e1e3a5c586c51004e618ac5429c536bd1551e2ca5cbb0d9ad8a1a2aa77101ea1e72df9d08f21031b7edf547e3cfd55234c09fb3c1a1142bd31bffccb12c499d2ca2edc66b5bb1bdda7b434da2743d22e3b71382087b4721d252cbbd563dc53d0d990841901daaaa98bbb390db62015b36c3b0de9cfa31360fa3d1244844a67b82b622e2930d895b557a40dbfe29ac6475f8c09f13920f469365300836bc3ef29322ddfadee684f9162be284b9cf33c6424e7f4cb8f8c8f8398824eec48d74b5e40a3b3c62760ce7633fa81670a1dc72e3019029710ac39bd8ff3d7b7c504e5e6d6327ab5ab92bb9af085299e6fd1ee2bc48e80a2802b4f840f8d694e4598c05c41b2f9c5f05cff1f8eba483627a408dbd772ea4242fd8286339eb734d2bd8638770c35ca9afcdbeda24d7d620a83b86d1348f356b3ffaf5daf9786b2afe63e3b9dafeb6ca69d0d56ea699431903e866a00f01ef24bea83425a2ad93185f1fe2656988ee8973ddd6cb6bbec9a3bab6813de1739531be7d509f46e3b881c5ada1db1bdb4345f520442541220ccbf64a559445a65156347331dacf54dd5526ad13bef89727e52e29681bb437401d971b107287ba77406eda7bfcbea54fb7d2a3e48df5cacad0a05669067030008e338133f7e0c1ba389af5c0daa6b0fff8381e6d2eee9f095050a49db19f1a3cfd3684f8df074a83c5912c03f67f9a33429d5c37e86875673710170390e487279f8bbd4682e48869e61cd529352e336db3d3c890775a3755322fa2c2630737b8d9d1ac2370dfca38ca3e410ade1a63a5f5a7d547c2f8cb1812173a2ade95ffeb4ca44bc94f94e64aea073b6c3e17169226a8bcf674da5b5a4b85bee695b077e03f6bcae13783962eaa4a5d8b60e596663aa5a4c5041d8e8c8741f0254e949ec7885727e2627acfacf45a10f360251dd33915936708820c11bd17e25dbd1e1cf741824990dac27a9fa32c5ffbbae7719d8dd2c428b97ad94a84fb096327b04f80a1b92deaa84ed457b511d6660ce794785534bf13fa2ac354b7b1e64b3b2b82bf19a49c9465ef7db2ab6f9747f2e19740e93c39181bbd02196a4a9a423fe90444027663ae7657b52e600008508bc5d35bb50431a150be20eaefe2f43868dd44a41f9056aba20783a85005cb8bb1a082b41918300996a87b24f1f5f7f00320a44a93049a8180ab02f32ac70f8b13a52ad444d8aa0fd46f314540b9f93447d2aa891c77266a7d937e7f8a23ae12108133b50c07df42520ad04fde77f927a048bbc70e763c76098342f9cc7237cb2eb70fb9c5ec4ae1cd61219a06c53f8fa9f97826d7117c33660a6130c0554c17f05ab135565164af0a63a1040371031b6779b125483464021a3d000b08f24ba8ba1b78d1565f6b090683821a5cd5660ba72ee4607e9f9a4359908c29993ae3b11a9ff8d7d5c6c85b8cfd1762e0d4c7b30c3a31a4d8044cbbafc624427844b686f0d538bc26b66ae1a4411295dec6691ec0bbd6619f3648399222785975d5a3deef19cd4cdc3dfd758a4110d40904a37d1adbdd8ffa9e011f10d13c40b61df9fe7fad63f6e7ff4c72ea06023a0331caa07faadcca50022f3cf46cd9176225d33e527b405e6cd5179dc4b4f8b0af3ce61129584a0d96a83b50222c43aa8e1f72c73213fea16ed3cdff6ec4ab6510f69d16511ea24c5e01a59a86a3ac1b9142216d96b08b9edf8417f11dc164bcb68f3bd1d8683ae0a11132ac2290825b4e50fc73f0fddffbdaecf9781fa8b9975cf9279a3d48d2f1387e41dd73c62076646dd8c630c5022d76020692d565a239318b9890df37874a5a1f57932e078cba9f30c082aa7dc7bf87ac3d06267910b93d81a7ee374055ea755491032078a8c7a7b52c75f665242b964e4a32646587201b5c20ef0a61c8e6e178d2536507f3bc43904c966eb22cb6bc23b62ccc22faa68b406029e773f1666d4badb2ca9f34724a1b925676430681ce91a37ffb2547c8fa566e3c1ba72f6feeb370b9a5485d48c66ab8a7b1ac1c5315d6b1c1f8ad413590761f85f7e66e81b609655e9a61b7c63c1081b0cb8bf2e72508118a09b7f8fcd59a7679403149a805f5fe95849c40fed064a15c530c2d36f8706394b702d050c34788acccbcb4ee72076302fb62a2761984b446514cf298dd83600f3ea550374ba3fd72bfa8fbd94ef2457cad3696728e8d9388fb906cddabcece51f6cf1b803ba25c280c6ba30fe3fbae5733368419bb893a5209a021bc49d05d9796b282f5ad1db0c3a4eac5a2cb2091a3d2e09f106aff1d4b7f0339aebdb9c46f508c7ad4811b5348c0906704cb08df55f2f07572eb41d7510f2030181cd82d41f3ed250338b33a63024ca495c816db45a2637ecd9eae354d55d8e3fb9dec390b0ab62c665d69e7c3739f2c06e126e5c29334ee07539a748f236bdd5680f27c4f54acabcb0806c0f16b984652f9443505e6d2df5b12a8d8d8f4809fa67d1d93b34a8d5ce02bc685cab49d09c3ef23c085b0faad6e70461ecac0bb6e23c23006c1c7a6c7b37cb6ab1565039950aa831de6b2eac0f1796d0184334b37cb5d56e3633e11e35cf1ca5f6bf126710dfeee7af0f2892a69e138265d25ec577dfced63bdffeccdd112d32377aadca15a3a8bbdc16db728f76385d3e198a7183ba4c1b367098519c09bf39ffc73064d93ce055ce266dd371a1551ae0dc6985feea0f80f05df13b9a30493300e91651aa56cbdeb5dba9cb4dcb8552920c836783ad412593fab29938a29cf8d3faf1ecfd564604fae130e7260069a005675a055e82aa753b1e59ddb7957b3c45c0324c24a922eb546de891ef5e69a5d4734622a04e49cc4303b3e9bd9b180e4e47013e07e69fdd7390b97d6235ad46e4766c0f02f9a90e5c92302303dd48fcc16a12f3d142d278ea1338f7cf3d3fe77669157fabe58cc1d17aeabd7969bffe641b57cf34db14bec67ff7f00b3c19326b2682e6d798e527321f3d2e9fda169e4e309dadac9755fe05f109252d765c72974b4ad757eed9a9aec76cdfe749b5108939a8470572dfa3e609daff7a84e3f8c9b8cefd3f9528c6753b1826d72bc6189aa69699833da4f4f323c533d653c3ef539bec3115485ba5572003d9251ea6928de1b8dd9335b75c62c103a49fe89470afc32e8cd8d9f28df902a9de3038b59e2d0e6dca510f109fd46b25b00b6bb2f04c38c333cef12cf60b934038c57a910fd6f83e8f7f22bbfd266a3aa0c3a77e6de3acd640f8e6a9308d1ff280e238d32a7e1d692c7e156806388fe010983d8591eff728e75ce16a976d34def5a74faa4ffd30ed7aae3f29dc1f3fa7e06fa4f64c8dad24523606b550f26f55c6f2c7a475ddb5f71e25c9d5ed8341ca1315a33c034a59e67fead098c21b805e855cf8e10ec8e884dfe20020b814dc737cf77e1acd53beec25fddae015d6c72710ce972adab7db20dfdc2d7dd8d59dcebec5eaad2beaf86c0d795213e0d4f2f0a3440486fa69016502d4be0338bc3293924f5e7ce5ab17523c98df51edcdfa13a0ae5e229337df2807c8b82ec1b467d61a7f8652967b96936cb4618f01fcc6a6c0e0549fb3da63896e8a9acfe2d2b55e8d034acd241c5a5fc13dc0474ff8d80373425f9f5168d599d4973feaa411be0719804cd9d992d822c8af288aa324916c97a61379cb5121444c917eccbf0556c6cd5311f47ec244538ec8f70b6cdfd329647c87b244948fec2c38d6e329e0acecb7fca00e88ec49c5f918ced8317fb365cdf05ea0fd6d5d4db8c2bd4882d654772dc29ce05777dd672fc46ec1f232ff9aede5b67c7ee9ab8d20011299a794ceb7334ce8c996013ac2f877c254aff812cb6d99dc88fb5c87a519a5ce5119d2de181d1aa1761e45b3d9bdf0ae67b2ff28127adc056e051e545f58ae778237f7a7f98d259157eb4c05dd679df07fa3fdcc8dad45459eec3c123017aa59558324c2f97c14a343f34fc7949eb7e6402702d58e84acaadd5a06d438f3f7f41da910fb7da35cd7d04f15966171ad8acce4a6ba9c385235eb06e700a274d7c0c85f0e4a4178035804c5031555133ebe75d753458e8b48e421cb7701d4d2b084f531d61a73ec0cfaf596f16bd0e413e2067148d32cceefcfcb8ca65676430e80d410c15fc4fd0a76f090f49545a9992d54b6b7b4491e7c6cebdd886457156fed4be032dadf0991dc030a2c0efdc427b6638c17e995aafbf05ea74cf859e8c14dafd8f1c225e111d5dfd35542078fe93e916d9930637516fcaf3f06c992bbbd11667b8e73a409f8f6d3c1c40b7a5d328f8c59fe1fb7c824506c0ec76de5ba941bc95541cb8b5298f37188e5a91fa96abe392a7515663d809a9eadf4b5c9695dba1ffc5a9568dee2299088725810d0d248e2eaa4239c2b027e6b072f3d9e2929db4b804b7cd41bbea4cc669c7b6c57d566c1c425b40b21cda20bdf298c84e0ad0ea0478cb1d392d615083d25d7c21293f8d4ee0ad98eb64cab4c5d6b8a3f6724fe86172f50ecac1bc8a95d65c91e256b9924f9a12ef76a11844142b238e2d72866ed590c7e829d3071eaae22dbf3200d7a592bb35b3f5b9144219799183b369a0adf433803a0914b09794bf011f271b79a7e2f8c56901640b1d34c31a3fbca4d31c067c2115d2611f653261d6df9572a7e03997a29618abf7475bc6d512c7b6fcc372128b65203b1eee66d488a655c7ce9cac2680d38242e21efcd108bc2c578bbd70b098e3281def7b9e360ce72ba17c46d1f256c1044e3502faeddd1b1bf485480d9919db1c1bd596ab70d0da43b1aa97f494cd92a1a615d910978cc9317b02beae6871e3120c511955aa6bd2b3bc6ee35a21d1b36803cb3700e125dcaba06b0a1e4e9877dea8d1cfb62f3cdfbedf2f0e22cd2cb893fe206cf905e083df6e533f93244e3a6fac3154a4458074b21959e3e409e9b0aca81513c61aff7aea4a503ac304627474b5686da120269fd4e18a07c281665d2906116961fa1665400f28baa408f51549b8d3041c7e2764c95f8a1e8781c0c30da92fcd4dc8b75836844755f35735a32f266c27ea1cb6b155331d2584e0abd604df40f953266a27227a92cc1bc848eef49fa0df54410181bab030929713b6c03497d8d37bfadf38930cb7e40fc92ca75083ab712f3ba572ee34fd4ae7ff84966d61129683124f2c83957e4fec014d82bc30dd2e676b29876fdd5e95660fbee5cb2ba63be8a106f2788f6e5ea903885f919a9cc3ce267232d9c02e89a460886b37f69f8242b9f91f725c93e712ea9a7e747e3ae6c6b0ccb5f125da7f81ee74f05739dcef573d1dce7f93035e5caf2722de0e08a8f61387209419c79f1b709d4dd93f7a3e3469c42d1224c9eb8ab790312ed590a73fbe8c08cc09a16854c6e86bb651fce73f400c54d75fce5faf5f69ea9604b7dabf7b87f9690e39ea11390b3b6c437875a18ba06a1b05e11169152ab4eac576d5a8644581329c1285b4d1315a52ffbce5a26e70ce268ddc470eb8398921440d1b4542da74ab4afcf17bb25f354347daf738045e6d39eb087f6d6354b4d17c4f896b1bb894f452221a666ce4cfd5ae4fda0f602745eeeb9adf45fee2e6f3aaa74471e58822a3e4d63040ffc48cadd6ad87b1ab318e276f183c22ce3ba4770d9d3af323844cd11ce4887be07d4c148a574b7e538a0e2103e478d803d1870", 0x1000}, {&(0x7f0000002100)="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", 0x1000}, {&(0x7f0000000080)}, {&(0x7f0000003100)="b5d222", 0x3}, {&(0x7f0000003140)="116334efbb9f4ece29767405ef63b6f54773ffaf5f13cf1fcc447f337588a7d0909d555108553695", 0x28}, {&(0x7f0000003180)="59fc33db665da7fe862312dbb0dba93c23659b44bdd6173dda3812b2650b587442c69378b12278b2b70f8079b4e41c0620dd74a857587b08be03f91f1b22a0967dd0903857ba8b2d8b814dd8096aaf51e6be54b1bf5eb88f870fdc42f2", 0x5d}], 0x7, &(0x7f0000003280)=[@op={0x18, 0x117, 0x3, 0xdcc520652fbd870a}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x80, 0x117, 0x2, 0x6b, "aa066ef0beaf65f702858025250dbb36bc8d962062ad7f05ac6c78d22ced3ecd136e09a311edec6455c89a3e50815bd37f4c95e8f4cd3d1d0ed457312d5b77436776d226cfa05f1a4dfe29fdd8ca186208778c5bc7588237c5f8ced6897cfea190625cd488db5516395fcf"}], 0xb0, 0x20000040}, {0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000003340)="7d0c5a28067a75e599965e9635c69a74adac0a69d78e09db50ef61d4cf36fc134a29174c9581d28e3aec56c988845ec73e73d82eb9f74bbe2ee59d569b10ef02da8b6e271523f091492f79e36150474a652c20ccc4c0d65482f09b25afb24e38cc45e9961f842ab577d5770a31f64099038a47abc0ec6f1749e26bf25b0030c8546c6bd05abb82f96e0eab8cfe2337f8822d4352dbd5c8ae4fde3113bddc7715d12d58275649ffd4de72b1e13710e9bd98b2f0822837990af3d91b68223f0323c8b07ac1542ef91cfa2e7afc767000f405aaf241b06f90e28daa8875cd403f5368862d84ddc514a7d2d4a9f11487", 0xee}, {&(0x7f0000003440)="01e2e7f6638210703247e344e2c47dcc0b76c28f2f18a6697b0a81df113086ea45f24682d71604d333e92d40d77c777acf199a1543d97f43874079a1f21584bd4a3dd6916e48be171246fa3de2b29bd3078d87dbb404e3bfa0bda00c6d33ef51029cd15b05de8fdf1759f057663faa015b7393cb731fe923a2bcdfa4e327d6e09cd687ec718c80eb0df176688bf274746ae7eeaa460f81f2f9bd142f7e65cb0d1142820d34f495abd319030040e9ca70344fbb0593e4482704c2", 0xba}, {&(0x7f0000003500)="baecbd2886d430144cf8f3f9955177b4e17af5ef6c7bafb4b9e6e2fc44cbb909fe58d4870e3351db3ed65eed2f5f90c93474996af74853f958f2ddf8548fe4befeeeb96088b20402eb21620990368834e92ed3c0ad4f60c98f6f4f3e46b5ede8f4b16931613f5dcd809a013dfb5716c806fdc30853c79db304727c169b5f0067a61dd6941c17c4131ba498a58fb806fcba6e06f40f36a568f8c4bdb8a2a857116a8df0ea41ed561477fe0ae72f5ce8945cb0fbab2ba24cd1ea78263ead8fb6f2dbec570bc54a21d54e70d985768b16a1f67200f8e96c08beffc76c42d6", 0xdd}, {&(0x7f0000003600)="5330e74c98a1e6f5053e67905059251e8040577b3957a5fec63dc425b67a53488a4ff79000137bdbe76738c229720067168631a7bfa5585acac4ce6b04c748b74de5043c9b2d671ecb02c94eef9fcce9d152c4405768efd4d4ace409792d82c8c1b7a1dcbdd21d1ba7a8d00e0b126b5cd3d01c1187dffb04d7ca9414ebc74771f181e1c342d686fad482496ba669f5f10bbd61e3f2b56d57e97ac97c3972c816bc0ba8b54903362e96911d048b689f40ba0ea30418f9ddd8baee794197a43f8751746fe9dc06", 0xc6}], 0x4, 0x0, 0x0, 0x80}, {0x0, 0x0, &(0x7f0000004740)=[{&(0x7f0000003740)="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", 0x1000}], 0x1, &(0x7f0000004780)=[@assoc={0x18, 0x117, 0x4, 0x2}, @iv={0x30, 0x117, 0x2, 0x17, "a3599d470b570797f2be6c98d9ba1eff4efcef236d9166"}], 0x48, 0x40}], 0x3, 0x4048000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 00:22:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000020018"]], 0x0, 0x0, 0x0}) 00:22:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0000000000003f0018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:30 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1f, 0x0, &(0x7f0000000100)=0xffffff21) accept4(r0, 0x0, &(0x7f0000000040), 0x800) [ 926.577019][T31794] binder: 31787:31794 unknown command 536871488 [ 926.597815][T31793] binder: BINDER_SET_CONTEXT_MGR already set [ 926.619916][T31793] binder: 31792:31793 ioctl 40046207 0 returned -16 [ 926.628180][T31794] binder: 31787:31794 ioctl c0306201 20000440 returned -22 [ 926.662328][T31793] binder: 31792:31793 unknown command 536871488 [ 926.669613][T31793] binder: 31792:31793 ioctl c0306201 20000440 returned -22 [ 926.693377][T31800] binder: 31792:31800 unknown command 536871488 [ 926.698417][T31794] binder: 31787:31794 unknown command 536871488 [ 926.711541][T31794] binder: 31787:31794 ioctl c0306201 20000440 returned -22 [ 926.739233][T31800] binder: 31792:31800 ioctl c0306201 20000440 returned -22 00:22:31 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x3f000000}], 0x1) 00:22:31 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:22:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000400018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:31 executing program 3: r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x2, 0x161041) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x5, &(0x7f0000000000)=0x7, 0x3) r2 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 00:22:31 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000030018"]], 0x0, 0x0, 0x0}) [ 927.096849][T31810] binder: BINDER_SET_CONTEXT_MGR already set [ 927.107333][T31809] binder: 31807:31809 unknown command 536871488 [ 927.126475][T31810] binder: 31805:31810 ioctl 40046207 0 returned -16 [ 927.145900][T31809] binder: 31807:31809 ioctl c0306201 20000440 returned -22 [ 927.155021][T31810] binder: 31805:31810 unknown command 536871488 [ 927.165842][T31816] binder: 31807:31816 unknown command 536871488 [ 927.172232][T31810] binder: 31805:31810 ioctl c0306201 20000440 returned -22 [ 927.180179][T31816] binder: 31807:31816 ioctl c0306201 20000440 returned -22 00:22:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000480018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 927.205369][T31810] binder: BINDER_SET_CONTEXT_MGR already set [ 927.223755][T31821] binder: 31805:31821 unknown command 536871488 [ 927.242571][T31810] binder: 31805:31810 ioctl 40046207 0 returned -16 [ 927.251069][T31821] binder: 31805:31821 ioctl c0306201 20000440 returned -22 00:22:31 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000040018"]], 0x0, 0x0, 0x0}) [ 927.284010][T31825] binder: 31824:31825 unknown command 536871488 [ 927.301222][T31825] binder: 31824:31825 ioctl c0306201 20000440 returned -22 00:22:31 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1f4) 00:22:31 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x5a1001, 0x0) connect$caif(r1, &(0x7f0000000080)=@util={0x25, "9ba34594a461e66ed938658eed504d60"}, 0xfffffffffffffec4) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000240)={0x101, 0x4, 0x3, 0x101, 0x939, 0x400, 0x3}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000180)={'nat\x00'}, &(0x7f0000000200)=0x78) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000000c0), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000100)) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000140)={0x9, 0x81, 0x7fff}) [ 927.355894][T31829] binder: BINDER_SET_CONTEXT_MGR already set [ 927.373088][T31829] binder: 31828:31829 ioctl 40046207 0 returned -16 [ 927.388203][T31831] binder: BINDER_SET_CONTEXT_MGR already set [ 927.388278][T31832] binder: 31824:31832 unknown command 536871488 [ 927.418473][T31833] binder: 31828:31833 unknown command 536871488 [ 927.449964][T31833] binder: 31828:31833 ioctl c0306201 20000440 returned -22 [ 927.467085][T31831] binder: 31824:31831 ioctl 40046207 0 returned -16 [ 927.471263][T31832] binder: 31824:31832 ioctl c0306201 20000440 returned -22 [ 927.494265][T31829] binder: BINDER_SET_CONTEXT_MGR already set [ 927.517409][T31833] binder: 31828:31833 unknown command 536871488 00:22:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0000000000004c0018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 927.541003][T31829] binder: 31828:31829 ioctl 40046207 0 returned -16 [ 927.570009][T31833] binder: 31828:31833 ioctl c0306201 20000440 returned -22 00:22:31 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x6, 0x200000) accept4$packet(r1, 0x0, &(0x7f00000001c0), 0x80800) getsockopt$inet_tcp_buf(r0, 0x6, 0x101a, 0x0, &(0x7f00000000c0)) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0x40000) r3 = accept4$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14, 0x80000) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000140)=[r2, r3], 0x2) sigaltstack(&(0x7f0000ffa000/0x4000)=nil, 0x0) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x3) 00:22:31 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000050018"]], 0x0, 0x0, 0x0}) [ 927.678633][T31844] binder: 31842:31844 unknown command 536871488 [ 927.711884][T31844] binder: 31842:31844 ioctl c0306201 20000440 returned -22 [ 927.763269][T31849] binder: 31842:31849 unknown command 536871488 [ 927.777260][T31850] binder: BINDER_SET_CONTEXT_MGR already set [ 927.793336][T31849] binder: 31842:31849 ioctl c0306201 20000440 returned -22 [ 927.804045][T31850] binder: 31848:31850 ioctl 40046207 0 returned -16 [ 927.831223][T31851] binder: 31848:31851 unknown command 536871488 [ 927.884411][T31851] binder: 31848:31851 ioctl c0306201 20000440 returned -22 [ 927.914808][T31851] binder: 31848:31851 unknown command 536871488 00:22:31 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x300000000000000}], 0x1) 00:22:31 executing program 3: socket$inet_dccp(0x2, 0x6, 0x0) r0 = socket$inet(0x2, 0x4040000000000001, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080)=r1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='b\x01\xf2\x00', 0x1) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x18) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 00:22:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000600018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:31 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:22:31 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000060018"]], 0x0, 0x0, 0x0}) [ 927.934189][T31851] binder: 31848:31851 ioctl c0306201 20000440 returned -22 [ 928.023122][T31859] binder: 31857:31859 unknown command 536871488 [ 928.059920][T31863] binder: BINDER_SET_CONTEXT_MGR already set 00:22:32 executing program 3: r0 = socket$inet(0x2, 0x1025, 0xffffffffffffbfec) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) [ 928.072941][T31859] binder: 31857:31859 ioctl c0306201 20000440 returned -22 [ 928.113117][T31863] binder: 31862:31863 ioctl 40046207 0 returned -16 [ 928.147311][T31866] binder: 31862:31866 unknown command 536871488 [ 928.157998][T31867] binder: 31857:31867 unknown command 536871488 [ 928.172298][T31867] binder: 31857:31867 ioctl c0306201 20000440 returned -22 [ 928.190656][T31866] binder: 31862:31866 ioctl c0306201 20000440 returned -22 00:22:32 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x800, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=r2) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) [ 928.249309][T31863] binder: BINDER_SET_CONTEXT_MGR already set [ 928.298498][T31863] binder: 31862:31863 ioctl 40046207 0 returned -16 00:22:32 executing program 2: semop(0x0, &(0x7f0000000040)=[{0x400001000000003, 0x8004}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x101000, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)=0x1) 00:22:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000680018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:32 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000070018"]], 0x0, 0x0, 0x0}) 00:22:32 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x9) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) [ 928.520222][T31884] binder: 31883:31884 unknown command 536871488 [ 928.561881][T31887] binder: BINDER_SET_CONTEXT_MGR already set [ 928.595595][T31884] binder: 31883:31884 ioctl c0306201 20000440 returned -22 [ 928.615439][T31887] binder: 31885:31887 ioctl 40046207 0 returned -16 [ 928.616019][T31895] binder: 31885:31895 unknown command 536871488 [ 928.661227][T31895] binder: 31885:31895 ioctl c0306201 20000440 returned -22 [ 928.681284][T31897] binder: 31883:31897 unknown command 536871488 [ 928.701563][T31897] binder: 31883:31897 ioctl c0306201 20000440 returned -22 00:22:32 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) r0 = semget(0x1, 0x3, 0x64) semop(r0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {0x0, 0x1}], 0x1) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) [ 928.732575][T31895] binder: BINDER_SET_CONTEXT_MGR already set [ 928.754491][T31900] binder: 31885:31900 unknown command 536871488 [ 928.802125][T31900] binder: 31885:31900 ioctl c0306201 20000440 returned -22 [ 928.807528][T31895] binder: 31885:31895 ioctl 40046207 0 returned -16 00:22:32 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x3f00000000000000}], 0x1) 00:22:32 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x10000ffff) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000080)=0xffffffff, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='\xdbas\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) r1 = syz_open_dev$radio(&(0x7f00000002c0)='/dev/radio#\x00', 0x0, 0x2) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x14, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/cachefiles\x00', 0x0, 0x0) socketpair(0x5, 0x3, 0xb44c, &(0x7f0000000100)={0xffffffffffffffff}) sendto$isdn(r3, &(0x7f0000000a80)={0xbe5e, 0x95, "e68501746be0f5014a6eb1ad2b694301405b68ee7cf219f6664f566bc9fa4026d71c17e116cab212178d27f2234b567d4eaa8b3023d701a235d3d2901305b9bcc09c51a237022161cd22611b0eb9f03334ff8ce101d00ae1ee1966"}, 0x63, 0x1, &(0x7f0000000b00)={0x22, 0x100, 0x0, 0x4, 0x100000000}, 0x6) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x2101, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r6, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100000001}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4004040) 00:22:32 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:22:32 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000080018"]], 0x0, 0x0, 0x0}) 00:22:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0000000000006c0018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 929.023189][T31916] binder: 31915:31916 unknown command 536871488 [ 929.040392][T31917] binder: BINDER_SET_CONTEXT_MGR already set [ 929.057988][T31916] binder: 31915:31916 ioctl c0306201 20000440 returned -22 00:22:33 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000480018"]], 0x0, 0x0, 0x0}) [ 929.102573][T31923] binder: 31915:31923 unknown command 536871488 [ 929.105495][T31917] binder: 31914:31917 ioctl 40046207 0 returned -16 [ 929.109704][T31924] binder: 31914:31924 unknown command 536871488 [ 929.127472][T31923] binder: 31915:31923 ioctl c0306201 20000440 returned -22 [ 929.135322][T31924] binder: 31914:31924 ioctl c0306201 20000440 returned -22 [ 929.193652][T31924] binder: 31914:31924 unknown command 536871488 [ 929.205305][T31924] binder: 31914:31924 ioctl c0306201 20000440 returned -22 00:22:33 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@generic={0x0, 0x3, 0x80}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x200, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000280)=0xe8) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x401, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 00:22:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000740018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 929.266990][T31933] binder: 31932:31933 unknown command 536871488 [ 929.302440][T31933] binder: 31932:31933 ioctl c0306201 20000440 returned -22 [ 929.356816][T31937] binder: 31932:31937 unknown command 536871488 [ 929.383960][T31937] binder: 31932:31937 ioctl c0306201 20000440 returned -22 00:22:33 executing program 3: r0 = socket$inet(0x2, 0x4, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x4c, 0x100) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000080)={'icmp\x00'}, &(0x7f0000000100)=0x1e) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 00:22:33 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0000000000004c0018"]], 0x0, 0x0, 0x0}) [ 929.402387][T31939] binder: BINDER_SET_CONTEXT_MGR already set [ 929.408434][T31939] binder: 31936:31939 ioctl 40046207 0 returned -16 [ 929.489499][T31941] binder: 31936:31941 unknown command 536871488 [ 929.536169][T31941] binder: 31936:31941 ioctl c0306201 20000440 returned -22 [ 929.591021][T31947] binder: 31946:31947 unknown command 536871488 [ 929.596925][T31939] binder: BINDER_SET_CONTEXT_MGR already set [ 929.628997][T31941] binder: 31936:31941 unknown command 536871488 [ 929.640686][T31947] binder: 31946:31947 ioctl c0306201 20000440 returned -22 [ 929.648848][T31939] binder: 31936:31939 ioctl 40046207 0 returned -16 [ 929.680230][T31941] binder: 31936:31941 ioctl c0306201 20000440 returned -22 00:22:33 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) [ 929.698514][T31952] binder: 31946:31952 unknown command 536871488 [ 929.736909][T31952] binder: 31946:31952 ioctl c0306201 20000440 returned -22 00:22:33 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x1, 0x0) accept4$alg(r0, 0x0, 0x0, 0x800) 00:22:33 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x2) 00:22:33 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:22:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0000000000007a0018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:33 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000600018"]], 0x0, 0x0, 0x0}) 00:22:33 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x102, 0x0) ioctl$sock_ifreq(r0, 0x89bf, &(0x7f00000003c0)={'ifb0\x00', @ifru_mtu=0x401}) r1 = socket$inet(0x2, 0x4040000000000001, 0x0) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000100)={0x0, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e24, @empty}, 0x1, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)='nr0\x00', 0x7fff, 0x4, 0xad7}) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r1, 0x6, 0x1e, 0x0, &(0x7f0000000380)=0x1fe) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x800, 0x100) setsockopt$inet6_dccp_buf(r2, 0x21, 0x8f, &(0x7f0000000240)="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", 0xfa) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000340)=0x5) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0}, &(0x7f0000000180)=0x14) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000001c0)={@broadcast, @dev={0xac, 0x14, 0x14, 0xd}, r3}, 0xc) socket$can_raw(0x1d, 0x3, 0x1) [ 929.966861][T31969] binder: 31968:31969 unknown command 536871488 [ 930.005960][T31969] binder: 31968:31969 ioctl c0306201 20000440 returned -22 [ 930.007494][T31977] binder: BINDER_SET_CONTEXT_MGR already set 00:22:34 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) r0 = semget$private(0x0, 0x4, 0x2) semop(r0, &(0x7f0000000240)=[{0x0, 0x7fff, 0xffc}], 0x193) [ 930.048083][T31977] binder: 31971:31977 ioctl 40046207 0 returned -16 [ 930.079113][T31986] binder: 31971:31986 unknown command 536871488 [ 930.084969][T31985] binder: 31968:31985 unknown command 536871488 [ 930.094127][T31985] binder: 31968:31985 ioctl c0306201 20000440 returned -22 [ 930.102243][T31986] binder: 31971:31986 ioctl c0306201 20000440 returned -22 00:22:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000680018"]], 0x0, 0x0, 0x0}) 00:22:34 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000240)={{0x2, 0x4e24, @broadcast}, {0x307, @broadcast}, 0x26, {0x2, 0x4e23, @multicast1}, 'batadv0\x00'}) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000002c0), &(0x7f0000000300)=0x4) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f00000001c0)=[0x0, 0x0, 0xffffffffffffffff, 0x0]) setresgid(r1, r3, r5) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000340)) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) ioctl$TUNSETGROUP(r2, 0x400454ce, r4) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x1, 0x4) 00:22:34 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) [ 930.164975][T31977] binder: BINDER_SET_CONTEXT_MGR already set [ 930.175747][T31986] binder: 31971:31986 unknown command 536871488 [ 930.189453][T31977] binder: 31971:31977 ioctl 40046207 0 returned -16 [ 930.197952][T31986] binder: 31971:31986 ioctl c0306201 20000440 returned -22 00:22:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000ff0018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 930.255017][T31998] binder: 31996:31998 unknown command 536871488 [ 930.283397][T31998] binder: 31996:31998 ioctl c0306201 20000440 returned -22 [ 930.292597][ C0] net_ratelimit: 18 callbacks suppressed [ 930.292621][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 930.299675][T32004] binder: 31996:32004 unknown command 536871488 [ 930.309351][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 930.310841][T32004] binder: 31996:32004 ioctl c0306201 20000440 returned -22 [ 930.336965][T32005] binder: BINDER_SET_CONTEXT_MGR already set 00:22:34 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x100, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000001c0)={{0x3, 0x6d1}, {0x0, 0x8}, 0x3, 0x1, 0xff}) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000240)={@empty, @multicast2}, &(0x7f0000000280)=0xc) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1000, 0x80000) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x5, 0x20}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r3, 0x45ef, 0x6cff2c36}, 0xc) [ 930.358482][T32005] binder: 32003:32005 ioctl 40046207 0 returned -16 [ 930.386958][T32005] binder: 32003:32005 unknown command 536871488 [ 930.397010][T32005] binder: 32003:32005 ioctl c0306201 20000440 returned -22 00:22:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0000000000006c0018"]], 0x0, 0x0, 0x0}) [ 930.417413][T32005] binder: BINDER_SET_CONTEXT_MGR already set [ 930.428219][T32009] binder: 32003:32009 unknown command 536871488 [ 930.436869][T32005] binder: 32003:32005 ioctl 40046207 0 returned -16 [ 930.451053][T32009] binder: 32003:32009 ioctl c0306201 20000440 returned -22 [ 930.567007][T32013] binder: 32012:32013 unknown command 536871488 [ 930.577920][T32013] binder: 32012:32013 ioctl c0306201 20000440 returned -22 [ 930.598409][T32015] binder: 32012:32015 unknown command 536871488 [ 930.609548][T32015] binder: 32012:32015 ioctl c0306201 20000440 returned -22 00:22:34 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1f4) 00:22:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000200000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000740018"]], 0x0, 0x0, 0x0}) 00:22:34 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x5) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 00:22:34 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) [ 930.891273][T32026] binder: 32021:32026 unknown command 536871488 [ 930.923363][T32027] binder: BINDER_SET_CONTEXT_MGR already set [ 930.970691][T32026] binder: 32021:32026 ioctl c0306201 20000440 returned -22 [ 930.987817][T32027] binder: 32020:32027 ioctl 40046207 0 returned -16 [ 931.013932][T32037] binder: 32020:32037 unknown command 536871488 00:22:35 executing program 2: r0 = semget(0x0, 0x7, 0x20) semop(r0, &(0x7f0000000180), 0x2aaaaaaaaaaaadd1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) 00:22:35 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) [ 931.072857][T32044] binder: 32021:32044 unknown command 536871488 [ 931.101245][T32037] binder: 32020:32037 ioctl c0306201 20000440 returned -22 00:22:35 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0000000000007a0018"]], 0x0, 0x0, 0x0}) [ 931.122092][T32044] binder: 32021:32044 ioctl c0306201 20000440 returned -22 00:22:35 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x1a50c1, 0x0) accept4$tipc(r0, &(0x7f0000000080), &(0x7f0000000140)=0x10, 0x800) r1 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) [ 931.201376][T32037] binder: 32020:32037 unknown command 536871488 [ 931.229285][T32037] binder: 32020:32037 ioctl c0306201 20000440 returned -22 00:22:35 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) r0 = semget(0x2, 0x4, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) io_uring_setup(0xa4c, &(0x7f00000000c0)={0x0, 0x0, 0x5, 0x0, 0x283}) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) 00:22:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000300000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 931.313321][T32056] binder: BINDER_SET_CONTEXT_MGR already set 00:22:35 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) r1 = dup3(r0, r0, 0x80000) r2 = getpid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000011c0)={0x0}, &(0x7f0000001200)=0xc) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001240)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002740)={0x0}, &(0x7f0000002780)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000027c0)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f00000028c0)=0xe8) r8 = getgid() r9 = fcntl$getown(r0, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002900)={{{@in=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000002a00)=0xe8) getresgid(&(0x7f0000002a40), &(0x7f0000002a80)=0x0, &(0x7f0000002ac0)) sendmsg$netlink(r1, &(0x7f0000002c00)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbff}, 0xc, &(0x7f0000002700)=[{&(0x7f0000000100)={0x1098, 0x1f, 0x0, 0x70bd2c, 0x25dfdbfe, "", [@nested={0x1088, 0x27, [@typed={0x8, 0x5, @pid=r2}, @generic="0d3fe83d860e116787453141cc8e634994afc7a4f0c9c79d2ffdbf8d", @typed={0x8, 0x34, @pid=r3}, @generic="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", @generic="4a678cdbc7a54ec3aebed845bf7d15770c6dbb64b9bae12f79f9ba0ca12879c43232453898b7bcea3c314772fb477b8a2b860d8fb359b526010cdacfb478047d6360284c7b63cc1b13cce42a9184a44b3bff096bdec8"]}]}, 0x1098}, {&(0x7f0000001280)={0x1460, 0x37, 0x3977ca32447d1a5f, 0x70bd2d, 0x25dfdbfd, "", [@nested={0xa8, 0x8b, [@generic="27194b4bc18ea80a87f905cb4c042cc195b488ad8f4f836324031f92d16c4aba0e5190e9bdf5b6fd0631f37e4f64f1a25f12b4091a1b4f4a5c383508f29db07d767e14f34a06c40783b7852c16258f11b664297db3e683a24795899bd47c11fec3efd8f234706e388ab17a12427adf99ec680b63ed140dc7a6230ad6379fd3651b117dcc6b27641fb5111d6cdb54a04bcddb225e2894c0a580", @typed={0x8, 0x1a, @u32=0x7ff}]}, @nested={0x1160, 0x6b, [@typed={0x8, 0x19, @ipv4=@broadcast}, @generic="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", @generic="d0a208f5507cfe7fe2a68fef1bebd1ef660313adb7df2fb82f8826f122d3495af1cadcc57e3b07fc433163278ecc8d1f000b8eebbda13e55375a82d9a31d198f20338a02dc487617b15183dc01b6e6f65c37f4518965822b400584af6f9d8d79c1c5b32b483ae125c3b05b76ae8af1d309e3c83768b682accb5b0d5caca70e2549ef1023df", @generic="64cc55d360ea63afc49663ef56e984fb277fa34a007554990127ab00031ad3dda3be67a3bb1dd9a78853407cd7c780a621afde38a56959af309141afac4c07a9d6293fcf06b926a2273c800cf66d76cd953984bef6fc3598895a0196d2360e4568284195ccc1cbaa9c15fceae3088d85007dd8b466b1693bfff31b3a8c641684e709ea597522255bb1f59c3e894b1d06a4fdbba3c8e9885e38aa44f11908ce41cab9b440e1e942aa14dee1a6ccbbac227a5dc3ece894409378054699bb2041dc64e2a68b95a067dd629d912f7788fa"]}, @typed={0x8, 0x29, @pid=r4}, @nested={0x84, 0x3, [@generic="bb42e3e8b15e6f9add781d573d41b6d7dc3666b97b1c9746d3548310ae4bc37d763aca9fea2bdc66d959d3c44e1a9bb5f4e80be341095c9081f495708cc8db957944dbfb9b30f11680f41f9a3519572960365ccf", @generic="405b2395fd050f57f1599079", @generic="5a44b30ec08798886c425ddf03508849a5e37fdaf8c25d64588dbae039a9d1"]}, @nested={0xb0, 0xb, [@generic="4a60d490589bb3512d916e5a69bc723e38eb400935620887ee9440b9fc59162a9b08c18ef371be1e58d45b16c792940681798edbef8f098b9941ac1e357894a25e87d0a133dd80960da193c390a38af00ffa31e948b788c93a25377f6b93e1ab7508dc5ff6f4587ee2f641c1b7a10ec35658e9b473030dc74e091bb140bf08a65bb786154bd9ec3c27fc7928e629ff5815326ec03c54bfb4606375b79bb0280cf3", @typed={0x8, 0xd, @pid=r5}]}, @generic="f078f91efab65a24b71015769e078b5611df7c0854fd02626c820dab0d02b8dd3dfdb44e816c840d29ef096529f44682578044a762d257eb88de55c7580682f3d34a1a3818dc1f6d5d6772609883f710749a61330792b71289a33821f181836f90411caaddc2ff", @typed={0x14, 0x36, @ipv6=@loopback}, @generic="bb7d39095084a0689dfb12b268bb54f15eb5185e64cb15c6e1b61d855bca5644dec11b205c9d30e4884e79e843320048a187dfcb2fee0794e23bd4a22daaef95d62c1ca91c2dc87cacda1b9abd4106412feb05a8bb16919722a269b3e4f70af91dfa93e78bc3527d32e4d838c2817dbb757f6f7fe51f99f2965066c7ea601b3dc61248ca28b006acf4f157b5d8346d0a73"]}, 0x1460}], 0x2, &(0x7f0000002b00)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, r0]}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}], 0xf0, 0x20000001}, 0x48010) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) [ 931.372878][T32056] binder: 32053:32056 ioctl 40046207 0 returned -16 [ 931.413281][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 931.419166][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 931.426107][T32060] binder: 32053:32060 unknown command 536871488 [ 931.463779][T32060] binder: 32053:32060 ioctl c0306201 20000440 returned -22 [ 931.487760][T32060] binder: 32053:32060 unknown command 536871488 [ 931.494344][T32060] binder: 32053:32060 ioctl c0306201 20000440 returned -22 [ 931.524252][T32069] binder: BINDER_SET_CONTEXT_MGR already set [ 931.555793][T32069] binder: 32065:32069 ioctl 40046207 0 returned -16 [ 931.565540][T32069] binder: 32065:32069 unknown command 536871488 [ 931.572367][T32069] binder: 32065:32069 ioctl c0306201 20000440 returned -22 [ 931.583859][T32071] binder: 32065:32071 unknown command 536871488 [ 931.590457][T32071] binder: 32065:32071 ioctl c0306201 20000440 returned -22 00:22:35 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) r0 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0xffffffff, 0x240080) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000000280)={0x7b, 0x0, [0x2, 0xfffffffffffffffd, 0x4, 0x4]}) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x6, 0x181000) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x100}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={r2, 0xfffffffffffffb13, 0x20}, &(0x7f0000000180)=0xc) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) 00:22:35 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000318"]], 0x0, 0x0, 0x0}) 00:22:35 executing program 2: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x628000, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000100)={'hsr0\x00', 0x72f9b266}) sync_file_range(r0, 0x8, 0xffffffff, 0x0) r1 = semget$private(0x0, 0x3, 0x40) semop(r1, &(0x7f00000000c0)=[{0x0, 0x7f, 0x800}, {0x3, 0x4, 0x800}, {0x3, 0x9, 0x800}, {0x2, 0x1, 0x1000}, {0x5, 0x4, 0x20000000001800}, {0x0, 0x40, 0x800}, {0x20000000, 0x8, 0xfff}, {0x0, 0x7, 0xffe}], 0x2aaaaaaaaaaaac84) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000000)=[{0x2, 0x6, 0x1800}, {0x3, 0x3, 0x1000}, {0x4, 0x80, 0x800}, {0x0, 0xd54, 0x1800}, {0x0, 0x4, 0x1000}], 0x5) 00:22:35 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x21) getsockopt$inet_tcp_buf(r1, 0x6, 0x1b, 0x0, &(0x7f00000000c0)=0x13) 00:22:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000400000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:35 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) [ 931.840110][T32084] binder: 32082:32084 unknown command 536871488 [ 931.861681][T32084] binder: 32082:32084 ioctl c0306201 20000440 returned -22 [ 931.871299][T32085] binder: BINDER_SET_CONTEXT_MGR already set [ 931.878220][T32085] binder: 32080:32085 ioctl 40046207 0 returned -16 00:22:35 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x4, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x1, 0xd, 0x3, 0x3}, &(0x7f0000000140)=0x3, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=0xffff}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)=r1, 0x4) 00:22:35 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000518"]], 0x0, 0x0, 0x0}) [ 931.891053][T32089] binder: 32082:32089 unknown command 536871488 [ 931.899011][T32085] binder: 32080:32085 unknown command 536871488 [ 931.905781][T32089] binder: 32082:32089 ioctl c0306201 20000440 returned -22 [ 931.913706][T32085] binder: 32080:32085 ioctl c0306201 20000440 returned -22 [ 931.975052][T32094] binder: 32080:32094 unknown command 536871488 [ 932.006551][T32094] binder: 32080:32094 ioctl c0306201 20000440 returned -22 00:22:36 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x3f, 0x0, &(0x7f0000000080)=0xb594) [ 932.036694][T32100] binder: BINDER_SET_CONTEXT_MGR already set 00:22:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000500000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 932.085984][T32100] binder: 32099:32100 ioctl 40046207 0 returned -16 [ 932.130355][T32102] binder: 32099:32102 unknown command 536871488 [ 932.153791][T32102] binder: 32099:32102 ioctl c0306201 20000440 returned -22 [ 932.191784][T32108] binder: 32107:32108 unknown command 536871488 [ 932.208115][T32100] binder: BINDER_SET_CONTEXT_MGR already set [ 932.214358][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 932.214420][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 932.214529][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 932.214572][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:22:36 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x5, 0x410001) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000340)={0x1, 'syzkaller1\x00', 0x1}, 0x18) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0xe10, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8004) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="4cb72e45812730c312c36771297532c3e2987f87e4712b48e44e866e3f23ac0f504b9cb1e61b069fd6adf9ad88ddd6b87420d2851e52b4940d0774177055e365c40371d690978e3c95c316783274cec4b9ced472984d058bce17c4995dd052e87888fb05b080359980ba5c7fd9dac2573e1b64bd2685a3f139fb5a9ad1d40687f2b4be46809322012d3d4f3a4a85fbb288e5b6c2470b5458808e2eedbe1249620a4b270338cabcf44421fa92d1f7f4a8e447e821a3a07ed45e149cfce87c885a42d760a2dffe2e2c6e8724750e3d2bc5b6c20778b2b0dcc473b81c8e991d77b2bc6fd8", 0xe3}], 0x1, 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0xfffffffffffffe3f) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) [ 932.214665][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 932.214706][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 932.259845][T32108] binder: 32107:32108 ioctl c0306201 20000440 returned -22 [ 932.325485][T32111] IPVS: Unknown mcast interface: syzkaller1 [ 932.350574][T32114] binder: 32107:32114 unknown command 536871488 [ 932.356984][T32111] IPVS: Unknown mcast interface: syzkaller1 [ 932.367792][T32113] binder: BINDER_SET_CONTEXT_MGR already set 00:22:36 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) r1 = epoll_create(0xa9e6) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) [ 932.379078][T32100] binder: 32099:32100 ioctl 40046207 0 returned -16 [ 932.453303][T32113] binder: 32107:32113 ioctl 40046207 0 returned -16 [ 932.501319][T32114] binder: 32107:32114 ioctl c0306201 20000440 returned -22 00:22:36 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7ffc}], 0x0) 00:22:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000618"]], 0x0, 0x0, 0x0}) 00:22:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000600000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:36 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f0000000100)="c2c02512a28daa51d7b00830050dae7a8cc8260409003eb9079b5451186b8342171227d079f3d2a139e455a2ad710fe6feac041c839fda247b910d3410b8833e7bd427050c275ce17a97de2c38fc6d9261c752d40753d439ff0ce0c84758dca4f6e6ef40e0e922735dae3ec3e5fc7393499431da0b89b2b07de107aef3db8ed0436f41dcc0a03a07d7ba7bdc928d98335871eba0c918e0658bd8f085874e138daca2c8e6ebb746dd22a6c437fc4ec975e25a52347e740245bb6cba", 0xbb, 0x4000, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f00000000c0)) 00:22:36 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:22:36 executing program 2: semop(0x0, &(0x7f0000000000), 0x0) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) [ 932.848437][T32129] binder: BINDER_SET_CONTEXT_MGR already set [ 932.861911][T32127] binder: 32126:32127 unknown command 536871488 [ 932.881805][T32129] binder: 32128:32129 ioctl 40046207 0 returned -16 00:22:36 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x2, 0x0) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000080)) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 00:22:36 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x0) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x1) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x301, 0x70bd29, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048050}, 0x40000) [ 932.907976][T32127] binder: 32126:32127 ioctl c0306201 20000440 returned -22 [ 932.929247][T32141] binder: 32128:32141 unknown command 536871488 [ 932.953686][T32127] binder: BINDER_SET_CONTEXT_MGR already set [ 932.978166][T32141] binder: 32128:32141 ioctl c0306201 20000440 returned -22 [ 932.991742][T32143] binder: 32126:32143 unknown command 536871488 [ 933.029916][T32127] binder: 32126:32127 ioctl 40046207 0 returned -16 [ 933.043422][T32141] binder: 32128:32141 unknown command 536871488 [ 933.064871][T32143] binder: 32126:32143 ioctl c0306201 20000440 returned -22 [ 933.076745][T32141] binder: 32128:32141 ioctl c0306201 20000440 returned -22 00:22:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000718"]], 0x0, 0x0, 0x0}) 00:22:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000700000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:37 executing program 3: setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='bbr\x00', 0x4) r0 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x400000) ioctl$RTC_WIE_ON(r0, 0x700f) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="2c000087a6b89e5e910edcc5229a5f4e4457bd954cc17bb3c4a6fbd0484589e9b868072f6764503d5c88167c36c9b5d2"], &(0x7f0000000080)=0x34) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100)={r1, 0x7ff}, 0x8) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x624800, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000480)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000500)={0x13, 0x10, 0xfa00, {&(0x7f0000000280), r3, 0x2}}, 0x18) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x4e20, @rand_addr=0x80000001}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x0, @mcast2, 0x5}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e20, 0x2, @remote, 0x101}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @ipv4={[], [], @multicast1}, 0xada}, @in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e24, 0x5, @local, 0xdc}], 0xc0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 00:22:37 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x4000, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x1f) semget$private(0x0, 0x2, 0x1) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) keyctl$set_reqkey_keyring(0xe, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)) [ 933.283004][T32160] binder: 32159:32160 unknown command 536871488 [ 933.290154][T32161] binder: BINDER_SET_CONTEXT_MGR already set [ 933.327797][T32161] binder: 32158:32161 ioctl 40046207 0 returned -16 [ 933.365863][T32168] binder: 32158:32168 unknown command 536871488 [ 933.380630][T32160] binder: 32159:32160 ioctl c0306201 20000440 returned -22 [ 933.430208][T32168] binder: 32158:32168 ioctl c0306201 20000440 returned -22 [ 933.469917][T32172] binder: 32158:32172 unknown command 536871488 [ 933.476820][T32172] binder: 32158:32172 ioctl c0306201 20000440 returned -22 [ 933.494516][T32160] binder: BINDER_SET_CONTEXT_MGR already set [ 933.504861][T32173] binder: 32159:32173 unknown command 536871488 [ 933.523607][T32160] binder: 32159:32160 ioctl 40046207 0 returned -16 [ 933.565041][T32173] binder: 32159:32173 ioctl c0306201 20000440 returned -22 00:22:37 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x8000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x164, r1, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffff00000000000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffffffff0ad3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x904}]}, @TIPC_NLA_MEDIA={0x84, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe7bd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x68, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x405}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x70a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) 00:22:37 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0xcbf, 0x202) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x400000, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) getsockopt$inet_tcp_buf(r1, 0x6, 0x1b, 0x0, &(0x7f0000000100)=0xfffffffffffffe8f) 00:22:37 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x6, 0x80000) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f00000000c0), &(0x7f0000000100)=0x4) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) 00:22:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000002018"]], 0x0, 0x0, 0x0}) 00:22:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000800000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:37 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) [ 933.785651][T32184] binder: 32183:32184 unknown command 536871488 [ 933.796738][T32182] binder: BINDER_SET_CONTEXT_MGR already set [ 933.824932][T32182] binder: 32181:32182 ioctl 40046207 0 returned -16 00:22:37 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0xf, 0x0, &(0x7f0000000080)) [ 933.832227][T32184] binder: 32183:32184 ioctl c0306201 20000440 returned -22 [ 933.845995][T32182] binder: 32181:32182 unknown command 536871488 [ 933.855441][T32194] binder: 32183:32194 unknown command 536871488 [ 933.865239][T32182] binder: 32181:32182 ioctl c0306201 20000440 returned -22 [ 933.888012][T32194] binder: 32183:32194 ioctl c0306201 20000440 returned -22 [ 933.897095][T32182] binder: BINDER_SET_CONTEXT_MGR already set 00:22:37 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x40000, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f00000000c0)={0x6, 0x914, 0x200, 0x8147, 0xfffffffffffffffa, 0x5e58, 0xffff, 0x7, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0x5, 0x8002, 0x5, 0x401, r1}, &(0x7f0000000180)=0x10) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240), 0x0) 00:22:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000004800000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:37 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x2f, 0x0, &(0x7f00000000c0)) 00:22:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000003f18"]], 0x0, 0x0, 0x0}) [ 933.930916][T32197] binder: 32181:32197 unknown command 536871488 [ 933.940988][T32182] binder: 32181:32182 ioctl 40046207 0 returned -16 [ 933.949302][T32197] binder: 32181:32197 ioctl c0306201 20000440 returned -22 00:22:38 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) [ 934.062258][T32209] binder: 32207:32209 unknown command 536871488 [ 934.077908][T32212] binder: BINDER_SET_CONTEXT_MGR already set [ 934.086193][T32209] binder: 32207:32209 ioctl c0306201 20000440 returned -22 [ 934.087092][T32212] binder: 32208:32212 ioctl 40046207 0 returned -16 [ 934.103970][T32212] binder: 32208:32212 unknown command 536871488 [ 934.110480][T32212] binder: 32208:32212 ioctl c0306201 20000440 returned -22 [ 934.125199][T32216] binder: 32207:32216 unknown command 536871488 [ 934.133218][T32212] binder: BINDER_SET_CONTEXT_MGR already set [ 934.133706][T32218] binder: 32208:32218 unknown command 536871488 [ 934.160577][T32216] binder: 32207:32216 ioctl c0306201 20000440 returned -22 [ 934.166910][T32212] binder: 32208:32212 ioctl 40046207 0 returned -16 [ 934.176026][T32218] binder: 32208:32218 ioctl c0306201 20000440 returned -22 00:22:38 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'L+', 0x1}, 0x28, 0x3) sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) 00:22:38 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x2) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 00:22:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000004c00000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000004018"]], 0x0, 0x0, 0x0}) 00:22:38 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) [ 934.749639][T32231] binder: BINDER_SET_CONTEXT_MGR already set [ 934.749916][T32230] binder: 32228:32230 unknown command 536871488 [ 934.759953][T32231] binder: 32225:32231 ioctl 40046207 0 returned -16 00:22:38 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) [ 934.790063][T32231] binder: 32225:32231 unknown command 536871488 [ 934.804961][T32230] binder: 32228:32230 ioctl c0306201 20000440 returned -22 [ 934.808288][T32231] binder: 32225:32231 ioctl c0306201 20000440 returned -22 [ 934.819973][T32237] binder: 32228:32237 unknown command 536871488 [ 934.854005][T32231] binder: BINDER_SET_CONTEXT_MGR already set [ 934.869045][T32237] binder: 32228:32237 ioctl c0306201 20000440 returned -22 [ 934.885903][T32240] binder: 32225:32240 unknown command 536871488 00:22:38 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) process_vm_writev(r1, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/82, 0x52}, {&(0x7f0000001180)=""/242, 0xf2}, {&(0x7f0000001280)=""/108, 0x6c}, {&(0x7f0000001300)=""/146, 0x92}], 0x5, &(0x7f0000000080)=[{&(0x7f0000001440)=""/236, 0xec}, {&(0x7f0000001540)=""/248, 0xf8}, {&(0x7f0000001640)=""/194, 0xc2}], 0x3, 0x0) [ 934.918326][T32231] binder: 32225:32231 ioctl 40046207 0 returned -16 [ 934.918756][T32240] binder: 32225:32240 ioctl c0306201 20000440 returned -22 00:22:38 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='keyringposix_acl_access%+!\x00', 0xffffffffffffff9c}, 0x10) fchdir(r0) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) 00:22:38 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:22:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000006000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000004818"]], 0x0, 0x0, 0x0}) [ 935.031079][T32253] binder: 32252:32253 unknown command 536871488 [ 935.052144][T32253] binder: 32252:32253 ioctl c0306201 20000440 returned -22 [ 935.079157][T32260] binder: BINDER_SET_CONTEXT_MGR already set [ 935.089963][T32260] binder: 32259:32260 ioctl 40046207 0 returned -16 [ 935.106605][T32260] binder: 32259:32260 unknown command 536871488 [ 935.114703][T32261] binder: 32252:32261 unknown command 536871488 00:22:39 executing program 3: r0 = semget$private(0x0, 0x0, 0x106) fstat(0xffffffffffffff9c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) r4 = getgid() r5 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x6, 0x200) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r5, 0x80dc5521, &(0x7f0000000240)=""/4096) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0x9, r1, r2, r3, r4, 0x80, 0xf6}, 0x1, 0x1f, 0x2}) r6 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r6, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) [ 935.127297][T32260] binder: 32259:32260 ioctl c0306201 20000440 returned -22 [ 935.174591][T32261] binder: 32252:32261 ioctl c0306201 20000440 returned -22 [ 935.247969][T32260] binder: BINDER_SET_CONTEXT_MGR already set [ 935.316677][T32260] binder: 32259:32260 ioctl 40046207 0 returned -16 [ 935.577301][ C1] net_ratelimit: 12 callbacks suppressed [ 935.577352][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 935.589719][ C1] protocol 88fb is buggy, dev hsr_slave_1 00:22:39 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) getpeername(0xffffffffffffff9c, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000001c0)=0x80) bind$tipc(r0, 0x0, 0x0) 00:22:39 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, 0x0, r0) r1 = msgget(0x2, 0x100) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x40, 0x80001) ioctl$TIOCSSERIAL(r2, 0x541f, &(0x7f00000001c0)={0x21240, 0xfffff7ffffffffd8, 0x6, 0xfffffffffffffffb, 0x1, 0x3, 0x10000, 0x6, 0x43c, 0x964b, 0xb13, 0x4e0f, 0x1, 0x101, &(0x7f00000000c0)=""/116, 0x8, 0x3, 0x5b}) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/162) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000340)={'hwsim0\x00', {0x2, 0x4e23, @multicast2}}) 00:22:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000006800000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:39 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x10000, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000100)="ab3f71ca496326cb472b6cadc7f7abb1a5d0d8c1d57ad51c451340e2867b74b9f1d596fbba5ca386ce6e39c137084b93993d8c7d8f1f4ae9d09d7f9003e28e6f1e6773f0427c36fa65e5e26a1adaeab46348a0e920ccc4f8ce3e86cfff6483e3299d99ffa4b48614ea8df75097baa06b7a972a4a4719d789a248adcb8ebdaf7927f9db2e54d3617dd6690b7ddd665d6faa195404efb274ba1f2689f5478705db8f4bf12d795988fdf64e596c128497dc3361a5d18ba37341f439b9cfc38f2e20e3ccfed3c646c7f2d5b20529a87407427a7961bd51b7aff8d0c76183fb2ebac3812955", &(0x7f0000000200)=""/159}, 0x18) flistxattr(r0, &(0x7f00000004c0)=""/185, 0xb9) pread64(r0, &(0x7f00000002c0)=""/8, 0x8, 0x0) r1 = msgget$private(0x0, 0x0) msgctl$IPC_INFO(r1, 0x3, &(0x7f00000003c0)=""/254) r2 = socket$inet(0x2, 0x2, 0x97) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r2, 0x6, 0x16, 0x0, &(0x7f0000000380)=0xfffffffffffffe58) syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x802) 00:22:39 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000004c18"]], 0x0, 0x0, 0x0}) [ 935.695573][T32283] binder: 32278:32283 unknown command 536871488 [ 935.710930][T32283] binder: 32278:32283 ioctl c0306201 20000440 returned -22 [ 935.734105][T32282] binder: BINDER_SET_CONTEXT_MGR already set [ 935.762272][T32282] binder: 32281:32282 ioctl 40046207 0 returned -16 [ 935.771016][T32290] binder: 32278:32290 unknown command 536871488 [ 935.786632][T32290] binder: 32278:32290 ioctl c0306201 20000440 returned -22 [ 935.802723][T32282] binder: 32281:32282 unknown command 536871488 00:22:39 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000006018"]], 0x0, 0x0, 0x0}) [ 935.827657][T32282] binder: 32281:32282 ioctl c0306201 20000440 returned -22 [ 935.838895][T32282] binder: BINDER_SET_CONTEXT_MGR already set [ 935.846063][T32294] binder: 32281:32294 unknown command 536871488 [ 935.852593][T32282] binder: 32281:32282 ioctl 40046207 0 returned -16 [ 935.859913][T32294] binder: 32281:32294 ioctl c0306201 20000440 returned -22 00:22:39 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:22:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000006c00000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:39 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001, 0x4000000000000}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) 00:22:39 executing program 3: mount(&(0x7f0000000040)=@sr0='/dev/sr0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='qnx4\x00', 0x40000, &(0x7f0000000140)='selfwlan0em0.vmnet0/\'*,\x00') r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) getpid() close(r0) [ 935.947267][T32300] binder: 32297:32300 unknown command 536871488 [ 935.962400][T32300] binder: 32297:32300 ioctl c0306201 20000440 returned -22 [ 936.021483][T32304] binder: 32297:32304 unknown command 536871488 [ 936.050350][T32311] binder: BINDER_SET_CONTEXT_MGR already set [ 936.067280][T32304] binder: 32297:32304 ioctl c0306201 20000440 returned -22 00:22:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000006818"]], 0x0, 0x0, 0x0}) [ 936.099914][T32311] binder: 32306:32311 ioctl 40046207 0 returned -16 [ 936.101157][T32315] binder: 32306:32315 unknown command 536871488 00:22:40 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) [ 936.169350][T32315] binder: 32306:32315 ioctl c0306201 20000440 returned -22 [ 936.239483][T32318] binder: 32317:32318 unknown command 536871488 [ 936.270601][T32315] binder: 32306:32315 unknown command 536871488 [ 936.277164][T32318] binder: 32317:32318 ioctl c0306201 20000440 returned -22 [ 936.295777][T32311] binder: BINDER_SET_CONTEXT_MGR already set [ 936.301820][T32311] binder: 32306:32311 ioctl 40046207 0 returned -16 [ 936.316069][T32315] binder: 32306:32315 ioctl c0306201 20000440 returned -22 [ 936.353416][T32323] binder: 32317:32323 unknown command 536871488 [ 936.373233][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 936.379715][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 936.386242][T32323] binder: 32317:32323 ioctl c0306201 20000440 returned -22 [ 936.392162][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 936.400492][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 936.407341][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 936.414170][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:22:40 executing program 5: semop(0x0, &(0x7f0000000000), 0x0) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) 00:22:40 executing program 2: semop(0x0, &(0x7f0000000100)=[{0x2, 0xffffffff, 0x1000}, {0x0, 0x7, 0x1000}, {0x3, 0xfff}, {0x0, 0xb}, {0x1, 0xffffffffffffffc1}, {0x2, 0xe90b, 0x1000}], 0x2a61) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) 00:22:40 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x200, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x400}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={r2, @in={{0x2, 0x4e23, @multicast1}}}, 0x84) 00:22:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000007400000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000006c18"]], 0x0, 0x0, 0x0}) 00:22:40 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) [ 936.542055][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 936.547927][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 936.634073][T32330] binder: BINDER_SET_CONTEXT_MGR already set [ 936.634239][T32333] binder: 32332:32333 unknown command 536871488 00:22:40 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x600040, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000440)={0xcf2, 0x4, 0x20, 0x80000000, 0x0}, &(0x7f0000000480)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={r2, 0x200, 0x10}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140)={r3, 0x3}, &(0x7f0000000180)=0x8) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000000c0)={0x4, &(0x7f00000001c0)=[{}, {}, {}, {}]}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) 00:22:40 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x41) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f00000000c0)={0xa0000, 0x0, [0xff, 0x1, 0x100000000, 0x676e, 0xfff, 0x4000000000000000, 0x2, 0x4]}) semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x9a) r1 = semget$private(0x0, 0x1, 0x41) semop(r1, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {0x3, 0xfffffffffffffffd, 0xfffffffffffffffe}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) [ 936.679588][T32344] binder: 32329:32344 unknown command 536871488 [ 936.686633][T32330] binder: 32329:32330 ioctl 40046207 0 returned -16 [ 936.709174][T32344] binder: 32329:32344 ioctl c0306201 20000440 returned -22 [ 936.717790][T32333] binder: 32332:32333 ioctl c0306201 20000440 returned -22 [ 936.812314][T32349] binder: 32332:32349 unknown command 536871488 [ 936.825780][T32353] binder: 32329:32353 unknown command 536871488 [ 936.848863][T32349] binder: 32332:32349 ioctl c0306201 20000440 returned -22 00:22:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000007418"]], 0x0, 0x0, 0x0}) [ 936.870597][T32353] binder: 32329:32353 ioctl c0306201 20000440 returned -22 00:22:40 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x2000) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x1c8a) r1 = semget$private(0x0, 0x4, 0x200) semop(r1, &(0x7f0000000080), 0x21e) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x1, 0x100) setns(r2, 0x20000000) syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4, 0x204000) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000000080)=0xf000) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000000c0)) 00:22:40 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0xfffffffffffffffe, 0x101000) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x4, 0xe, 0x2, "d9129f1b0e4b04b7bedb415542ea58cb549c7da48c5400e7ab47a37974af6b81", 0x20343059}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 00:22:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000007a00000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 937.038619][T32360] binder: 32359:32360 unknown command 536871488 [ 937.109009][T32369] binder: BINDER_SET_CONTEXT_MGR already set [ 937.115647][T32360] binder: 32359:32360 ioctl c0306201 20000440 returned -22 [ 937.153403][T32369] binder: 32365:32369 ioctl 40046207 0 returned -16 [ 937.160449][T32371] binder: BINDER_SET_CONTEXT_MGR already set [ 937.160661][T32372] binder: 32359:32372 unknown command 536871488 [ 937.166668][T32371] binder: 32359:32371 ioctl 40046207 0 returned -16 [ 937.176482][T32369] binder: 32365:32369 unknown command 536871488 [ 937.205179][T32372] binder: 32359:32372 ioctl c0306201 20000440 returned -22 [ 937.212779][T32369] binder: 32365:32369 ioctl c0306201 20000440 returned -22 [ 937.258835][T32375] binder: 32365:32375 unknown command 536871488 [ 937.265700][T32375] binder: 32365:32375 ioctl c0306201 20000440 returned -22 00:22:41 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:22:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000003000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:41 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f00000000c0), 0x2aaaaaaaaaaaac03) r0 = dup(0xffffffffffffff9c) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000040)=0x1) 00:22:41 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x401a, 0x0, &(0x7f00000000c0)) 00:22:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000007a18"]], 0x0, 0x0, 0x0}) 00:22:41 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) r0 = semget(0x3, 0x1, 0x2) semop(r0, &(0x7f0000000040)=[{0x4, 0xffffffffffff26c7, 0x800}, {0x4, 0xfe, 0x800}, {0x4, 0x8001}], 0x3) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) [ 937.520587][T32387] binder: 32381:32387 unknown command 536871488 [ 937.546593][T32387] binder: 32381:32387 ioctl c0306201 20000440 returned -22 [ 937.555042][T32386] binder: BINDER_SET_CONTEXT_MGR already set 00:22:41 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xfffffffffffeffff, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000100)) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) [ 937.590987][T32386] binder: 32379:32386 ioctl 40046207 0 returned -16 [ 937.609509][T32395] binder: 32379:32395 unknown command 536871488 [ 937.616298][T32395] binder: 32379:32395 ioctl c0306201 20000440 returned -22 [ 937.634254][T32393] binder: 32381:32393 unknown command 536871488 [ 937.651831][T32393] binder: 32381:32393 ioctl c0306201 20000440 returned -22 [ 937.662606][T32386] binder: BINDER_SET_CONTEXT_MGR already set [ 937.686624][T32395] binder: 32379:32395 unknown command 536871488 00:22:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="00000000000000ff18"]], 0x0, 0x0, 0x0}) 00:22:41 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) [ 937.706733][T32386] binder: 32379:32386 ioctl 40046207 0 returned -16 [ 937.731031][T32395] binder: 32379:32395 ioctl c0306201 20000440 returned -22 00:22:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000005000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 937.808179][T32404] binder: 32403:32404 unknown command 536871488 [ 937.851166][T32404] binder: 32403:32404 ioctl c0306201 20000440 returned -22 [ 937.912751][T32409] binder: 32403:32409 unknown command 536871488 [ 937.927998][T32409] binder: 32403:32409 ioctl c0306201 20000440 returned -22 [ 937.939282][T32411] binder: BINDER_SET_CONTEXT_MGR already set 00:22:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000218"]], 0x0, 0x0, 0x0}) 00:22:41 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x4) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='\xd9\xc9\xff\xc4 \x90\xe3h\x85\xf9x\xfe\x9c\xcc?( \xf6\x97\xe4g\xb6b\xa7\x00\x0fVI\n\xe3C4f\'\x93H\x05,\xbe\x8f\x89\xdcn7\v<:~\xbb\xfc(TwS\xc3.\xb18([\xa3\aap\xdc\x83\xe2Z\xd4\xd5\x89]\xf1\xe4/\xc4$\x05\xb7%\xbc2\x96Z\xfdG\xc0\xf0S\xb5\xe2\x13\xd2O\xef:\x1d\xa0.\xbb\xfe\xac\x18\xe1R0\t5Q\xde\x02\xe1\xd3rs\x16E\xe1,\x99\xd8Q\x9d\xe2\x8f\xee\xc8\x1c\x1a\xdc\x9fm\x9dFn\x00\xe2\xe9-i\xde.S-\t\v\xe6\xd0\x01\xc5\xc603\xf1?\x84\x0e\xbdd*\x0f\xf3\\D\x85\xcf:1\x1a4S\x9f \x9e\a\xd7\xf2\xf8\r\x84\x04\xbb\xf7\x8a\x95\xf5\xad\x91\x9e\xfd\xba\xc9\xa2\xe0\x14\xa2\x8d-f\b\xb1f\x89DE\xba|r~\x83R-\xc1\xcb\x89B4Lpc\xcdRZZV\xa8\xe5\x80s\xcc\xaa\xd9\xa0\xd4+\xd1\xe2\xc8=8\x9f\xce\x8f\xf4\xd4\x841\xd6KR\xdcG\xdeI\x14\xb6\xb7<\xcd\xd3\xfb\xf7\vm3\n\xecg\x01\x1bH\xac\xcd4\xe3\'\xf2\\0\xe5CT\x8b-\xf1v8\xac\xfd\x8d\xa0\x7fCn?\xec\x97\xda\xb7\xc7\xa1=~\xc9\x99\xe2l|z\xf7\xac\xce\xb81\xfd\xb2\x87V\x0e\x04\xb4\xbe}O\x95\x0fr\xe4\x95\xa72\x8b3\xdfx9\xe7\xc4M\x80\x00\x05\x1a', 0x157) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) [ 937.961174][T32411] binder: 32408:32411 ioctl 40046207 0 returned -16 [ 937.978647][T32411] binder: 32408:32411 unknown command 536871488 [ 937.999492][T32411] binder: 32408:32411 ioctl c0306201 20000440 returned -22 00:22:42 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) [ 938.036207][T32413] binder: 32408:32413 unknown command 536871488 [ 938.056538][T32414] binder: BINDER_SET_CONTEXT_MGR already set [ 938.072860][T32413] binder: 32408:32413 ioctl c0306201 20000440 returned -22 [ 938.085593][T32414] binder: 32412:32414 ioctl 40046207 0 returned -16 [ 938.109473][T32421] binder: 32412:32421 unknown command 536871488 [ 938.165669][T32421] binder: 32412:32421 ioctl c0306201 20000440 returned -22 [ 938.229193][T32421] binder: 32412:32421 unknown command 536871488 [ 938.236644][T32421] binder: 32412:32421 ioctl c0306201 20000440 returned -22 00:22:42 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000180), 0x2aaaac40) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r1, 0x5}}, 0x10) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) 00:22:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000006000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:42 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000100)={0x7, {{0x2, 0x4e22, @local}}}, 0x88) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 00:22:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000318"]], 0x0, 0x0, 0x0}) 00:22:42 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) r0 = creat(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$KVM_PPC_GET_PVINFO(r0, 0x4080aea1, &(0x7f00000003c0)=""/141) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e22, 0x4, @remote, 0x5ba8}}, [0x20, 0x7, 0x7, 0x0, 0x1ff, 0x3, 0x844f, 0x1, 0x9, 0x1, 0x7, 0x5, 0x3, 0xf5d, 0x80000000]}, &(0x7f00000001c0)=0x100) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={r2, 0xbc, &(0x7f0000000280)=[@in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e20, @rand_addr=0x200}, @in6={0xa, 0x4e22, 0x3f, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xf9b}, @in6={0xa, 0x4e22, 0x54, @dev={0xfe, 0x80, [], 0x23}, 0x4}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e23, 0x7ff, @empty, 0x3}, @in6={0xa, 0x4e24, 0x5, @mcast1}, @in6={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xfffffffffffffffa}]}, &(0x7f0000000340)=0x10) [ 938.501785][T32441] binder: 32439:32441 unknown command 536871488 [ 938.520182][T32443] binder: BINDER_SET_CONTEXT_MGR already set [ 938.552540][T32443] binder: 32437:32443 ioctl 40046207 0 returned -16 [ 938.559335][T32441] binder: 32439:32441 ioctl c0306201 20000440 returned -22 [ 938.575145][T32449] binder: 32437:32449 unknown command 536871488 [ 938.592089][T32451] binder: 32439:32451 unknown command 536871488 00:22:42 executing program 3: r0 = socket$inet(0x2, 0x4040200000000001, 0x3) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x4, 0x5, 0x3, 0x0}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}}}, 0x84) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x2000, 0x0) [ 938.598374][T32451] binder: 32439:32451 ioctl c0306201 20000440 returned -22 [ 938.614000][T32449] binder: 32437:32449 ioctl c0306201 20000440 returned -22 00:22:42 executing program 2: semop(0x0, &(0x7f0000000040)=[{0x0, 0x8005}], 0x1) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x4000, 0x0) write$P9_RREADDIR(r0, &(0x7f00000000c0)={0x68, 0x29, 0x1, {0xffffffffffffffff, [{{0x1, 0x2, 0x2}, 0x5, 0x7, 0x7, './file0'}, {{0x8, 0x1, 0x8}, 0xffffffffffffffff, 0x2, 0x7, './file0'}, {{0x2, 0x2, 0x4}, 0x1, 0x80000001, 0x7, './file0'}]}}, 0x68) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000140)=0x5, 0x4) 00:22:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000007000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 938.670612][T32449] binder: 32437:32449 unknown command 536871488 [ 938.671518][T32443] binder: BINDER_SET_CONTEXT_MGR already set [ 938.716748][T32449] binder: 32437:32449 ioctl c0306201 20000440 returned -22 [ 938.758812][T32443] binder: 32437:32443 ioctl 40046207 0 returned -16 00:22:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000020000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 938.799857][T32461] binder: 32460:32461 unknown command 536871488 [ 938.806599][T32461] binder: 32460:32461 ioctl c0306201 20000440 returned -22 [ 938.819175][T32463] binder: 32460:32463 unknown command 536871488 [ 938.826393][T32463] binder: 32460:32463 ioctl c0306201 20000440 returned -22 00:22:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000418"]], 0x0, 0x0, 0x0}) 00:22:42 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) [ 938.934379][T32468] binder: 32467:32468 unknown command 536871488 [ 938.964334][T32468] binder: 32467:32468 ioctl c0306201 20000440 returned -22 00:22:42 executing program 2: semget(0x1, 0x0, 0x110) r0 = semget(0x2, 0x4, 0x80) semop(r0, &(0x7f0000000100), 0x2aaaaaaaaaaaaaf5) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) r1 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r2, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40090}, 0x40800) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80c00208}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x8, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8084}, 0x40804) r4 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10, 0x80000) setsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f00000000c0)="ff2d28749b721d3d9caceae21a7451f1d052357d14f78e5049b4b8bdcfe23fb66a19b431ae10684cf17fa2792b74c04dd9403b8ebb9346c3da4e7f70f8adaa5d2d2cfcc324b0b4f899629bb8476a3c762c3d237128546b978f1a6f3a2ebc37307c6683047c10e3ff6fcdff06317172593503ac67ec3aee724b2c6a1f28bdfa21be2fe415b0cd91e09781d3aff164f5f126e5bd9e31b63d95be1a0414221296c82857a12e1a4abe6bc7e94c2abfba23e6f7834cf9f925945b0d6d41c0242f789f510d9c4a08a8bec56cbbed815f1d350c12735b80d270ec6a9e72f0", 0xdb) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) [ 938.983021][T32472] binder: BINDER_SET_CONTEXT_MGR already set [ 938.998704][T32475] binder: 32467:32475 unknown command 536871488 [ 939.011107][T32472] binder: 32471:32472 ioctl 40046207 0 returned -16 [ 939.020344][T32475] binder: 32467:32475 ioctl c0306201 20000440 returned -22 [ 939.059288][T32477] binder: 32471:32477 unknown command 536871488 [ 939.139841][T32477] binder: 32471:32477 ioctl c0306201 20000440 returned -22 [ 939.190001][T32477] binder: 32471:32477 unknown command 536871488 [ 939.196487][T32477] binder: 32471:32477 ioctl c0306201 20000440 returned -22 00:22:44 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x4200, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) 00:22:44 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x2a, "5017dd7c2d4067ecfbeb0f0c18242125e265ee129acd0948462043a2155ca4aeba3d200c73f9a19b4d50"}, &(0x7f0000000100)=0x4e) r1 = socket$inet(0x2, 0x807, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) 00:22:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="00000000003f000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:44 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x2, 0x8002, 0x1800}], 0x1) 00:22:44 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000518"]], 0x0, 0x0, 0x0}) 00:22:44 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) [ 940.474663][T32497] binder: 32495:32497 unknown command 536871488 [ 940.483137][T32496] binder: BINDER_SET_CONTEXT_MGR already set [ 940.491151][T32497] binder: 32495:32497 ioctl c0306201 20000440 returned -22 [ 940.518773][T32496] binder: 32491:32496 ioctl 40046207 0 returned -16 [ 940.519385][T32505] binder: 32495:32505 unknown command 536871488 [ 940.538112][T32506] binder: 32491:32506 unknown command 536871488 [ 940.548418][T32505] binder: 32495:32505 ioctl c0306201 20000440 returned -22 [ 940.560643][T32506] binder: 32491:32506 ioctl c0306201 20000440 returned -22 00:22:44 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000618"]], 0x0, 0x0, 0x0}) 00:22:44 executing program 3: r0 = socket$inet(0x2, 0x1000000f, 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x3c98582903a0399b) setsockopt$inet_int(r0, 0x0, 0x15, &(0x7f0000000040)=0x20d2a5, 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x673) [ 940.620561][T32512] binder: 32491:32512 unknown command 536871488 [ 940.650734][T32512] binder: 32491:32512 ioctl c0306201 20000440 returned -22 [ 940.692047][ C0] net_ratelimit: 18 callbacks suppressed [ 940.692056][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 940.703618][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:22:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000040000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 940.772405][T32515] binder: 32514:32515 unknown command 536871488 [ 940.778754][T32515] binder: 32514:32515 ioctl c0306201 20000440 returned -22 00:22:44 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dcreno\x00\x00\x00\x00\x00', 0xb) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) [ 940.860444][T32521] binder: 32514:32521 unknown command 536871488 [ 940.889678][T32522] binder: BINDER_SET_CONTEXT_MGR already set [ 940.912604][T32521] binder: 32514:32521 ioctl c0306201 20000440 returned -22 [ 940.925949][T32522] binder: 32520:32522 ioctl 40046207 0 returned -16 00:22:44 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000718"]], 0x0, 0x0, 0x0}) [ 940.955778][T32526] binder: 32520:32526 unknown command 536871488 [ 940.991758][T32526] binder: 32520:32526 ioctl c0306201 20000440 returned -22 00:22:45 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) [ 941.034122][T32526] binder: 32520:32526 unknown command 536871488 [ 941.056819][T32526] binder: 32520:32526 ioctl c0306201 20000440 returned -22 [ 941.129810][T32530] binder: BINDER_SET_CONTEXT_MGR already set [ 941.175701][T32530] binder: 32528:32530 ioctl 40046207 0 returned -16 [ 941.218103][T32531] binder: 32528:32531 unknown command 536871488 [ 941.249758][T32531] binder: 32528:32531 ioctl c0306201 20000440 returned -22 [ 941.286086][T32531] binder: 32528:32531 unknown command 536871488 [ 941.295800][T32531] binder: 32528:32531 ioctl c0306201 20000440 returned -22 00:22:45 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000400)={'nat\x00'}, &(0x7f0000000480)=0x54) statx(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x1c00, 0x102, &(0x7f0000000300)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x842, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r1, 0x208, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x40}, @SEG6_ATTR_ALGID={0x8, 0x6, 0xeacb}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x80}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x9b2}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x7}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040800}, 0x40000) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) 00:22:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000048000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:45 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:22:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000818"]], 0x0, 0x0, 0x0}) 00:22:45 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) r1 = getpid() setpriority(0x0, r1, 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 00:22:45 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xc4a7c7c052f652ed, 0x0) write$vnet(r0, &(0x7f0000000140)={0x1, {&(0x7f00000000c0)=""/52, 0x34, &(0x7f0000000100), 0x1, 0x3}}, 0x68) [ 941.424215][T32542] binder: 32541:32542 unknown command 536871488 [ 941.426134][T32544] binder: BINDER_SET_CONTEXT_MGR already set 00:22:45 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000005040)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000005140)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008680)={'veth1_to_hsr\x00', 0x0}) [ 941.484684][T32542] binder: 32541:32542 ioctl c0306201 20000440 returned -22 [ 941.507419][T32544] binder: 32543:32544 ioctl 40046207 0 returned -16 sendmmsg(r0, &(0x7f00000097c0)=[{{&(0x7f0000000100)=@x25={0x9, @remote={[], 0x2}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="f96d535aa3df17db5a16b952b01ef4b00aa475c7d561c43a6e9f5e778b03b9c90c4144295755749d641d1a194d74407821a1317fa17c89cfa495d66be43bfadc88d7e92599f1977dc39bd04e3965c816f4c6fae8afa072c94e07b4f414c625fb652f5ce1682d1623c9c11808c4c66f7ce4516560d1a8715bf342c9fab05c5f019464b043318b9707b7d86cf4fc62bdbd5092459cbcf616c3110a46119c56126cf4c7011abfb2259d30f4fa1a7721e20f2ed974564b596457cdfd81898400a1c518514da40f4746e0c8b394943c4c45b6757b36bd191deecd9758916bcdc46ac260e029", 0xe3}], 0x1, &(0x7f0000000280)=[{0x88, 0x13b, 0x7, "ac07700094fc0341c022088815c61c0fc8974de78351a3fa112d0df3e43889a73b313d9885eabf2d6819f7fd89b6b89e4c4fe9ce984e4cd69c6712d05ab26a800424ca0efdb290d5819802ccea2f85cb78c9966cd53a0daa8f40c16fa313414e7e8cb7a2a64266f1f5074c2d8dcbbed17e7b503aef6d77"}], 0x88}}, {{&(0x7f0000000340)=@tipc=@name={0x1e, 0x2, 0x3, {{0x40}, 0x1}}, 0x80, &(0x7f0000000900)=[{&(0x7f00000003c0)="28f1330900d9ecd34a5b75901f9c30f04a8cfd08bea39faa19769eba55d8481aa8c8e1fbbd09c3062e95d86a59a54dc45de1fbf5051ba51854ab887a449d3ffd5623956ef49eabf74946ee1c4e41595a2c79d7a59063bcc8a898a2653b3f89e65daab683f5df616b9eded4a86f2362ec4010db4d46f84c6d6c9322e22fc452c28abf823dcc97a84c612fe49a3879a87e14423f2f4d3dd0c5c7241946ea292ccc85279cbf53342f207f469549ebc28cc633fa3a01e66ddfd49164ca66fb9fe5f5205b80bbe571fab084f56fe6ce77864a607e8165fbb9", 0xd6}, {&(0x7f00000004c0)="aea2d92f96b9819d7cab47b76b", 0xd}, {&(0x7f0000000500)="63464651b2ff29db163aedfe743e352c807c45b82eff989ba2fb8cf592b5c580dcd551b549d5177abdc79fed3cd4c85b22459b291133adb3e55d4c41236cb59fe0718769f64b1169af7cd510842ebe6b5df2b9d286bc708e1ff904b9cc8b22fda611e84bed0f9bf198ec901e51feac8caef6314ddad9601104e5cca1f3207a183bde3f2232564df767f0c71f4bf2ce5f66e0ee682148001d340bf5c467db5c9c4608792e8828aa9088410cc2cd396e64b37c89a97fbf8946c7d7d36b9a82863a425ad65f0818f964ddb8078d189ef2815f6f98c73e", 0xd5}, {&(0x7f0000000600)="5052735b7f9ab44b3d6c3b678f9ce936e17e8844fb3716c04d8cbdce52c9294472ab8f58e0f2162e49e0df71b48078ae0596a2454121dadc22b23015e9004b00787e4cbd5927a9b630a44654b5e08f6d", 0x50}, {&(0x7f0000000680)="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", 0xfd}, {&(0x7f0000000780)="b99d2db80e8197a0e63aab00ebedd9206e5390463000df73e343d5e460436ff9429c195ec5b9b3dd92f751f1164af1a5159c0dc48ece64ad73c0833ed827cc22619ab2d0ec72cd76f9446559e34d8dbda92fccaca29c20702809aa3ef454c48f293ed380", 0x64}, {&(0x7f0000000800)="6727022b7f094a5c4ec7dbf63d1a623e5e2a627db5ad92af7432ffa2bd7e56f1a3c04f2675c6db1ce3dd9c8c7dd5190e0c3a260a7717bab61687a91a5131aa851da5a463ebf0e7ea0e5b57a27b66fe1ccbc86c37e7dd95e380f8d9bde4a3b0437001052a47a4502162ff4704894d50e74e242764e2afeac5e018595aac4bc22d9144f5ff16a542570d934fafe1fc951df0d32197e6e3585253037566e200", 0x9e}, {&(0x7f00000008c0)="dc22d6008497afd5e3545179f67abcff2f8223e1e169761d1ba66a5093bcbdaec5ad6d1a560bd2c7da34b247a7a59924921370", 0x33}], 0x8, &(0x7f0000000980)=[{0x110, 0x0, 0x6, "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"}, {0xd0, 0x88, 0x5, "97c4aa47d7985d52dff11c47a852bf31bb2d27a94252e998319f5bd7dabec14f3fb93a2db19a5d85bbeb21d2914dafb7ec206f3bd71ba40df7dcd4896cb314199b0a732b7b954cc02396c13bcdfd9160f3e1a5a2a6590b12b21b79d6d775c5044b9bc5b6b504ee6d011f4c493c52eb6049d15ff52c5e6ff1d8e755c6f0d29c574b52364636acf672ba5d96b3ca18de6fb476b3060878770d16aa274b5d72e77db13ecf58fe4b26bc1ad724c722bdebbfbca719692e0eb98538339df8"}, {0xf8, 0x18f, 0x9e5, "c5ff13ff6b55e77b7971cd884e366c4d843062835aa8e9ce653ae21e6458b760e1cdf064108a72220dc5e923ad301cf60598ee9f62e981ac2844c45afafd699e0f9b3a112ad8286885bb13f2472cea6e069f81792238cca59761217fb9bc27376d5a60a57e45571a3381998eece859827fc75422827fc03d328af04589626002508241ea1661d64b3aba0acebf845505ea6f6be90ba7eac434dff44da94e9310ebe8062f135b4cf74bfdcc39b58444c9346b4bb5e08678b9cd1062f19119c8912d69093dc59223197272ebbc1d5ee95e7aa54d1f9f4db499438727b8c3d400d9139b4732"}, {0x70, 0x115, 0x2, "bf7693dfdd530c8b827e79d9d3a4664a05ce757a70fe776ca53cff10a6080a5d6ab41499294a0d2088c9d2539f5a7894af04ce7f50b0d98f08b686cd22e688506dffd7d02faacc7211a5ff1ba1e3cb25e242c7843a8e696e218eade00207"}, {0x100, 0x107, 0x1, "4862e19830e3c2a50e734f1a8a856fdc12094fe26151e3cb4c53bcdcce76be9e5573c1d80e581724688be05e216f48420e11b731e0f59e0a56d51ff8c6faca198273b4b53c5701b3207fb510321218ad3bf4401c6490b6cf0b6b9ed2c92616b8ca71e007e26ccf5d86653b31e9a4a623d084947095a199cea4a633649ca09584d2115347b034aeb9b9afbfdc402048f478ab5f67b4bd5dff2d89d94c75d851fd379ab8dd3d4c0311d44a20bf653fd3806afb7356612e9a9538e65c1ac8b1b735246217f65da759d2223cda698b4d3052859795df7c7aebb8eb7b2cb50d4fa9ae25b5c5d05df1e908463c2cbb"}, {0xb0, 0x6, 0x7f, "ed9d0f0263cd6a12004a3bfdfea18013b1ce67e1076fec508e422fde5b0afd6b11db7bc0d44bec08c985fbd8b41d446f482304b49da9bedbcf29c896ce9df77bc4548481e5f6100faa2c8fbee075a4509907c0742e93000bf4f1abdc3a704f4a49df0aeebcafb38b3be5079ad87e850f6f8b33a20b2d29cc94fe218b14887cfbbc45dfe7baf83ec628a391c2c7fa85e7233105a883e7dd8babe6"}, {0xc0, 0x29, 0x1, "4cab09539c636f9446a90a074dc199c5347c086558839104db0a85b9951913542ab0f5b306e3b54166c3202cae01788a83d1ee7dc8477b8968486377310b9b540ed96cd09f3930d967a433af8ceb553f51558154f901d3c58a327348c8bdcf0c99d3f6245b59a570b2d71ee4f26b847dd4cce27ea5863a0da4aa8a711b837c7a30b9f970160c0132fa6476ffc0df493f24fcc597d23c82a5d703ccc0b523db84cd538b4de1cfc8b170"}, {0xb0, 0x1be, 0x8001, "e27dffe7954a304d7fb6ed5357d3440d1d33f558bc2f2578411f909e4434eafb2961515cc347107182ecc82108c0fa996c9fa06348263d092a4181d53a5bc3a3bd998f3df950fd6f7eb1f60d1e9b5d99e5036e22edf21fe7bc64584447dc80d424fc781672eb9463eb4b34d2d6398a7471ab680c1ed14afdf9d0d3c5389b534ae30092c5d2e165142b1855c18f1b8e2cbe16021d27f0e8db7456cee57bff"}], 0x668}}, {{&(0x7f0000001000)=@in6={0xa, 0x4e21, 0x5, @loopback, 0x7}, 0x80, &(0x7f0000003580)=[{&(0x7f0000001080)="344c6c536120cfb0069f4c6c56cb4f854d2f8c0106e1bc7d97b5fe7dacaef6ec08c7610c7e08aceb7eade51c617bec95568ecdabea4d980cdf96c00c13fce2de5b6e662d667978adfb6a0a6e5fb1a9fa18703284c3b9c9b9de1ef62ece4f7651a039d0453083362e4e0a8844d0d47c03716449e9169a1ce9083f99aa", 0x7c}, {&(0x7f0000001100)="e5b92f5dbcf2ea9e8e9791e864f5e7ca0b331939ebad65f83b39480e3297fd6d7e916f89a6e8b9fbd5cee82f4c4e2ddbafcf9a48a03e4ce1b4fe59336c044a15f6c18db7e033f4624e13f06c68adec068b433cc0f97657fa634ed0ca23c3cb7b654cf2b6c43c69ebaa90e7c0853f2cdb9a35877ea96a49", 0x77}, {&(0x7f0000001180)="8ea1cdf021d12b6c462008ab3b7fb7ba1c9747d961a63da7e541205944d51017cabf791b5743d9091e1e09ca4e5c46e6e01876aeb8494bfbe23431abb839855222e095a94dd02ce6ac0f22a4ec215d97120a09d4d0ccee782e658a88bf1fe85fd288ef60cb3527cfe453b1294af4d65e88a9684a52ccf1825a33405c3c856828b3818804b01dbb286d2ae1bb521cc2c00c0c595f973cfbb20dbbab9dc1b250ff1854890a8c33d02bb892b8b768a2971db648f5c8e12ebbfe485dddfdbbfd08f302de88087d5353f0ee2be6e47337ddde60aa902f4b5a8679ae55d9e8f3eefcbab390cfb0d4290fb5", 0xe8}, {&(0x7f0000001280)="33d11a9e20e860071d14c9eae3fee9c4e3d7c7858f9355e372324bc35699e0c3f147cabfb7e507b840dcb63417b87bf3dfe5c6f3286684a466aaaca33678b80758f59820f4175c854cfdbd58042274df98e6dd8804fde3359d9ea125c051b01aacab5a1e1c18c540cd0f859b4489fec81057cb336f2656529bbc4d013ae581c6aa586f2687ac3fdfbaaf5182565be65a92e6c78c8c", 0x95}, {&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000002340)="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", 0x1000}, {&(0x7f0000003340)="cb98bdb2fdd514200f5608732718a5ee994106f5e5d3646761b5596659110385938362cc5ebdb63091865ea041e9da89fdb555d0c2e987c9c79970313f10cb48ef2fce28de57938ba1ad2cbaea06b3e451fa9d70268634eb7a205e8be9c2f099103e869792e54a16ff3265dd98c701e7a15f948dd26ea789bc8c55344da39fca22d835139da1479b433218e2", 0x8c}, {&(0x7f0000003400)="8e78850d", 0x4}, {&(0x7f0000003440)="7b3fad7ed37c8fa2cf50126eb3d3c92a0aeddb36f68be956ffd369b4c58ee425e2174883b0d34083eb98976ed43cfd243c83d4ccdfbefe656b1fd8da605f990edc12c2c455806e7013ebe7b4fbbf142e4e9b629bd2c5453c0477e483594947c19fcc5bc93723d30befb445b299559b4de2ec896b336ee7b6180faef6c628d90cb831703e75c55c22bb3e055b8f84ff6448193803192bca492dce5ee06b13412e230fa45879b248650b0077e5a6", 0xad}, {&(0x7f0000003500)="b12a75881b2ef14a1c0cbde73b0e29f75384473d6387ef134f6ede7b17946e744a6ba5c8f75079081bed4b50251cd85b9cc6dca6b04a0937a77e45fcf7e5865ac95b906b66c4b9f7887f081b2bcce0f0825f8a49e697690eb3ed", 0x5a}], 0xa, &(0x7f0000003640)=[{0xa8, 0x111, 0x1f, "c373b958d87c4df2f8ec4acaa264503336e11fb81eb7615f7ae11b739ba0431ca096eb37d0999050f1b02cec26daa3cf4d0b6c1d640e1633611d6738c4a9bdc5a741da9db9590b895923ec5032ec02fca3cb274b5bae533812a22038473159a1c74a46721615cc41a503c4f588952b355301659fcc92619fc3c5dee5f24a1a931f8d2fe09a53d58bb99a6bf13fb49d682cb2bf"}, {0x50, 0x115, 0x8, "dbd1020705cb7fa45936f990bc8a209ff161dc20d7e7a57b9939e43e1763da50b18b9f9501e8b0e570fd67d3dcab21fe2e50627c8dae71ae1c83d9"}, {0xb8, 0x0, 0x1ff, "349acdb9ce0d2391f5019da5d5854078aed7440924747c240db703d09d1df304e72ccf412477826598c9c33908b42dd3b23ff06a629709f81eb0a83a2b521bd841b445f02608e9366d71a7e843e2e6c36f204a6d3bd8eb34e244cf8a56a85dc6907aaab6bb92730f9c3ab5534b8c15baaf8e70828315773559e3dc1c4202cf0d7fedd940d4354f5b26d10c87b4443a5eb91aaf143a09c579cfa3b487fa96552bdcc5fe65"}, {0xd0, 0x10a, 0x3, "2d7f06422ba0af8224261b353eb685f0a2e011361933251d8641117af75fafddf1bb4b7d18faf584db7d46f5540dd917f43086dd6ba372469c7087a24f160ead5bd307443f697061b0ec14af3a2af99a904beb8eddc15db2fc9e3087c7ed8f5740e4388ada37f8147f38991910308ef0f191fd5feae56d0177f9c461703ff2e4ed8cd27fffc03eb56ee2272d8f1a3d4123a27924d75cc9c6ff5ee59ecffab272d2d060d53899cc4aef647aa2d43661e0cc62efdf9aed2b5dbd3876"}, {0x100, 0x3a, 0x15e, "4da709de47ec8079e70f00ce12880bbd757c01c2fffb472d5079e4efc59ea53a9f4e176acec1714fa355da259589b340652bb9f165f57e585647a2c24941d41599025b19bd4ddd2326626e5aa4fb84ab38db47136c682ab981936d085d91c8865d30296249c228b950a43c01be942ec63629de413b7ee9390f6bf59525aafe041209624e6c949a30a2cde903e8de923ffb1b4a5805efeec762c7420ad56c39a8d368ad5f6c6298ef965d0b64dce3113188d00a59390b710cafc7d93678f924c9ac18dad31413fcdf88e5d53cb7f0fc2712921a03265cdf7dbaced11427405b3558522dab20e4c12f96327704"}, {0x90, 0x10b, 0x4, "3f7a0ce6204411c623a4119fd9e1452e819979568d0d7e19f5ed3c63cf0da1a80b25882e14e2b20e03f36d557e752072a836727f6b5225a40b8ecb43898485dc76a9b4328a184a46e0f6ee1950609c353580d400b40e333cf3f890a70c11f85472a129b03b1d1ee8147e08c1b010a1f649846dbb51a1edf536d19c"}, {0xb8, 0x1ff, 0x0, "aee4f005e4d06497d25b240f9e42c58fec83d2f6565e21d32c2f888e146322377f96bb74df6a42d978240891572f14792756cb1176e152a9887cd7d9950d051600ad47e48900df4eb7a21b6c6a661ca07d232a21a93b5bed197b20605ed8fea6c93e50567a0d05ba60f1e99e0d32f683b4720e7319707a6a01df329a07e813089a6aabcd6afd771ea4fbac91a588999e43b56e737d66e25f8d7dd933a3aa46f63a30"}], 0x4c8}}, {{&(0x7f0000003b40)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x200000}, 0x80, &(0x7f0000003f00)=[{&(0x7f0000003bc0)="a84550cc275e3dd8d9baa703265912d78a809479f7e4330b53ac51c7de65116e1add96a033de54df4537b0eb58e4d4ec8838b10a2fa7f4d2f385c372109d3e76d5e7a040668b9a7171ead4175910a4a5ed32d8b0997ecfae0d93", 0x5a}, {&(0x7f0000003c40)="a462485b2c7226e0", 0x8}, {&(0x7f0000003c80)="a9a09ede4c3960f61cb9cd7b7727b434c6f0ab36a4e7c075f573d74a360aed8fee875876c3e97f85621a1d54671cab9d0fbeec47527e9780f3", 0x39}, {&(0x7f0000003cc0)="7361a0207f73c86b0c12be5bc376255fd5f80e605c7a2257abb82d18b841501090cd2b927176e055ef160bfe0a767cde47e5f06323d7f26d41a5dbb77c32d7ae969e20763dbd636cb256b24dfc633c1f167d79014535c4491c97104002357de5b547e5a0240c9a6085f8b29cf0dbbc55c7ca51a6b2", 0x75}, {&(0x7f0000003d40)="7f", 0x1}, {&(0x7f0000003d80)="bdaac5a5401a8844ab2d8d96f65ffe8bc4a7eb14ba28cc91431444519463", 0x1e}, {&(0x7f0000003dc0)="9d1b6419339a622872fae3e4b9d4b0f64139c6e4721a65b5fb6f", 0x1a}, {&(0x7f0000003e00)="ba59d7784b22f77974bec75ef425223e2537490f3aa663d40bbfe0b5b19633bfdb8aa758d6ec648ca6bcf576004d2ced6c2e314614c43f6cdc894b9a13a7aa19335d82ed1e1270d5c5136d0b619a2c43837b50588cc8d098713e624402b4eedf0814bae44a518e5e8622c37fb1a2ed672d0c82fa1ac834995e82c186ef08acbb2881e05d1f055b1ebe867029eef21b888a65b85c808e50b20a8adc595de190dd775b885750559b37ded8d944db8e886ded8a4d08efddd69fe6f3d31b8f4ed2936ccb0c6b46be34fa65588ec650d66b", 0xcf}], 0x8, &(0x7f0000003f80)=[{0x18, 0x1ff, 0x1, "7992935b6f3b"}, {0x98, 0x11f, 0x0, "0054cfdcd60dd351137df6460d6124224af4205dff96b306a644da6bf243072a84c86a1926d28b34ac4014e0b06d84b8b450f790a10a7b08ac63c258630693585f9a41b8e811eb6b644215d1877a50dade4d7420b16db84ebe21905b9eb7914084d3a7f7f86a3f8e8cdfa8c37e6ddc00d11ade01224fee4fd624cd8860c27942924d126f"}, {0x38, 0x109, 0xab5, "284d091afcb3f22c408b9cfdb1872106bcce445c704170b2097e5aaed1f4eff0d3"}], 0xe8}}, {{&(0x7f0000004080)=@ipx={0x4, 0x0, 0x4ab, "52fc9b8646b5", 0xb13}, 0x80, &(0x7f0000004400)=[{&(0x7f0000004100)="717f65de927642884a8ea3255e88308033927c47e2b070f4e35f08c162e9eb31b17e27feb1cfe02dc61df70c95a1a400d327169197afa685d0e169d4252560693c5b0686ed0459b39cd52b76c9fd3c5c5e7efc872564ef9f11325e8f6f30f6f8af1c318abf71e800f46a965149f7653be1356e8565c600debc7d392eba880c3c9ccccabf1b5a834f976ced6a409349e479a53c72a7959adb7e953005ff4c319b1d1ba864c6d5efe269e241e7bfb1cf9097560f", 0xb3}, {&(0x7f00000041c0)="7da474c44e1fff88c313bce244f6dc0d68931f84bdafab74e81dc1a6cc2589c378ba10215de71a2ad9a5f79c84f42e5ad6e777a28c602f36ce0059b24afb63f2201dff4584d4cb5bba049e88ed73c208a0e6664d190984f3de5abc1d3b8e6072d3618ea5ac61abcfb11f734e1b06ac9a0df0823312134b3e424912415b", 0x7d}, {&(0x7f0000004240)="2731836254d5e46ee57f8e5c94041ce5b79663a78050c8f940f0b80fef7251fa709f71d1d090ce57c38d33c9a930c54299b80ab21e09bd3c74c2", 0x3a}, {&(0x7f0000004280)="0406b118ef7987fef2c0848170ba638c1af56eb12b00aa0139828a64e249701ede3d12a191b0bc8e385e61f0487a2dace3b782018c1e85bfb5ce6965576da84f54a4dbb5a04fee9af538b742709a135ebb2d9cd6e0aa081caeb94140ac25a84da838f2dff00e6f5e9cfd20949a8a79f58b47191e1671a162e1bac121d10f362b", 0x80}, {&(0x7f0000004300)="1e555453a25d7a0e37f14f47022020317a80df78881722decb705a2837ca964163e536396f41568e0ddb0dae4a7c19fc7085e9afac692ff02b2160e30124850649dfe47124e59d49e307b3058f93da2de8de57d10bec11376b8006d5111aaae883d0160ea9b2a832adb16f1dee81e99383ba2d14f62e18ffd8f61faf118ce035367c18127480f2a86e2640f0fa32d3e6dedf0c7093939365845598d1f524ca9cf4820c6a7f275ee3f3a13e4ff60be296c53d67db3358359abd4fc777b4d147a62212be7c152fe5c46215739f320ec58cdbaa0be640e3", 0xd6}], 0x5, &(0x7f0000004480)=[{0xa8, 0x104, 0x1, "5de437d736c57ddc79ef686903bc41775cfbda9e3046040e3fc7ec9d21e1f59daca2a7612deb5c3eedb79bf1e6c3b88837963a620f4a9ecf475f11db9e9dd5ef452e97879fe6f287529f1f14d8ffd58269f4e91bb63fabcf82dad3d43f92b780a74697c693099523bee5d82f7f5bedc08171d2531c6b493cbafe01f386fb4ae824dca6d748cb3b0909f448d3234aceea1d2f"}, {0x108, 0x119, 0x1, "115fda76a2fdca1e4b453bb6bd26ee26b8af2b26bfbf35f281679c8f546dfb1762416146780279e513b12dd51109813257298dba47209fd3abb12dc247055236360e376c01aff928f01970a77914e15f2cc5dc86d26c5a862a11f4a339bfde7b553109d800676f0ead8632238e3234597a3d5f1eb9619ba8c64d97cda57ba44df234eb3338ff208f7f3bebaaa31f226d14226c5875cb9343c9e73c0c40cc9b630876d18c731951bb39e2a61b3e77747e7ff862dd50c8e092172fa0475806b7efe3f2c890e63b4ad9354977651bed5ea9292209275187b4dba55ae9f6ac069db0421324ce4d61535c9984bc1f2124017b2a60acf3c8"}, {0x28, 0x10f, 0x5, "862f05248d716fbbb36199171927c54b6442dec10c"}, {0x70, 0x109, 0x1, "3bc46fcd0b2ad311c309a23da687f730698255d96f344c4d57af6df9ebe8c3477ff98d524866d23f6279ce5143c99fafabdb890d644b0465850088ef48a02afd88af4a5d783f395c797bda80c71b0b2677209ebd88c6c49d6c65ecc4a77e7c"}, {0x98, 0x101, 0x8, "7d9d553de71643a3b03c41e1b5cd674369d3bd7056f7efbdf24941342b91379b3d392da8b7691a4bd1cca8466fefb6b57a110c7461427b6a9d6cf207dc642f39131645bd0c0797094b14482f4bdfcc67c02c405918fc351586fde3fb55cbc96b553de3f3c85df5dadc6fbf25e7d84e87dd970023a3f99598bdbff9f1c159f83493aea89a8e35"}, {0x20, 0x1, 0x9, "a827ae6682e373ebed665802e4"}, {0xf0, 0x1, 0x90b9, "97b22f4f7cfc272d2e52dff7a488eab664cd3efd4cda239523eb7703df30976bcac87870787e00e5e8063720ee75eea368d09a6c3ec2a7634f1ed4358357e82376d6030ca365f91baf6d5be863aa6093733800ffe90c3da0e54bff76d4548d616f5c7ee0f49f04a71c7001ee15d88aa9037378f0ec3969f362fbae89c79e69d2d3a96dfa0817090798c058baab0d540baf48fd7779c8b71ce920b9fb94660a9cd2c66d443b82e99baebf0c0aa4d43d85ef623a6336130467e1bbbf9404a7d835a86af71ec1233e36e981addb046935a778d3c89cb965c1a12e5339054914"}, {0x60, 0xff, 0x8, "fc7341bfca2e7daa5b4ecdcdfb618af3e472879ccb5bd907dbc5012b06f24caa5a8b8bcda6935ab47c7c47f543734b4a88818aec64b4c3aa0fb8e0f79eaa40a3d9a85f81aa439e0fac"}], 0x450}}, {{&(0x7f0000004900)=@pppoe={0x18, 0x0, {0x4, @dev={[], 0x7ff}, 'ip6gre0\x00'}}, 0x80, &(0x7f0000004ec0)=[{&(0x7f0000004980)="9343e12ee0b42802beec13e3df9313e3e94ca8344c3764ec0edf36e7391cd487eec2a5e5b334017d766eb3ca8ec484663210d7c4f452be697b52434fb4c427181c3121ad33659185e2198873c6d28474a96dd0c33c17341d09aec73777eb5434c3892d5101c2ff86f0eba6234d47857ac6d11708cb797cd8255112b784c29a2276dd9688555d617864923816f5503b024fbf42b7536edfd3aea3b57c81b3b24102391add195c4a5f42304ec6", 0xac}, {&(0x7f0000004a40)="bea37e18adc7c84a2024cba09801715f04bfc157f6d05ea2e83e7f532b9c6e36233ca12fce91fb28e288a42ee5f94c816a08a9a15196ded3528143eeb7fb9735ee96fb92c8aaa6119c221b2d133a287c933bec93d4b44b591961d9e5010cf2c22a5fc3925e2b07e257559ee4b86bca4a78b0274af40f6fcd88d786e31618d1879e4f66321d63b319e983ae8fa2407d68ec37cd7d15869cb50e885087c7a69ce89dee203dc4122c8140f23e01eb1d2766f7adaa6cbad07ab71a6809259c8c054dc491416a22f0056a", 0xc8}, {&(0x7f0000004b40)="dabbfcd8f189ed3ec10341346ddfd3d3dbd955ed946ecbe4d79fa05f64fa39bd4ce423495beb4b4d37bb7f0a8bc8f4679e4ae28b5084076f7d566003f8f91f4e3af29ba0bdb821dde14fc0cc302cdbe460a53fd9a6086fb7df191a0f958c69ec5b5895d115aff7043de833539d5735c2aa78face5cb3a98293c488dfda4793410e1d34a6f383bb64f6f3529e8b8423bee789ec4204429567f386215fa5e4a42f7f795bc06e3e71540606a9759063e24202997b16d90359a8c6f434b34975e8593026b4287d79971e033007516fb23323fdc9b87cb66f97e629f698f0d54149265503aa39497be1d04e1e793a2f3f2d0621", 0xf1}, {&(0x7f0000004c40)="0a4f4455dfb8f13566c5fa9ef15fb8608c3b8636261d56f283e08aabbc6980803e2399c402b656009ee93117228f9e7c06", 0x31}, {&(0x7f0000004c80)="910b0431e44613c13112b7a8be05581b1074d2b4279577bc9f163636c0130e35c17f196089e8e5c571883a201a848939e5acc93da4557ded9be467dafc1ce5054034767b88f91ea20250a8d0d4656e39bc905712264bfaeb3f2b2cac0f5eecc360ad21d33f1d77e2077155fd659602d411bebc9dbeaf50c357e9fa4c46c403ed5ec3e4c447e464f85a1ce792e4abdfa0229802d15718081027fce5fd81e2adfbfa5dd30805cbb9d7102cbeea1613742ae6add618ed91ce613738f2350ff25c2abbde42f109361a2f2861f56c63a83f732e79255b9285dd12be8dabcaaaba778e49ef28bebd3e4cddb50a3040", 0xec}, {&(0x7f0000004d80)="b8538ad170db078e194dfde6e86c75f117da89520b0f2639b9dfc92b861af5d2ddb1a4388572d78415ad4f391da06bb0c4d6e1ee8ace909e9c582b1b83fa51557857b284837d81dac0806d602ba907c24a3d27e1361c782859c7f1d2fc48c701bda4e094db76c1b76b87269a04bb1fb2a5f53c9be2db1ab3993521b77c3117cd6a1ac0b019cc5e6bb2d4a31112b58674e423d28aecc99a94b06897c2a054b57be207", 0xa2}, {&(0x7f0000004e40)="50b1d0bf50efeefd42dbaf1d8955eb9f288ddbb28922ca41b02a6441c0823dae4f990cc8f445d2b16dd2786b1d394b619d1150b6ea247af777a5594fb1dc3ee8d6ae669aa9832264aad4fc467ad7eeb5bf74c7dfab3aa384cd04623e837ea27234a6977c036a33adb997faa6e85adc40220f2a8ce306799d58", 0x79}], 0x7, &(0x7f0000004f40)=[{0x18, 0x85, 0x8001, "fbc5"}, {0xb8, 0x0, 0x0, "f62d80446de5c0907dc8165450c92f90fb108ca8be80877c95ada40764072c972900ee9f4f43ccc50093287f1f4e904be8656ed8aee7b493c8a91278228983e87e3ecf5909133bc319c8f0c37752d752b06b587790404c8fe933213a02b124dd3a0fc42c963ebf5a90ec102f4147883094d071bfbd3abbbb177df45a736f53d310f9c0c263b0156cade16812eb23781bdeb5ced9a09dedc4eee2557dcbc77b14394943374870"}], 0xd0}}, {{&(0x7f0000005180)=@ll={0x11, 0x4, r1, 0x1, 0x3, 0x6, @local}, 0x80, &(0x7f00000073c0)=[{&(0x7f0000005200)="a946cec785efdb903724677aff5c9b5787a73dee7da7a8c2544ac12ec1e153bf73cad1f17062c4d63b898fb42e17fa5064835e678875f0b1f6651d416ff49a208671eca3b29b33a2f72bfee5740a7fa586d3929ca6e49a2b508b856139db06661d800ef2217a940fe95b14415ba64f539e37a659076f1414eb88ce80", 0x7c}, {&(0x7f0000005280)="002f8550a79f3137b85b70c5bad811a40753bf5316ef2f7ecbef53c8e5b8a3416eb69ebbdd71a54b9b3a6e335989fc8272232ca86aa04f", 0x37}, {&(0x7f00000052c0)="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", 0x1000}, {&(0x7f00000062c0)="effcf228a07b4f2aff2ce12f07e03ea1f8c2f399aa6072555478ae4b5fbd32bfbced335a839b799f2e3cec51089f31ed5dc2451038288c3e57d88fb675130e17573b01ca6cd52ea99b6fc5d0df257e545de4b1cb22857816b93e15f3e3762ecb37009080a4c3270aed5bb3ac7cfba098a0a903d36e1c302bd502ed728351905d3429141b0b86ca71d2de688375bdac905b9ad6133d078d94ffe34ead58352b9195565957abb5f9d446ee8f0cfb2b08c71d72295056a7eaa28bacd52ae884e7dce9572be2aa680270b556739e5f4eef08dab6abe8000350e7b4", 0xd9}, {&(0x7f00000063c0)="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", 0x1000}], 0x5, &(0x7f0000007440)=[{0x28, 0x103, 0x80000001, "a7b044645b32822ee9e18ee64ef479b8de603b1a71ddd1"}, {0x1010, 0x11f, 0x7, "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"}, {0x48, 0x119, 0x2, "604a46224d68ec9c3a9295c64d03466702be8308be8392d93b5316e6b1d3872efa5a2d77218f5b56439c670aa1479746d82b81"}, {0xd8, 0x105, 0x40, "559c87da73aab6cf2d414e77a5dc83b057383d97058fedb43cb8d1f55aaa77154067e49dbfc3142a5ea190744a20b460e83a623f0553fae0cc4d2807d7555d6a9ac5a60e8998a7db3b3c20d5e9b4f86d8f073ef03ca0c7aaebf2ef1fd3e801fb2811e302a7bf88b1f00384f0ac66203b861ceaea4478e9549d9351d19ffd6ee5e511f2e8d82a615d985f47f0fec049c78e8b3bfc37f7f88da6f7c6a8a4debab8f0402cb5e1f545b605e3741dcf9b4c5df263ddee29eadc22fb9f87f9df8966bf4d72ba3c2759fc"}, {0xc0, 0x19e, 0x8, "5216fb839ec919a54c88489bb509a168aa0d24f7933cfbdab3220a4de2b6f4a14256daa9127c18b306ba2a4fa53242100e12f5708e39a54e8b4c7a85ae9e1eeb58b2a8efc84027b7c9be1eb7d78dba3e28eac1144f99c360a912740b8bc153b793d587b5d4933e34a596e109e6f0bb32855085e8b3ff875b7524565722997b9e367167b90b6ca2aae72d1575c30ab7ce031a830b38e961edb45138ace524db111870b6fa1f4bc81bdea802"}, {0x28, 0x29, 0xf58, "170e2ef1efeef2de430e43492b0d1aeebdf9f252557a"}], 0x1240}}, {{&(0x7f00000086c0)=@ll={0x11, 0xf7, r2, 0x1, 0x1f, 0x6, @dev={[], 0xd}}, 0x80, &(0x7f0000008740), 0x0, &(0x7f0000008780)=[{0x1010, 0x0, 0x1, "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"}], 0x1010}}], 0x8, 0x20000004) r3 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) [ 941.530379][T32556] binder: 32543:32556 unknown command 536871488 [ 941.558267][T32556] binder: 32543:32556 ioctl c0306201 20000440 returned -22 [ 941.577745][T32562] binder: 32541:32562 unknown command 536871488 [ 941.597400][T32562] binder: 32541:32562 ioctl c0306201 20000440 returned -22 00:22:45 executing program 3: syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x4, 0x101000) r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) [ 941.620974][T32544] binder: BINDER_SET_CONTEXT_MGR already set [ 941.666324][T32556] binder: 32543:32556 unknown command 536871488 00:22:45 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x1, 0x2) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180)=0xfffffffffffff001, 0x4) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1803}, {}], 0x2) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000000c0)={'IDLETIMER\x00'}, &(0x7f0000000100)=0x1e) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000280)="0b690a3908f396247316917932010893f38f8359b8a2b25c5bb5befea184ff80492c5e708318475860839314964bbf6d222f4e63314b0c6f342f9d78adf7a27caaae0ce3903c107b8154dfc8a477cff62b1a203c8257bbb14128d3c9b4d381a32bd97a6c6179a80ecc43f8196f70e5c422bbab2063462a3efee7d86b29655aa71f4e9eac1a95c6ebb034e22bb61a74863f03963186f4a103a21f8ebadb01fd464ef9d0bbca58a3ac9b8499a3c53c") 00:22:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="00000000004c000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 941.711798][T32544] binder: 32543:32544 ioctl 40046207 0 returned -16 [ 941.770069][T32556] binder: 32543:32556 ioctl c0306201 20000440 returned -22 00:22:45 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0xe, 0x0, &(0x7f0000000040)=0xfffffffffffffe53) [ 941.815184][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 941.821933][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 941.867117][T32572] binder: 32570:32572 unknown command 536871488 [ 941.892350][T32572] binder: 32570:32572 ioctl c0306201 20000440 returned -22 00:22:45 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) [ 941.941420][T32578] binder: BINDER_SET_CONTEXT_MGR already set [ 941.941464][T32579] binder: 32570:32579 unknown command 536871488 [ 942.001874][T32578] binder: 32570:32578 ioctl 40046207 0 returned -16 [ 942.030133][T32579] binder: 32570:32579 ioctl c0306201 20000440 returned -22 00:22:46 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x2, 0x200000) ioctl$TIOCEXCL(r0, 0x540c) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) semget(0x1, 0x3, 0x84) 00:22:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000004818"]], 0x0, 0x0, 0x0}) 00:22:46 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) socket$vsock_dgram(0x28, 0x2, 0x0) 00:22:46 executing program 2: r0 = semget$private(0x0, 0x2, 0x400) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x4d57, 0xdaf30053565cf138) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4) semop(r0, &(0x7f0000000040)=[{0x3, 0x0, 0x1000}, {0x1, 0x6, 0x1000}], 0x2) semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(r0, &(0x7f0000000080), 0x0) semop(r0, &(0x7f00000000c0)=[{0x3, 0x6, 0x800}], 0x1) accept$alg(r1, 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x80, 0x0) write$P9_RWRITE(r2, &(0x7f0000000200)={0xb, 0x77, 0x2, 0x2}, 0xb) rt_sigtimedwait(&(0x7f0000000100)={0xe1c}, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, 0x8) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) 00:22:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000060000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 942.395188][T32592] binder: 32591:32592 unknown command 536871488 [ 942.419974][T32597] binder: BINDER_SET_CONTEXT_MGR already set [ 942.432765][T32592] binder: 32591:32592 ioctl c0306201 20000440 returned -22 [ 942.463178][T32597] binder: 32596:32597 ioctl 40046207 0 returned -16 [ 942.473164][T32603] binder: 32596:32603 unknown command 536871488 [ 942.502183][T32603] binder: 32596:32603 ioctl c0306201 20000440 returned -22 [ 942.502791][T32607] binder: 32591:32607 unknown command 536871488 00:22:46 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0xffffffffffffffff) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) [ 942.536965][T32597] binder: BINDER_SET_CONTEXT_MGR already set [ 942.558393][T32603] binder: 32596:32603 unknown command 536871488 [ 942.572624][T32607] binder: 32591:32607 ioctl c0306201 20000440 returned -22 [ 942.589565][T32597] binder: 32596:32597 ioctl 40046207 0 returned -16 [ 942.612278][T32603] binder: 32596:32603 ioctl c0306201 20000440 returned -22 [ 942.614742][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 942.626374][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:22:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000004c18"]], 0x0, 0x0, 0x0}) [ 942.635385][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 942.642283][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 942.650323][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 942.656745][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:22:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000068000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:46 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x100000001, 0x0, 0xffffffffffffff7f, 0x1, 0x17, 0x2, 0x9, 0x5, 0xfffffffffffff0ef, 0x10001, 0x1000, 0x400000000000000}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 00:22:46 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) [ 942.791672][T32614] binder: 32613:32614 unknown command 536871488 [ 942.825091][T32614] binder: 32613:32614 ioctl c0306201 20000440 returned -22 00:22:46 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x80000, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000080)=[@mss={0x2, 0x7fffffff}, @sack_perm, @window={0x3, 0x7, 0x4}, @window={0x3, 0x7f, 0xfff}, @sack_perm], 0x5) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000100)=0x1, 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) [ 942.842459][T32620] binder: BINDER_SET_CONTEXT_MGR already set [ 942.873866][T32620] binder: 32617:32620 ioctl 40046207 0 returned -16 [ 942.894241][T32622] binder: 32613:32622 unknown command 536871488 [ 942.919030][T32623] binder: 32617:32623 unknown command 536871488 [ 942.928410][T32622] binder: 32613:32622 ioctl c0306201 20000440 returned -22 [ 942.936266][T32623] binder: 32617:32623 ioctl c0306201 20000440 returned -22 [ 942.952774][T32620] binder: BINDER_SET_CONTEXT_MGR already set [ 942.973534][T32623] binder: 32617:32623 unknown command 536871488 00:22:46 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) r1 = open(&(0x7f0000000040)='./file0\x00', 0x4100, 0x6) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000080)={0x2, "f6a1"}, 0x3) [ 943.000619][T32620] binder: 32617:32620 ioctl 40046207 0 returned -16 [ 943.029060][T32623] binder: 32617:32623 ioctl c0306201 20000440 returned -22 00:22:47 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x2, 0x7fff}], 0x1) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)="a05128049dc0c52708427ac5a9f584a5cc23a283044bc053d3a5273a8d06d228bb9c1f0a0d8eef6892491099b4c2ac74ed691ea2e0ac3f41609059ef7026a32d1e06cfd4ef5d102455007c63d15b0d77a7b9e58cfac18482f259ac2d4bec3b0c399ecd0b6704f6ef7029cccc3f4486212ca8042511e1db2b24e1153864d8807bc07c539e3ae73cbede1e8c0a180f2509ef1fd46184b9", 0x96, 0xfffffffffffffff9) keyctl$get_keyring_id(0x0, r0, 0x3) 00:22:47 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000006018"]], 0x0, 0x0, 0x0}) 00:22:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="00000000006c000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:47 executing program 2: recvmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)=""/201, 0xc9}, {&(0x7f0000000040)}, {&(0x7f0000000280)=""/121, 0x79}], 0x3, &(0x7f0000000340)=""/73, 0x49}, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000400)=0xaa1, 0x4) semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x42000) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) 00:22:47 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000100)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 00:22:47 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) [ 943.296529][T32638] binder: 32637:32638 unknown command 536871488 [ 943.310190][T32638] binder: 32637:32638 ioctl c0306201 20000440 returned -22 [ 943.351758][T32640] binder: 32639:32640 unknown command 536871488 [ 943.351877][T32638] binder: BINDER_SET_CONTEXT_MGR already set [ 943.376007][T32640] binder: 32639:32640 ioctl c0306201 20000440 returned -22 00:22:47 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0xff, 0x10c00) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000100)={0x0, 0x5, [@local, @random="c1c4d166454a", @empty, @dev={[], 0x25}, @remote]}) connect(r0, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80) r2 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) eventfd(0x3) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) sendto$isdn(r1, &(0x7f0000000140)={0xc7f, 0xe02, "5641d56856be9a6a54525ca4475b1a193a36571c1084e508c3a209c23820e365fce85ab0967b4e"}, 0x2f, 0x0, 0x0, 0x0) 00:22:47 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) [ 943.414743][T32642] binder: 32637:32642 unknown command 536871488 [ 943.418517][T32638] binder: 32637:32638 ioctl 40046207 0 returned -16 [ 943.441822][T32642] binder: 32637:32642 ioctl c0306201 20000440 returned -22 [ 943.441977][T32654] binder: BINDER_SET_CONTEXT_MGR already set 00:22:47 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='\xd87!\x83z\xde\xd6\x924/j\x00\x00\x00\x00\x00\x00\x00\xa4xl1\xadW\xbd\x17.?\xc8H!\xd1\xbe(|HL\xed\x8a\xa8\xd6\xdevL,\xfd+s\x03\x1e\xd9\x00\xd6I \xe7\x06>\x9c\xebu[\xc3*Zp\xf5\x91Z\x00\xe8\x83\xea\x9e\xe0\x92\x7f7\xd5s\xbf\x86}\"-\x89\xb1\xa3ua0h\xbdt\x9ew0\xb2\x8b\xf8\x82I\x13\xb9?\xd2\xe8q;\xc9m\x907\xf9_`\xfc\xba\x99\xd8\'\xd5\xe8\x99}\x03\x19\xd2 ;X_\xd1\xde\xab\xd5\xd6\f\x19\xf9b\xccFI\xa9\xbe\xb8\xfe0k\xa5\xe1\x06\xc2\xf6(\x00Ez\xb0\xaas\xd5d8sJ\x02\xb0K\x87\xa5\x008\xdf\x00\xd2-\xf9\x89\xbe\x9b\x11\x14&\xba\xeb\xd8O\xf2\x86V\xa2\x85\x84@c\x83\xa1Z\xe34\xa4\x9d\xb2C^\xaf6>\xa9\xc2J\xb0\x84\b\xfd\xb5m\xfa{\xb6}\n\xc6\x8a\x83h\xfe\xd9\x9f\"7rp\xa1\xa9\xc5\xc1\x00\x00o\x0e\xb9{Qb\xe6A\x9d\x13\xd7\x9e\xc0\xa0\xf6l\xa2!#\x0e\x84m\'\xec\x1a\xea(\x16\x15\t$\xee\xc5\xc79\xf7\x94\xc8\xdb\x1a\xf7\xdd)\x19\xa0\xac\xb5P\xcc\x04\x89\x93\xb1\x1d\xdd\xe9F\xb1\xac\xf8jDoLz,\x17\xbb\xaf\xde$\xdb\x1d\xccs\x18+u\x98\x0e?\x93x\xe4\x84\xb3\xed\x10\xa7\b2}6\xb7\xc5\xa4\xb5\xff\xd8S\xbd\x04\xaf\x88\xd9\x13\x1a\x96\x7f\xa2&\xf8\x02^\x1d\x8d\xc8\x0f\xf2\x98)\x92\xff', 0xfffffffffffffe3c) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) [ 943.489311][T32654] binder: 32639:32654 ioctl 40046207 0 returned -16 00:22:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000074000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:47 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:22:47 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) r0 = syz_open_dev$mice(&(0x7f0000001600)='/dev/input/mice\x00', 0x0, 0x200) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000016c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@mcast1}, 0x0, @in=@initdev}}, &(0x7f00000017c0)=0xe8) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x400, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4) socket$kcm(0x29, 0x2, 0x0) keyctl$reject(0x13, 0x0, 0x2, 0xe6, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f00000019c0)={'icmp\x00'}, &(0x7f0000001980)=0x3bc) pipe(0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0xffffffffffffff3d) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000240)={@initdev, 0x0, 0x0, 0x2, 0x1}, 0x20) r3 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) accept4$unix(r3, &(0x7f0000000280)=@abs, &(0x7f0000000180)=0x6e, 0x80000) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000980)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\x00\x00\xae\x98&@\xd0\xe6\xbbQ\xff\a\x00\x00\x00\x00\x00\x00\xaa1\x91\x98\xe9\x1f\nMCi|+\xcd\xf9N\xdc\xc5\xa2*\x13\x8f\xf3;\xd6d2\xeb\xe5\x14\x0e\x8b\xda\xb7\xfc9h(mf\'\xa19q\x93\"}G3\xc1E\xe6e6\xc6\xc2u\x11%`\xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xa8\x14Ts\xcb\xde\x84\x1d\xc7\xcc;\xb18') getpeername$packet(r3, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14) accept$packet(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r3, &(0x7f0000004440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000004480)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000004ac0)={{{@in=@multicast2, @in=@multicast1}}, {{@in6=@local}, 0x0, @in6=@initdev}}, &(0x7f0000004bc0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000004c00)={{{@in6=@remote, @in=@loopback}}, {{@in=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getpeername$packet(r3, &(0x7f0000004f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000004f80)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000052c0)) getsockname$packet(r4, &(0x7f0000007ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000007b00)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f000000a180)={'vcan0\x00'}) sendfile(r2, r4, &(0x7f00000000c0)=0x209, 0x5a) [ 943.678393][T32671] binder: 32670:32671 unknown command 536871488 [ 943.689199][T32671] binder: 32670:32671 ioctl c0306201 20000440 returned -22 [ 943.741137][T32678] binder: 32670:32678 unknown command 536871488 [ 943.748237][T32678] binder: 32670:32678 ioctl c0306201 20000440 returned -22 00:22:48 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) r0 = semget(0x0, 0x3, 0x84) semop(r0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) socket$xdp(0x2c, 0x3, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000001340)='/proc/capi/capi20\x00', 0x4401, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000001380)=0x100, &(0x7f00000013c0)=0x4) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000040)=0x1) 00:22:48 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000006818"]], 0x0, 0x0, 0x0}) 00:22:48 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:22:48 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, 0x0, &(0x7f00000000c0)) 00:22:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="00000000007a000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:48 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) [ 944.260809][T32684] binder: BINDER_SET_CONTEXT_MGR already set [ 944.272426][T32690] binder: 32689:32690 unknown command 536871488 [ 944.294341][T32684] binder: 32683:32684 ioctl 40046207 0 returned -16 [ 944.302875][T32690] binder: 32689:32690 ioctl c0306201 20000440 returned -22 [ 944.319469][T32693] binder: 32683:32693 unknown command 536871488 [ 944.349713][T32697] binder: 32689:32697 unknown command 536871488 00:22:48 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) [ 944.364082][T32693] binder: 32683:32693 ioctl c0306201 20000440 returned -22 [ 944.375394][T32697] binder: 32689:32697 ioctl c0306201 20000440 returned -22 [ 944.407975][T32684] binder: BINDER_SET_CONTEXT_MGR already set 00:22:48 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 00:22:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0000000000ff000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 944.423453][T32693] binder: 32683:32693 unknown command 536871488 [ 944.454475][T32684] binder: 32683:32684 ioctl 40046207 0 returned -16 00:22:48 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) [ 944.485210][T32693] binder: 32683:32693 ioctl c0306201 20000440 returned -22 00:22:48 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000006c18"]], 0x0, 0x0, 0x0}) [ 944.579769][T32712] binder: 32708:32712 unknown command 536871488 [ 944.623374][T32712] binder: 32708:32712 ioctl c0306201 20000440 returned -22 [ 944.636876][T32719] binder: BINDER_SET_CONTEXT_MGR already set [ 944.646688][T32719] binder: 32718:32719 ioctl 40046207 0 returned -16 [ 944.685312][T32720] binder: 32718:32720 unknown command 536871488 [ 944.697024][T32722] binder: 32708:32722 unknown command 536871488 [ 944.707946][T32720] binder: 32718:32720 ioctl c0306201 20000440 returned -22 [ 944.708601][T32722] binder: 32708:32722 ioctl c0306201 20000440 returned -22 00:22:48 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x7fff, 0x1000}], 0x1) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x800) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000100)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000140)={r1, r2}) [ 944.771138][T32720] binder: 32718:32720 unknown command 536871488 [ 944.790844][T32720] binder: 32718:32720 ioctl c0306201 20000440 returned -22 00:22:49 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) semget$private(0x0, 0x2, 0x2) r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x5, 0x4402) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000140)={0xfffffff, 0x2, 0x5, [], &(0x7f0000000100)={0x9a0907, 0x0, [], @p_u8=&(0x7f00000000c0)=0xffffffffffffff09}}) 00:22:49 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) recvmmsg(r0, &(0x7f00000043c0)=[{{&(0x7f0000000540)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f00000017c0)=[{&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/171, 0xab}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/157, 0x9d}], 0x4, &(0x7f0000001800)=""/92, 0x5c}, 0x7fff}, {{&(0x7f0000001880)=@rc, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001900)=""/99, 0x63}, {&(0x7f0000001980)=""/141, 0x8d}, {&(0x7f0000001a40)=""/116, 0x74}], 0x3, &(0x7f0000001b00)=""/217, 0xd9}, 0x64}, {{&(0x7f0000001c00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000003e80)=[{&(0x7f0000001c80)=""/92, 0x5c}, {&(0x7f0000001d00)=""/4096, 0x1000}, {&(0x7f0000002d00)=""/101, 0x65}, {&(0x7f0000002d80)=""/82, 0x52}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000003e00)}, {&(0x7f0000003e40)=""/7, 0x7}], 0x7}, 0x5}, {{0x0, 0x0, &(0x7f0000004240)=[{&(0x7f0000003f00)=""/177, 0xb1}, {&(0x7f0000003fc0)=""/89, 0x59}, {&(0x7f0000004040)=""/43, 0x2b}, {&(0x7f0000004080)=""/197, 0xc5}, {&(0x7f0000004180)=""/189, 0xbd}], 0x5, &(0x7f00000042c0)=""/210, 0xd2}, 0xdabf}], 0x4, 0x2002, &(0x7f00000044c0)) getpeername$packet(0xffffffffffffffff, &(0x7f0000004780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000047c0)=0x14) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000004e00)={@dev, @local, 0x0}, &(0x7f0000004e40)=0xc) getpeername(r0, &(0x7f0000005140)=@can={0x1d, 0x0}, &(0x7f00000051c0)=0x80) sendmmsg$inet(r0, &(0x7f0000005580)=[{{&(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0x54}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000080)="c79105a3a8c3a5b2a0436c470f7c6dd57dc593b9efe3497b8f400a7887443adacc5b3faf0779f6", 0x27}, {&(0x7f0000000100)="fb21663ccade9acf8f76638fb7957e0cf151778ef92d79b6282c992c0cb3f5bb560f533f9f1a7f06552a15cedcff7989c9a435e1396631bb59ed5bad42fae081eec414add53c361fdf24114f8e0cf5b1e559a5e1de06677b1fe9cd7be52345dfae5c8267a96f207f96e1b1b2300fab52acc4253b42ca1c506f51534ff5df41ed02ed62fc93e325d40610450a83c0fff8d9a73d75cf4d8f849eedc2db0d6aa8fa9484910c623310058140af7399e0cc85e3af061063cfd700254a9d7c6c92e49617050c39afa8a7a763dc28fa743ef9b3c389590c8bcf07e99b932987baab47e16a5f5dd0266d573339e6a96bb9ceb2e5bd1df18251", 0xf5}], 0x2}}, {{&(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000280)="3dc498686c54d6c265cf5cce7c51c3ecc00b411d71a38f1c37b2f8fbd090fab6dd36875cebccc94b706b632bf900d19ef023237dbcc3249084590a40134d0d27863d640b5a7b25ce1ee3a3a543e233d72f6a9655675e57c0c6d85b3d663a32eff598453963b57a32fae693549829aee44dea0d345734a151a99cb2cc75bb4993632fe5077986665d74e3a40826fa822ad7aeda03fe1fb0f1bfd38c03826c595b52b89440309758074a5ae5d412503470313d50dc", 0xb4}, {&(0x7f0000000340)="240ba81f5ffec834b9fe7476df32a38054411148e46e6bc311e93781bbc1fa5bca206c4057d0515168ff24f999e94c47233923e5cb8af4110046a4e4f39f0fc103b91c8401bc65c44cbbdac6a50494808be43799f29c615a935f2a8e9c6891e0613d157913064d843422cb", 0x6b}, {&(0x7f00000003c0)="ec4442014cd60eaee3fd69dda5c78dff93906ffd10aecf72087c3f736de9b636aba66e0c139a14b99a9147015398a4bb61f41cdbf9d99ec7a91efeb6ca3925cbcbee0e5545e44c8fdec82c1c6e4e6e66fde287e6efa1e963eb694dfecdf1635e6c027e5123257b71ab9c82f995ea3ef4", 0x70}, {&(0x7f0000000440)="57546593cd3aa857670dceb9270f6f3ffdb485715d284d3862ba33b429fe133d2a9039933195b7dde052bde6be2a4c9c34b6fbcc24240477841ac4e63086f3753483fe4bd2d16757f40f0c88cc0704de8a1f651afe0ec720b68ea99886ab27548ee11e794f1c01733457aa66344e825be386a268b1c276281b92daecefa110ec1ec9cdb0f7a89b093b07d2f178908b549f36c83d9c5f5a0f0329b596939973feee482d406e0cb423", 0xa8}], 0x4, &(0x7f0000004800)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_retopts={{0xcc, 0x0, 0x7, {[@noop, @cipso={0x86, 0x41, 0x5, [{0x7, 0x3, "11"}, {0x7, 0x11, "f891235aeb38c755f08a96df09f7e7"}, {0x7, 0x10, "a3ca3a3b304852f2491a9bea358a"}, {0x7, 0xa, "83fd87d85c6339c9"}, {0x7, 0xd, "1aa2528cfbfaa8750012d7"}]}, @ssrr={0x89, 0x27, 0x5, [@loopback, @loopback, @loopback, @rand_addr=0x1, @multicast1, @rand_addr=0x62c8, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x44, 0xf, "6db767a669213d6c96e46759d9"}, @rr={0x7, 0x7, 0x20, [@dev={0xac, 0x14, 0x14, 0x19}]}, @timestamp={0x44, 0x10, 0x5, 0x3, 0x1000, [{[], 0x7ff}, {[@dev={0xac, 0x14, 0x14, 0x20}], 0xeb5b}]}, @cipso={0x86, 0x2d, 0x9, [{0x7, 0x11, "c1e08e998feec85934fdc39ee2dabd"}, {0x7, 0x6, "fbc7ba28"}, {0x7, 0xe, "b2d2b1b046a7d727638ecd2c"}, {0x0, 0x2}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @rand_addr=0xfff, @dev={0xac, 0x14, 0x14, 0x12}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7fff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1a92}}, @ip_ttl={{0x14, 0x0, 0x2, 0x800}}, @ip_retopts={{0x48, 0x0, 0x7, {[@cipso={0x86, 0x37, 0x5, [{0x6, 0xf, "dd954a4a0a2f4c8e404d63d436"}, {0x6, 0x4, "c692"}, {0x0, 0x8, "7548d9cbd882"}, {0x7, 0x10, "a77320b884d3b6cc8caeb4222d93"}, {0x0, 0x3, "84"}, {0x7, 0x3, "c9"}]}]}}}, @ip_retopts={{0x10}}], 0x1c8}}, {{&(0x7f0000004a00)={0x2, 0x4e20, @rand_addr=0x4}, 0x10, &(0x7f0000004ac0)=[{&(0x7f0000004a40)="2240e04f93762e9020232ad26e335dfbeec90922b613bb8a4ce87408c089a6ec89e92c4d73bb", 0x26}, {&(0x7f0000004a80)="5f1b1fd87c58518add9f1e", 0xb}], 0x2, &(0x7f0000004b00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3ff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe30}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2eb84a47}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd14000000000000}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0x90}}, {{&(0x7f0000004bc0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000004dc0)=[{&(0x7f0000004c00)="c73f852a5a0b848751cb41748dc97056787b9c046ab09fe53978ea3e036222f8d50ac0187da759ed0c94b365fcf00f81e5136fe8c9b7b7c529fd7ddec0457117e7606aa4c6869520fc3921949324a95b49f1bd765e4a905386fbf1b8b24354c22ed93dc690796078820fceef7426d132d6f657b9bfa6007e65afb82d5f46580d4a0848c584ce9d3ad921857da1a70ce0b8a176dc5da78ae3f44f0c2a460eee4b0bb7d2246da557f4d4e22b788801e15fff0ba11f0db8e23ef927d39ee3cfaa4a5bfed06749", 0xc5}, {&(0x7f0000004d00)="1d292302c07aa505f8f24548f9739dc1475a8840299b986b863ac4bf0812fa7a1267323e31d2", 0x26}, {&(0x7f0000004d40)="583b676984dd0aa84511c9d2f5ebefaace5cc8808b213ab6c8214e06423177ecf4b857e4abf106a52f995ad2f0be8d7b682c999413c6b18678b4a7fd70bc82e5816e0cec06e17505c98b2b9d8571205576df43f5c8b08f0846da80c6c72c379849cdef143378e36c38e06693622f6d90a7f14cd7d7ed", 0x76}], 0x3, &(0x7f0000005200)=[@ip_retopts={{0x30, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x8, 0x3, 0x3, [{[@rand_addr=0x8], 0xe18a}, {[], 0xc10}]}, @end, @noop, @ssrr={0x89, 0xb, 0x100, [@loopback, @rand_addr=0xa6]}]}}}, @ip_retopts={{0xac, 0x0, 0x7, {[@cipso={0x86, 0x21, 0x6, [{0x7, 0xe, "160175c4b12be9105d84cd84"}, {0x0, 0xd, "9aa59759c8778c73aebbf3"}]}, @ra={0x94, 0x6, 0x9}, @timestamp={0x44, 0x30, 0x8, 0x1, 0xff, [{[@dev={0xac, 0x14, 0x14, 0xb}], 0x4}, {[], 0x7d7d}, {[@multicast2], 0x8}, {[], 0x3}, {[], 0x8}, {[@multicast2], 0x6}, {[@broadcast], 0x2}]}, @rr={0x7, 0x27, 0x6, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @local, @dev={0xac, 0x14, 0x14, 0x24}, @loopback, @rand_addr=0x100000000, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0xb, 0x295f438e, [@empty, @broadcast]}, @noop, @ra={0x94, 0x6, 0x2}, @ra={0x94, 0x6}, @ra={0x94, 0x6, 0x100000001}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @rand_addr=0x20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast2, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x168}}, {{&(0x7f0000005380)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000053c0)}}, {{&(0x7f0000005400)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10, &(0x7f0000005500)=[{&(0x7f0000005440)="3939aa09d66dfa328e0f0d52f02aa5a2377160d47ad8495ae2cb709412ea334c5ccf44096eb4d34e6a8ec77476542fced2f51f2d373e8b00fad53a58a8fd0c6ccba204b58cc7110c6cb30d8b0e6070d4a26b4082214e32e3885d99b776bed61ec86e30135854990051df711c71d080b16452a63357df2cd5e716bba98eb799f779e72f7558d2ec9e60f949087f5eed91340f15c63f6ec228439f5167a89ae659431bdc12460c5ae3cadf1c483876", 0xae}], 0x1, &(0x7f0000005540)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x18}}], 0x6, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 00:22:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000118000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:49 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000f00)) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:22:49 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000007418"]], 0x0, 0x0, 0x0}) [ 945.292893][T32738] binder: BINDER_SET_CONTEXT_MGR already set [ 945.293886][T32733] binder: 32732:32733 unknown command 536871488 [ 945.312152][T32738] binder: 32735:32738 ioctl 40046207 0 returned -16 [ 945.330986][T32738] binder: 32735:32738 unknown command 536871488 00:22:49 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cubic\x00', 0x6) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) [ 945.339019][T32733] binder: 32732:32733 ioctl c0306201 20000440 returned -22 [ 945.351637][T32738] binder: 32735:32738 ioctl c0306201 20000440 returned -22 [ 945.395743][T32742] binder: 32732:32742 unknown command 536871488 [ 945.409640][T32738] binder: BINDER_SET_CONTEXT_MGR already set [ 945.438229][T32742] binder: 32732:32742 ioctl c0306201 20000440 returned -22 [ 945.449687][T32743] binder: 32735:32743 unknown command 536871488 00:22:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000218000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 945.479089][T32738] binder: 32735:32738 ioctl 40046207 0 returned -16 [ 945.514041][T32743] binder: 32735:32743 ioctl c0306201 20000440 returned -22 00:22:49 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) semget(0x2, 0x3, 0x80) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 00:22:49 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000007a18"]], 0x0, 0x0, 0x0}) [ 945.670608][T32753] binder: 32751:32753 unknown command 536871488 [ 945.697039][T32757] binder: BINDER_SET_CONTEXT_MGR already set [ 945.706865][T32753] binder: 32751:32753 ioctl c0306201 20000440 returned -22 00:22:49 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/4\x00') ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000440)={0x7, 0x0, [{0x3000, 0x95, &(0x7f00000000c0)=""/149}, {0x6, 0xb2, &(0x7f0000000180)=""/178}, {0x100000, 0x2c, &(0x7f0000000280)=""/44}, {0x2, 0x2b, &(0x7f00000002c0)=""/43}, {0x2000, 0x4a, &(0x7f0000000300)=""/74}, {0xf001, 0x0, 0xfffffffffffffffe}, {0x106004, 0x82, &(0x7f0000000380)=""/130}]}) [ 945.729220][T32757] binder: 32756:32757 ioctl 40046207 0 returned -16 [ 945.750469][T32762] binder: 32756:32762 unknown command 536871488 [ 945.770124][T32763] binder: 32751:32763 unknown command 536871488 00:22:49 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) [ 945.821683][T32762] binder: 32756:32762 ioctl c0306201 20000440 returned -22 [ 945.854970][T32763] binder: 32751:32763 ioctl c0306201 20000440 returned -22 [ 945.893141][T32757] binder: BINDER_SET_CONTEXT_MGR already set [ 945.915481][T32762] binder: 32756:32762 unknown command 536871488 [ 945.937191][T32757] binder: 32756:32757 ioctl 40046207 0 returned -16 00:22:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000318000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 945.969223][T32762] binder: 32756:32762 ioctl c0306201 20000440 returned -22 [ 945.976667][ C1] net_ratelimit: 12 callbacks suppressed [ 945.976675][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 945.976729][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 946.101592][ T306] binder: 305:306 unknown command 536871488 00:22:50 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) r0 = semget$private(0x0, 0x3, 0x381) semctl$SETVAL(r0, 0x7, 0x10, &(0x7f00000002c0)=0x9b) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) semop(r0, &(0x7f00000000c0)=[{0x0, 0x3c30, 0x1000}, {0x0, 0xff, 0x1800}, {0x3, 0x81, 0x800}, {0x1, 0xc09a, 0x800}, {0x0, 0x81, 0x800}, {0x3, 0x40, 0x1800}, {0x0, 0x81, 0x800}, {0x1, 0xe2e, 0x1000}], 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000001c0)=0xc7) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000200)={r2}, &(0x7f0000000280)=0x8) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) 00:22:50 executing program 3: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8, 0x40) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x1f}}}, 0x1e) r1 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 00:22:50 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) r0 = dup(0xffffffffffffff9c) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040)=0xf4240) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) 00:22:50 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000f00)) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:22:50 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00/']], 0x0, 0x0, 0x0}) [ 946.158219][ T306] binder: 305:306 ioctl c0306201 20000440 returned -22 [ 946.171182][ T310] binder: 305:310 unknown command 536871488 [ 946.178721][ T310] binder: 305:310 ioctl c0306201 20000440 returned -22 00:22:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000418000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 946.243100][ T322] binder: BINDER_SET_CONTEXT_MGR already set [ 946.270029][ T322] binder: 316:322 ioctl 40046207 0 returned -16 [ 946.310308][ T328] binder: 316:328 unknown command 536871488 [ 946.330966][ T330] binder: 329:330 unknown command 536871488 [ 946.340975][ T330] binder: 329:330 ioctl c0306201 20000440 returned -22 [ 946.346903][ T328] binder: 316:328 ioctl c0306201 20000440 returned -22 00:22:50 executing program 3: r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x12000, 0xfb94161aa15a4fa8) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000080)) r1 = socket$inet(0x2, 0x4040000000000001, 0x0) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000100)={0x0, 0x1, [0x6, 0xffffffffffffff41, 0x3f, 0x3, 0x80000001, 0x9, 0xcebf, 0x100000001]}) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) [ 946.368549][ T333] binder: 329:333 unknown command 536871488 00:22:50 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) getgroups(0x3, &(0x7f0000000040)=[0xee00, 0xee01, 0xee01]) r1 = getegid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) setresgid(r0, r1, r2) [ 946.423072][ T322] binder: BINDER_SET_CONTEXT_MGR already set [ 946.425573][ T333] binder: 329:333 ioctl c0306201 20000440 returned -22 [ 946.452178][ T322] binder: 316:322 ioctl 40046207 0 returned -16 [ 946.453008][ T328] binder: 316:328 unknown command 536871488 [ 946.522133][ T328] binder: 316:328 ioctl c0306201 20000440 returned -22 00:22:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000518000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:50 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bic\x00\xb4\xf5C\x1d~\xf8\xde\xfa0\x81\x91\xb1\xe8\xc1F_7\xf4w}\xe8\x98\xef\xb9\x10\xac\x8dzP\x82\x99\x8f\xfec`\xdf\f\xed\x83\x96a\xbf\x87\xe5\xa7\xbf/V_\xae\xb0\f\\\xdce\xf4\x0eDe\xf9Ku\x8b\xd8\xb6!\xde\xf7\xa7\x01\f.I8\x8a\xddt\xb9\xeb!\xfd6\x13\xb6\xb0:\xd3~\x84\x89S\xbb\x04\b\x9b#\xb6\x98,h\xf0\xd2(g\xbf\xd4r\x93Ymq\x15(\xa4\xf6\x95)\x8d\\\x9b\xe6\x1d\x18\xec\x15\xe6\x03qW\xd5+\x1f\xc9\x9a\x95J^\x1f+\xf4\v>\xa0*\x99\xa1S\x1aK\xfa\xd3\x82FI\n\xdc\xe4Yt\"m\xde\x86\x14\x1e%\xb7\xdcL\x03\xf07\x1f\r\xf0\xe0\x1c\xe6NT\xe8\b\xc4\x9a\xc3\'\xf2K\xbe\xe3?\xe7\x989\xb0xk\x06\xbc>\xe1\xd7\xb70\x8f\xbd\x9c\xe8J\xd0\xc4\x19m\x1eWw\x19\x030\xb6\xad(\x95\xa6<\x1cbW\xeb\xbb\x9c\aK\xfa\xb0d\xf916\xeenP\xbd\x1d\x8bOyI\xa00\x8dm\x17(sZ\xfb\x9d,\xb4j\x7f\x01b\x01h<\x05\xd4\xb5:\xef\xc9_\xab\x94\xd37\xe5@\xa0s4\x1f\v3&wP\x89\xb0\x89\x94\xbc\xef\xa8U\x86._]\xa9\xe8\x8cLq(\x96\xcf\x9c\xac\xe7.\xf2~\xa3N\x01s\x05w', 0xfffffd9a) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 00:22:50 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00E']], 0x0, 0x0, 0x0}) [ 946.708229][ T346] binder: 343:346 unknown command 536871488 [ 946.741578][ T346] binder: 343:346 ioctl c0306201 20000440 returned -22 [ 946.755990][ T349] binder: BINDER_SET_CONTEXT_MGR already set 00:22:50 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) r0 = semget(0x3, 0x3, 0x0) semop(r0, &(0x7f0000000040)=[{0x3, 0x8, 0x1800}], 0x1) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) [ 946.782956][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 946.789477][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 946.789535][ T349] binder: 347:349 ioctl 40046207 0 returned -16 [ 946.801182][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 946.808305][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 946.815093][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 946.817900][ T352] binder: 343:352 unknown command 536871488 [ 946.825363][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 946.915352][ T352] binder: 343:352 ioctl c0306201 20000440 returned -22 [ 946.934027][ T355] binder: 347:355 unknown command 536871488 [ 946.943014][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 946.949934][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 946.965271][ T355] binder: 347:355 ioctl c0306201 20000440 returned -22 [ 947.024292][ T349] binder: BINDER_SET_CONTEXT_MGR already set [ 947.048476][ T355] binder: 347:355 unknown command 536871488 [ 947.058971][ T349] binder: 347:349 ioctl 40046207 0 returned -16 [ 947.064080][ T355] binder: 347:355 ioctl c0306201 20000440 returned -22 00:22:51 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) r0 = semget(0x2, 0x3, 0x441) r1 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x3, 0x2) write$UHID_CREATE(r1, &(0x7f00000001c0)={0x0, 'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000180)=""/28, 0x1c, 0x9, 0x0, 0x5, 0xc9f, 0x3af4}, 0x120) semop(r0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {0x0, 0xfffffffffffffffc}], 0x2) semop(0x0, &(0x7f0000000140)=[{0x2, 0x7fff}], 0x1) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) bind$rds(r2, &(0x7f00000000c0)={0x2, 0x4e24, @rand_addr=0x2}, 0x10) 00:22:51 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x8, 0x0, &(0x7f00000000c0)=0x3c6) 00:22:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000618000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:51 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000f00)) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:22:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00P']], 0x0, 0x0, 0x0}) 00:22:51 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semget$private(0x0, 0x1, 0x182) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x8400, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) r1 = semget$private(0x0, 0x5, 0x10c) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e21, @multicast1}, 0x241, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0)='veth0_to_bond\x00', 0x193f, 0x7, 0x80000000}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000001c0)=0x7fffffff, 0x4) semop(r1, &(0x7f0000000240)=[{0x0, 0x0, 0x1000}], 0x1) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000180)={0x7}, 0x4) [ 947.191042][ T370] binder: 368:370 unknown command 536871488 [ 947.196117][ T371] binder: BINDER_SET_CONTEXT_MGR already set [ 947.204449][ T370] binder: 368:370 ioctl c0306201 20000440 returned -22 00:22:51 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x400000, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, &(0x7f00000000c0)="2d8acc7a2b009cae8c97aced667814542228cd7f374280595909d04655d97e4f9fd18b4f1a39a42a452bb51123054924e48a7c4a1cbac004500586c1e2acccbef8575b7954fb79207004c3eed2fd4bb512ffab7cbe1638ee673aad05cac769322c46abdbe510d6abbf14125d715d4a215c0972366ddcd267700e40d84c4ccc520a3cb7c875c691368ef7eeaa9013ac0d5f323e3a1264489d406aeddace36db009e80f31ed9a88b074031b95f97f786769e7fcf2ca2ce38215bb530f28a4b9834c704", &(0x7f00000001c0)=""/25}, 0x18) getsockopt$inet_tcp_buf(r0, 0x6, 0x0, 0x0, &(0x7f0000000080)=0xfffffffffffffc95) readv(r0, &(0x7f00000016c0)=[{&(0x7f0000000240)=""/164, 0xa4}, {&(0x7f0000000300)=""/182, 0xb6}, {&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/132, 0x84}, {&(0x7f0000000500)=""/26, 0x1a}, {&(0x7f0000000540)=""/182, 0xb6}, {&(0x7f0000000600)}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/126, 0x7e}], 0x9) [ 947.247154][ T371] binder: 369:371 ioctl 40046207 0 returned -16 [ 947.270915][ T378] binder: 369:378 unknown command 536871488 [ 947.298453][ T381] binder: 368:381 unknown command 536871488 [ 947.324419][ T378] binder: 369:378 ioctl c0306201 20000440 returned -22 [ 947.342383][ T381] binder: 368:381 ioctl c0306201 20000440 returned -22 [ 947.381579][ T371] binder: BINDER_SET_CONTEXT_MGR already set [ 947.400351][ T378] binder: 369:378 unknown command 536871488 00:22:51 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x20000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080), 0x13f, 0x5}}, 0x20) getsockopt$inet_tcp_buf(r0, 0x6, 0x1f, 0x0, &(0x7f0000000140)) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e20, @multicast2}, 0x1, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)='hsr0\x00', 0x5, 0x8, 0x81}) 00:22:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000000ff"]], 0x0, 0x0, 0x0}) [ 947.422102][ T371] binder: 369:371 ioctl 40046207 0 returned -16 [ 947.446757][ T378] binder: 369:378 ioctl c0306201 20000440 returned -22 [ 947.504872][ T391] binder: 389:391 unknown command 536871488 [ 947.516672][ T391] binder: 389:391 ioctl c0306201 20000440 returned -22 [ 947.540076][ T393] binder: 389:393 unknown command 536871488 [ 947.548574][ T393] binder: 389:393 ioctl c0306201 20000440 returned -22 00:22:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000718000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00/']], 0x0, 0x0, 0x0}) 00:22:51 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000080)=0x2) r1 = socket$inet(0x2, 0x4040000000000001, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) [ 947.700642][ T396] binder: 395:396 unknown command 536871488 [ 947.722508][ T399] binder: BINDER_SET_CONTEXT_MGR already set [ 947.737597][ T399] binder: 398:399 ioctl 40046207 0 returned -16 [ 947.744108][ T396] binder: 395:396 ioctl c0306201 20000440 returned -22 [ 947.762283][ T399] binder: 398:399 unknown command 536871488 [ 947.773480][ T399] binder: 398:399 ioctl c0306201 20000440 returned -22 [ 947.789230][ T399] binder: BINDER_SET_CONTEXT_MGR already set [ 947.796240][ T403] binder: 398:403 unknown command 536871488 [ 947.805186][ T404] binder: 395:404 unknown command 536871488 [ 947.811266][ T399] binder: 398:399 ioctl 40046207 0 returned -16 [ 947.822569][ T404] binder: 395:404 ioctl c0306201 20000440 returned -22 [ 947.829684][ T403] binder: 398:403 ioctl c0306201 20000440 returned -22 00:22:52 executing program 5: semop(0x0, &(0x7f0000000040), 0x0) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) r0 = msgget$private(0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000380)='/dev/snd/pcmC#D#c\x00', 0x6f9, 0x24000) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f00000003c0)={0x0, 0xefa}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000440)={r2, 0x7}, 0x8) fstat(0xffffffffffffff9c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000200)=[0xee01]) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000480)=""/116) r8 = getpgrp(0xffffffffffffffff) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000300)={{0x200, r3, r4, r5, r6, 0x0, 0x4}, 0x3da, 0x1000, 0x400, 0x2000, 0x3, 0x9, r7, r8}) 00:22:52 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x0, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x5, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x400000, 0x0) r3 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x3, 0x20000) epoll_create1(0x80000) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) 00:22:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000818000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:52 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00E']], 0x0, 0x0, 0x0}) 00:22:52 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:22:52 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x208000, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x4000, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x0, 0x0) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000180)={r1, 0xfffffffffffffffc, 0x0, r2}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000001c0)={0x0, 0x0, 0x10001}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000200)={0x6, r3, 0x10000, 0x1e55ce70}) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) [ 948.139843][ T419] binder: 418:419 unknown command 536871488 [ 948.159919][ T417] binder: BINDER_SET_CONTEXT_MGR already set 00:22:52 executing program 3: r0 = socket$inet(0x2, 0x80007, 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@rand_addr=0x6, @dev={0xac, 0x14, 0x14, 0x24}, @broadcast}, 0xc) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x80) syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0)='TIPCv2\x00') ioctl$TCSETA(r1, 0x5406, &(0x7f0000000780)={0x800, 0xff, 0x2, 0x20, 0x1, 0x1f, 0x8, 0x2, 0x9, 0x6}) r2 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000700)='/proc/self/attr/current\x00', 0x2, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000380)={@multicast2, @broadcast, 0x0}, &(0x7f00000003c0)=0xc) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)=@deltclass={0x250, 0x29, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, r3, {0xf, 0xa}, {0x8, 0xa}, {0xfff2, 0x1}}, [@TCA_RATE={0x8, 0x5, {0x6, 0x10000}}, @tclass_kind_options=@c_qfq={{0x8, 0x1, 'qfq\x00'}, {0x3c, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x16}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x18}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x1}, @TCA_QFQ_LMAX={0x8, 0x2, 0xffff}, @TCA_QFQ_LMAX={0x8, 0x2, 0x8}, @TCA_QFQ_LMAX={0x8, 0x2, 0xde68}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x6}]}}, @tclass_kind_options=@c_dsmark={{0xc, 0x1, 'dsmark\x00'}, {0xc, 0x2, @TCA_DSMARK_MASK={0x8}}}, @tclass_kind_options=@c_qfq={{0x8, 0x1, 'qfq\x00'}, {0x24, 0x2, [@TCA_QFQ_LMAX={0x8}, @TCA_QFQ_LMAX={0x8, 0x2, 0x6}, @TCA_QFQ_LMAX={0x8, 0x2, 0xffffffffffffffff}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x6d}]}}, @tclass_kind_options=@c_drr={{0x8, 0x1, 'drr\x00'}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x5}}}, @tclass_kind_options=@c_atm={{0x8, 0x1, 'atm\x00'}, {0xc0, 0x2, [@TCA_ATM_HDR={0x8, 0x3, "e485"}, @TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_HDR={0x24, 0x3, "dfd5f1a9f7a6840a8ef45dba913a8f5ffd0909a66d5b4584ce4bd89849d598"}, @TCA_ATM_HDR={0x3c, 0x3, "a4a60574f7d2ba0cec94f5e1dbc8c4e45daa4b4be836905411c46fc947542113c88539c41fa91172c7ec344ee63917915be7a299d7"}, @TCA_ATM_HDR={0x44, 0x3, "2a4ee70a154071c77dadbcc8e2bfd888596206e2aa28aa4d17967cf9340b5fdac3974a511ffaf1f320897ea05385109d2adb9c9304ad5a2265b744ecd1e930df"}]}}, @tclass_kind_options=@c_atm={{0x8, 0x1, 'atm\x00'}, {0x24, 0x2, [@TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff7, 0xd}}, @TCA_ATM_EXCESS={0x8, 0x4, {0xb, 0x3}}]}}, @tclass_kind_options=@c_atm={{0x8, 0x1, 'atm\x00'}, {0x8c, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x0, 0xffff}}, @TCA_ATM_HDR={0x24, 0x3, "8b339994a2c8194ed1d1ba9799883b9aa0843de3953d19ea2e52c97174"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x2, 0xfff2}}, @TCA_ATM_FD={0x8, 0x1, r1}, @TCA_ATM_HDR={0x2c, 0x3, "0d34c181eb4371a8497189b0d368097a3cafaf8e4cc398fda016346208b30889a4e9e297612d28"}, @TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_EXCESS={0x8, 0x4, {0x2, 0xffef}}, @TCA_ATM_EXCESS={0x8, 0x4, {0xd, 0xfff3}}]}}]}, 0x250}, 0x1, 0x0, 0x0, 0x240040c0}, 0x4) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x44}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x12c, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7d08}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}]}, @TIPC_NLA_MEDIA={0x80, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xcf1b}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x3c, 0x1, [@TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'bond_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xebd}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x1}, 0x40001) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000800)="fcff7abed1107efc3d41b98e69947ecfdca50c3055860507a2d350757bf70f2391079cf9286d5b3c3e0721bdb39108c2d2adec4c3cf44b1fe82a1cce7d86363d3b45e121494e8b24acf4f91ee1ac897d6346c3ee8745022b426fc996a587a61b61c9fd") syz_genetlink_get_family_id$tipc2(&(0x7f0000000740)='TIPCv2\x00') syz_genetlink_get_family_id$tipc2(&(0x7f0000000900)='TIPCv2\x00') fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000880)='trusted.overlay.nlink\x00', &(0x7f00000008c0)={'L-', 0x1}, 0x28, 0x1) fsync(r0) ioctl$VT_DISALLOCATE(r1, 0x5608) [ 948.188707][ T419] binder: 418:419 ioctl c0306201 20000440 returned -22 [ 948.196646][ T417] binder: 415:417 ioctl 40046207 0 returned -16 [ 948.204932][ T417] binder: 415:417 unknown command 536871488 [ 948.211074][ T417] binder: 415:417 ioctl c0306201 20000440 returned -22 00:22:52 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.stat\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f00000000c0)={'NETMAP\x00'}, &(0x7f0000000100)=0x1e) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) [ 948.249146][ T417] binder: BINDER_SET_CONTEXT_MGR already set [ 948.268996][ T433] binder: 418:433 unknown command 536871488 [ 948.277000][ T432] binder: 415:432 unknown command 536871488 [ 948.290904][ T433] binder: 418:433 ioctl c0306201 20000440 returned -22 00:22:52 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) r0 = semget(0x0, 0x1, 0x40) semop(r0, &(0x7f0000000080)=[{0x0, 0x82, 0x800}, {0x4, 0xfffffffffffffffd}], 0x2) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x802, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x4, 0x7, 0x1}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={r2, 0xf527, 0x30}, &(0x7f0000000180)=0xc) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) r3 = pkey_alloc(0x0, 0x3) pkey_free(r3) [ 948.317341][ T417] binder: 415:417 ioctl 40046207 0 returned -16 [ 948.372204][ T432] binder: 415:432 ioctl c0306201 20000440 returned -22 00:22:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000002018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:52 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00P']], 0x0, 0x0, 0x0}) 00:22:52 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x903, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4050}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x600, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x48000}, 0x8800) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) [ 948.569773][ T455] binder: 454:455 unknown command 536871488 [ 948.597376][ T457] binder: BINDER_SET_CONTEXT_MGR already set [ 948.604904][ T455] binder: 454:455 ioctl c0306201 20000440 returned -22 00:22:52 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) r0 = socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000380)={{{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000480)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0}, &(0x7f00000005c0)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000600)={'vcan0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000940)=[{{&(0x7f0000000180)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f00000001c0)="9bf6bda65f83f78c3d21146280b83d2bea24b2df8c2e6d3be745138b563ec231d3c9a7fd7d1b8e3d940ad4fa7296b4e65900a3823bb19455abc384abeb8bdf5908690eba8d71b853fa0c499ea1296e3ba6116926def55cb646a82ecfdcd8d58a61e908348ab38278daa3342a5ed4473e101bd76a864d7fa1862fe31e8cbcbd6430cd656e92", 0x85}, {&(0x7f0000000280)="c24a23927771c68b539449189a458f1f759ba1463891223f8e14b5834685229e5ea4d176c6c4dcd17ba01c1501d552f35133129fa124b6f9540a530d7f3003e7aeeff4b50631e2846bd5e4960994468ecc702f51b250a74222fbc9a1a571d9195e96fdb67ac926c07f2730c2e505a79d0e2e58454c90b2d55d568d1a0ea126c12d14e4548340af6fcb127d9803", 0x8d}], 0x2, &(0x7f0000000640)=[@ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast2, @loopback}}}], 0x78}}, {{&(0x7f00000006c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000700)="273ed5", 0x3}, {&(0x7f0000000740)="3525751008bef168b825c5225cf10ad86dbfa4af6dcdb5ce19a8d28eedab5a8ccc17e24268feb247584b8a1dcce3c08f98b7007691062cf8fd3f29267897d105b6d09746e33caf6ccd33534c5a6578c784512c6601bb54c27751b8b4ee60c1e2e40e48eb5da061cd4f292dc546ab0d73bdfc6266f2241675aeae4316147a14c5c1c17770a1142fcb6236b5660def99cb7b3b2030335074b002e3c61e7f6f0d9e156f0e8735c8ca24461d", 0xaa}, {&(0x7f0000000800)="15b8d047288e61166b53141a010501543384b9e4ba3d50c9443225f2cdf8becd0f92981b6ca7816373f6a5b6824ddf3545405b84141f74758a4980fc905539ad195701bcba0fe6f254098316e12e48c2acb226b9451a4cdf07a2f8800140bc49a9b2f541e90bcf10ac402c1a4d7a71e5e09df5644c18ac187c884340d1fccc9b3649fbb53a528854d225903db402d1c5fab39d676d42615f9a3bb6ab80b704caadc12fdafe0fa861baa735ba4cd4d97b3e83058342b65d34672ae65a81de7bfe12f33953ab99", 0xc6}], 0x3}}], 0x2, 0x811) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240), 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x3f, 0x10001) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f00000000c0)=@dstopts={0x87, 0x11, [], [@calipso={0x7, 0x10, {0x5, 0x2, 0xb3d, 0xa6e, [0x4]}}, @generic={0x0, 0x13, "45b5e5b008b00867496e69d188b007b2d2ed2e"}, @enc_lim={0x4, 0x1, 0xfffffffffffffc01}, @generic={0x401, 0x49, "12beaf011bac0d09d13cfa1b7dc80a47ae4ae094079a9f50b0be6fe16b7236ee8f7d5ef31d23e8d525f8be42f8bac1ecced7c6fcb7a6ad197802beb9e84b781b2cc21e1698ac8b86f6"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x98) [ 948.618604][ T457] binder: 456:457 ioctl 40046207 0 returned -16 00:22:52 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) recvmmsg(r1, &(0x7f0000000ec0)=[{{&(0x7f0000000100)=@sco, 0x80, &(0x7f0000000540)=[{&(0x7f0000000180)=""/249, 0xf9}, {&(0x7f0000000280)=""/2, 0x2}, {&(0x7f00000002c0)=""/89, 0x59}, {&(0x7f0000000340)=""/23, 0x17}, {&(0x7f0000000380)=""/44, 0x2c}, {&(0x7f00000003c0)=""/252, 0xfc}, {&(0x7f00000004c0)=""/103, 0x67}], 0x7}, 0x7fff}, {{&(0x7f00000005c0)=@nfc, 0x80, &(0x7f0000000780)=[{&(0x7f0000000640)}, {&(0x7f0000000680)=""/177, 0xb1}, {&(0x7f0000000740)=""/57, 0x39}], 0x3, &(0x7f00000007c0)=""/206, 0xce}, 0x3479}, {{&(0x7f00000008c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000940)=""/105, 0x69}, {&(0x7f00000009c0)=""/245, 0xf5}, {&(0x7f0000000ac0)=""/56, 0x38}, {&(0x7f0000000b00)=""/37, 0x25}, {&(0x7f0000000b40)=""/9, 0x9}, {&(0x7f0000000b80)=""/61, 0x3d}, {&(0x7f0000000bc0)=""/36, 0x24}, {&(0x7f0000000c00)=""/41, 0x29}], 0x8}, 0x7}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000cc0)=""/49, 0x31}, {&(0x7f0000000d00)=""/167, 0xa7}, {&(0x7f0000000dc0)=""/111, 0x6f}], 0x3, &(0x7f0000000e80)=""/46, 0x2e}, 0x3ff}], 0x4, 0x1, &(0x7f0000000fc0)={0x0, 0x989680}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000040)=""/7, &(0x7f0000000080)=0x7) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) [ 948.641555][ T458] binder: 454:458 unknown command 536871488 [ 948.670700][ T460] binder: 456:460 unknown command 536871488 [ 948.682328][ T458] binder: 454:458 ioctl c0306201 20000440 returned -22 [ 948.703656][ T460] binder: 456:460 ioctl c0306201 20000440 returned -22 00:22:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000003f18000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 948.776567][ T457] binder: BINDER_SET_CONTEXT_MGR already set [ 948.803541][ T460] binder: 456:460 unknown command 536871488 00:22:52 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x400000, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000000100)=0x200) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) [ 948.828675][ T457] binder: 456:457 ioctl 40046207 0 returned -16 [ 948.880885][ T460] binder: 456:460 ioctl c0306201 20000440 returned -22 [ 948.924634][ T475] binder: 473:475 unknown command 536871488 [ 948.930594][ T475] binder: 473:475 ioctl c0306201 20000440 returned -22 00:22:52 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:22:52 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x2080, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="2f00000003ef6500000000000000000005000000000000000e00000000757fd4ed9fc02c421e403f7d9a42d3c7ee70b2fc"], 0x2f) r1 = fcntl$getown(r0, 0x9) ptrace$poke(0x5, r1, &(0x7f0000000100), 0x10001) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x101000, 0x0) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f00000001c0)={0x6, "5d81a0c3b4dde443977002141e0f166fdb2b004c654ef09a3a67010c986f7ee8", 0x3, 0x8, 0x0, 0x32f910, 0x100, 0x2}) 00:22:52 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x2, 0x0, 0x0}) 00:22:52 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x400000, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x1, 0x9}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000140)={r1, 0x4, 0x9, 0x100, 0x2, 0x9}, &(0x7f0000000180)=0x14) r2 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) [ 948.980803][ T479] binder: 473:479 unknown command 536871488 [ 948.993685][ T479] binder: 473:479 ioctl c0306201 20000440 returned -22 00:22:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000004018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 949.075831][ T487] binder: BINDER_SET_CONTEXT_MGR already set [ 949.109482][ T487] binder: 482:487 ioctl 40046207 0 returned -16 00:22:53 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xffffffffffff81ae, 0x80) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000080)={0x3, 0x1, 0x1000, @random="f82050216a78", 'ip_vti0\x00'}) [ 949.151514][ T493] binder: 492:493 unknown command 536871488 [ 949.158212][ T495] binder: 482:495 unknown command 536871488 [ 949.176983][ T493] binder: 492:493 ioctl c0306201 20000440 returned -22 [ 949.230863][ T495] binder: 482:495 ioctl c0306201 20000440 returned -22 [ 949.244411][ T493] binder: BINDER_SET_CONTEXT_MGR already set [ 949.282666][ T497] binder: 492:497 unknown command 536871488 [ 949.319057][ T493] binder: 492:493 ioctl 40046207 0 returned -16 00:22:53 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)="c558ef4bbc3d7b6f70dbe416d5778bd7280f4f4e1f45a2f00ab0b8d735f162d9068331e9978915ef90d45bdc8ede2dda71590939cc5235feb709406380ee5e9f3f71ff1bd71a4dd7e818b2b348a777ecaeb4dc2bcd541ee7d9c1b667fd05fc054f1a7a543ed869b61c4f6e48d37b604adc4aa58c0473341083c9c9a8438197b8472f755da8abedff1c5954be00cd103e2bf615a394a37a7ba283323110ca85392a5fb4429e03d72adc862c63bdaf79922d49025d66cde25558dba84c853b2889d9a25f3f22a3c009096250207d5e835fd0b7b9bc04e93c", 0xd7}, {&(0x7f0000000200)="0c0bb4a78ffdba2396acf776639cff192e8d34f51b89f5d2982561c35c95346dd685dd5068dc4e00501caea8c93f5084be1e0ebcf3c33be42dc2b96c369823726a8e708d6fa2028c3b58ac1cac6b586a466894ab61ad4b7c40ce410888812d9e851145c7e9d74f3fb06111788b15e8cb8fa3a49a18ec4911dbfd0dcc18f90faf40d89551b1de01ebb0534f2b9848b07f9ddb26", 0x93}, {&(0x7f00000002c0)="6d9a4cf192e63d692553889e76846a4c31cec0d2a787dfff44c64356fe71b2bf6283845aeb7b1bc5c605294cb679d8a0133e606dc202be6b218a84f9ec5d8a362000cfb10648efd1121f5305f1b7164840ab2ae48adb5783b1a5e2ebdd1cc5a36e2f87387e3672dd697b4335079fbafcef3d0f21f19f6a76c9ee7e299df5b40d067343363d5f6463835fac9b97fe8cbf04ad1e053eb94b7115678a61210b4fb096e7a4c689708d1c7d44775ab11abaf39800312a03d6f90cd867577a", 0xbc}, {&(0x7f0000000040)}, {&(0x7f0000000380)="caaf11a43cfc8dc2e2d8a024d32b4bffcfec9e07dc42d5918a86e1f6c9094afccb8b0c76dcd142fc7237792a72dd45385d973a883c88d5f4c6154f2028d9ed503ad099f11ca3f86856d3cd884411409f83e37aa7d6ce3d812f167da4", 0x5c}, {&(0x7f0000000400)="3a088c25dd859609852ac4445c10f130629e5b74395304de79b872f32e658654ef692dc2e1ea972cd7f181ffe962da519b540d8a70fe0b20816826805101f393e6372f57beecda4d7b4d266c75d40cd3e38d30e36b358e36bd39430218dee5f205e0a4c56b1a0dfafb1f8ff4232fde6dbbb5e139148941eaafc36a4a1191ba09070b85d2210fa44dbeb30f9d49952952f626c76a4a79967ecd65f4b8357a8bab51bd361440", 0xa5}], 0x6) [ 949.338876][ T502] binder: 482:502 unknown command 536871488 [ 949.358116][ T497] binder: 492:497 ioctl c0306201 20000440 returned -22 00:22:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x3, 0x0, 0x0}) [ 949.399818][ T502] binder: 482:502 ioctl c0306201 20000440 returned -22 [ 949.538523][ T507] binder: 506:507 unknown command 536871488 [ 949.562079][ T507] binder: 506:507 ioctl c0306201 20000440 returned -22 [ 949.579527][ T509] binder: 506:509 unknown command 536871488 [ 949.585540][ T509] binder: 506:509 ioctl c0306201 20000440 returned -22 00:22:53 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) socket$tipc(0x1e, 0x7, 0x0) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) r0 = semget$private(0x0, 0x2, 0x440) semctl$GETVAL(r0, 0x1, 0xc, &(0x7f0000000180)=""/184) fsopen(&(0x7f0000000040)='xfs\x00', 0x1) 00:22:53 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x3) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000080)=0x80) 00:22:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000004818000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x4, 0x0, 0x0}) [ 949.790615][ T517] binder: 516:517 unknown command 536871488 [ 949.794495][ T518] binder: BINDER_SET_CONTEXT_MGR already set 00:22:53 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) [ 949.831603][ T517] binder: 516:517 ioctl c0306201 20000440 returned -22 [ 949.832747][ T518] binder: 513:518 ioctl 40046207 0 returned -16 [ 949.862530][ T523] binder: 516:523 unknown command 536871488 [ 949.868496][ T523] binder: 516:523 ioctl c0306201 20000440 returned -22 [ 949.886075][ T518] binder: 513:518 unknown command 536871488 [ 949.915182][ T518] binder: 513:518 ioctl c0306201 20000440 returned -22 00:22:53 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x28, &(0x7f0000000040)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r0, 0x2c8}, 0xc) 00:22:53 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0xffe00, 0x5, 0x8, 0xfffffffffffffff8, 0x3}, 0x14) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x7, 0x80000) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000100)) 00:22:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000004c18000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x5, 0x0, 0x0}) [ 949.943620][ T532] binder: 513:532 unknown command 536871488 [ 949.968609][ T532] binder: 513:532 ioctl c0306201 20000440 returned -22 [ 950.063144][ T539] binder: 535:539 unknown command 536871488 [ 950.090920][ T539] binder: 535:539 ioctl c0306201 20000440 returned -22 [ 950.102130][ T544] binder: BINDER_SET_CONTEXT_MGR already set 00:22:54 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) socket$inet(0x2, 0x1, 0xfffffffffffffff7) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$VIDIOC_G_CROP(r2, 0xc01456b8, &(0x7f000000a240)) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) fchmod(r0, 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) [ 950.129098][ T544] binder: 542:544 ioctl 40046207 0 returned -16 [ 950.156042][ T547] binder: 535:547 unknown command 536871488 [ 950.162699][ T548] binder: 542:548 unknown command 536871488 [ 950.168961][ T547] binder: 535:547 ioctl c0306201 20000440 returned -22 00:22:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000006018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:54 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x6, 0x0, 0x0}) [ 950.175969][ T548] binder: 542:548 ioctl c0306201 20000440 returned -22 [ 950.199880][ T550] binder: 542:550 unknown command 536871488 [ 950.212074][ T550] binder: 542:550 ioctl c0306201 20000440 returned -22 [ 950.287011][ T555] binder: 553:555 unknown command 536871488 [ 950.319120][ T558] binder: BINDER_SET_CONTEXT_MGR already set [ 950.331817][ T555] binder: 553:555 ioctl c0306201 20000440 returned -22 [ 950.354022][ T558] binder: 557:558 ioctl 40046207 0 returned -16 [ 950.361599][ T558] binder: 557:558 unknown command 536871488 [ 950.379653][ T559] binder: 553:559 unknown command 536871488 [ 950.388918][ T558] binder: 557:558 ioctl c0306201 20000440 returned -22 [ 950.399193][ T559] binder: 553:559 ioctl c0306201 20000440 returned -22 [ 950.445765][ T558] binder: BINDER_SET_CONTEXT_MGR already set [ 950.491542][ T560] binder: 557:560 unknown command 536871488 [ 950.512562][ T558] binder: 557:558 ioctl 40046207 0 returned -16 [ 950.552781][ T560] binder: 557:560 ioctl c0306201 20000440 returned -22 00:22:54 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x3, 0x6000) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="340da63fb72f6f3f000004", @ANYRES16=r1, @ANYBLOB="000027bd7000fbdbdf2501000000000000000941000000180018000001db6574683a73797a6b616c6c6572300000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) 00:22:54 executing program 3: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040)=0x2d341fa0, 0x4) r1 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bb\xb4\x1c', 0x1) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 00:22:54 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) r0 = semget$private(0x0, 0x7, 0x1) semop(r0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x2aaaaad0) 00:22:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000006818000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:54 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x7, 0x0, 0x0}) 00:22:54 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r4, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:22:54 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x2021, 0x0, &(0x7f00000000c0)) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000080)={0x2, 0x0, 0x1016, 0xa12, 0x10000, 0x66aab6a0, 0xf6, 0x1}) [ 950.735789][ T570] binder: 568:570 unknown command 536871488 [ 950.775481][ T570] binder: 568:570 ioctl c0306201 20000440 returned -22 [ 950.808387][ T580] binder: 568:580 unknown command 536871488 [ 950.822198][ T580] binder: 568:580 ioctl c0306201 20000440 returned -22 [ 950.831115][ T581] binder: BINDER_SET_CONTEXT_MGR already set [ 950.861696][ T581] binder: 578:581 ioctl 40046207 0 returned -16 [ 950.878133][ T581] binder: 578:581 unknown command 536871488 [ 950.887888][ T581] binder: 578:581 ioctl c0306201 20000440 returned -22 00:22:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000006c18000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:54 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x8, 0x0, 0x0}) [ 950.906629][ T581] binder: BINDER_SET_CONTEXT_MGR already set [ 950.916646][ T590] binder: 578:590 unknown command 536871488 [ 950.925885][ T581] binder: 578:581 ioctl 40046207 0 returned -16 [ 950.937393][ T590] binder: 578:590 ioctl c0306201 20000440 returned -22 00:22:55 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000040)) [ 951.017864][ T593] binder: 592:593 unknown command 536871488 [ 951.027297][ T593] binder: 592:593 ioctl c0306201 20000440 returned -22 [ 951.032472][ T595] binder: BINDER_SET_CONTEXT_MGR already set [ 951.047163][ T596] binder: 592:596 unknown command 536871488 [ 951.049555][ T595] binder: 594:595 ioctl 40046207 0 returned -16 [ 951.078555][ T596] binder: 592:596 ioctl c0306201 20000440 returned -22 [ 951.095113][ C0] net_ratelimit: 18 callbacks suppressed [ 951.095138][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 951.107624][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:22:55 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x48, 0x0, 0x0}) [ 951.126087][ T595] binder: 594:595 unknown command 536871488 00:22:55 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x1, 0x40000) ioctl$TIOCGPTPEER(r1, 0x5441, 0xa73) [ 951.172230][ T595] binder: 594:595 ioctl c0306201 20000440 returned -22 [ 951.204901][ T601] binder: 594:601 unknown command 536871488 [ 951.240199][ T601] binder: 594:601 ioctl c0306201 20000440 returned -22 [ 951.294456][ T604] binder: BINDER_SET_CONTEXT_MGR already set [ 951.332324][ T604] binder: 602:604 ioctl 40046207 0 returned -16 [ 951.384500][ T608] binder: 602:608 unknown command 536871488 [ 951.413371][ T608] binder: 602:608 ioctl c0306201 20000440 returned -22 [ 951.480798][ T608] binder: 602:608 unknown command 536871488 [ 951.503078][ T608] binder: 602:608 ioctl c0306201 20000440 returned -22 00:22:55 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x600000, 0x40) syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x0, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000300)=0x7f) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) r1 = add_key(&(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000280)="49fe74554da190e80cfbc2ea01b8af34aabbbab352176969ff5e", 0x1a, 0xfffffffffffffffa) add_key(&(0x7f0000000040)='pkcs7_test\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="753685e083a107d9ffaebad3bf8dbc4d57f654500e18665223605a7f6e31cb8616f0c428f1232bea36438e2c10cc26599ebf5035ee029932ee11479dfc158620768afd0455cdf8a89fa59c23f8c5388deba7ab22e3762fc02af764f401846c12e7138c1c9836308f48d5449abab9d5d0560a2218e3521abde7adfde652f1f4b168246883565dd57454bca7c80b30deac17abc0fa7b1b", 0x96, r1) semop(0x0, &(0x7f0000000240)=[{0x0, 0xbaa}], 0x1) 00:22:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000007418000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:55 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x80400, 0x0) 00:22:55 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x4c, 0x0, 0x0}) 00:22:55 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r4, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:22:55 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x80, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000003c0)={0x1, 0x4}, 0x2) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000280)={0x0, 0x80000000, 0x100000001, 0x1ff, 0x67c, 0x8}, &(0x7f00000002c0)=0x14) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={r1, 0xffff}, 0xc) r2 = dup(r0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000340)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000000380)={r4}) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r3, 0x304, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000001}, 0x80) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) [ 951.685985][ T615] binder: 614:615 unknown command 536871488 [ 951.706907][ T615] binder: 614:615 ioctl c0306201 20000440 returned -22 [ 951.721404][ T623] binder: BINDER_SET_CONTEXT_MGR already set [ 951.728621][ T629] binder: 614:629 unknown command 536871488 [ 951.746768][ T629] binder: 614:629 ioctl c0306201 20000440 returned -22 [ 951.763061][ T623] binder: 621:623 ioctl 40046207 0 returned -16 00:22:55 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x60, 0x0, 0x0}) 00:22:55 executing program 3: r0 = socket$inet(0x2, 0x4040000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xfffffffffffffffd, 0x4000) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) [ 951.798202][ T633] binder: 621:633 unknown command 536871488 [ 951.809589][ T633] binder: 621:633 ioctl c0306201 20000440 returned -22 00:22:55 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x5e6959a0, 0x1800}, {0x0, 0x1, 0x800}], 0x38d) prctl$PR_SET_SECUREBITS(0x1c, 0x0) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) [ 951.860646][ T633] binder: 621:633 unknown command 536871488 [ 951.899570][ T633] binder: 621:633 ioctl c0306201 20000440 returned -22 [ 951.932620][ T637] binder: BINDER_SET_CONTEXT_MGR already set [ 951.977161][ T641] binder: 636:641 unknown command 536871488 [ 951.990860][ T637] binder: 636:637 ioctl 40046207 0 returned -16 [ 952.004757][ T641] binder: 636:641 ioctl c0306201 20000440 returned -22 00:22:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000007a18000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:56 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x3, 0x182) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x2000005) [ 952.079930][ T645] binder: 636:645 unknown command 536871488 [ 952.096639][ T645] binder: 636:645 ioctl c0306201 20000440 returned -22 00:22:56 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x68, 0x0, 0x0}) [ 952.215129][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 952.221645][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 952.259786][ T650] binder: 649:650 unknown command 536871488 [ 952.304678][ T650] binder: 649:650 ioctl c0306201 20000440 returned -22 [ 952.323257][ T657] binder: BINDER_SET_CONTEXT_MGR already set [ 952.363518][ T657] binder: 654:657 ioctl 40046207 0 returned -16 [ 952.370713][ T658] binder: 649:658 unknown command 536871488 [ 952.406970][ T659] binder: 654:659 unknown command 536871488 [ 952.416028][ T658] binder: 649:658 ioctl c0306201 20000440 returned -22 [ 952.439980][ T659] binder: 654:659 ioctl c0306201 20000440 returned -22 [ 952.459347][ T659] binder: 654:659 unknown command 536871488 [ 952.469326][ T659] binder: 654:659 ioctl c0306201 20000440 returned -22 00:22:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x2) dup2(r0, r1) 00:22:56 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000140)={0xa10000, 0x1, 0xee, [], &(0x7f0000000100)={0xa20929, 0x100, [], @p_u8=&(0x7f00000000c0)=0x1}}) 00:22:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="00000000000000ff18000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:56 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x2, 0x200000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000000c0)={0x3, 0x3, 0x1, 0x0, 0x5}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x7a, "3ddcd50a9fb32e76158af9ab03705554faa3be42d4bec22bc64a6fc10f3abedef83f66b567335e4b255428c373fabcc6a5bbca4531d7f5e44338cd7dc2f0186b56437acd9e5a76a3572215b8cbc80aa9b5bbb363f8d3b9fa8c4789b2d9e7f76d04a474d1047cd14f8df369c616cf87a24853ed8cd9fbd8671f78"}, &(0x7f00000001c0)=0x82) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000200)={r1, 0xffff}, &(0x7f0000000280)=0x8) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) 00:22:56 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r4, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:22:56 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x6c, 0x0, 0x0}) 00:22:56 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) socket$inet_udplite(0x2, 0x2, 0x88) [ 952.639202][ T667] binder: 665:667 unknown command 536871488 [ 952.650813][ T667] binder: 665:667 ioctl c0306201 20000440 returned -22 [ 952.683635][ T673] binder: 665:673 unknown command 536871488 [ 952.707968][ T673] binder: 665:673 ioctl c0306201 20000440 returned -22 [ 952.745551][ T678] binder: BINDER_SET_CONTEXT_MGR already set 00:22:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000002000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 952.790369][ T678] binder: 677:678 ioctl 40046207 0 returned -16 [ 952.825220][ T685] binder: 677:685 unknown command 536871488 00:22:56 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f00000000c0)=[{0x0, 0xe813, 0x1000}, {0x0, 0x6, 0x800}, {0x3, 0x7fff, 0x1800}, {0x6, 0x8000, 0x1800}, {0x0, 0x5, 0x800}], 0x5) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x100) listen(r0, 0x3ff) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) r1 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x8, 0x44000) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000080)=0x3, 0x4) r2 = semget$private(0x0, 0x1, 0x2) semop(r2, &(0x7f0000000040)=[{0x4, 0x8001, 0x800}, {0x5, 0x9, 0x1000}], 0x2) [ 952.840226][ T685] binder: 677:685 ioctl c0306201 20000440 returned -22 [ 952.869928][ T689] binder: 687:689 unknown command 536871488 00:22:56 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) [ 952.892135][ T689] binder: 687:689 ioctl c0306201 20000440 returned -22 [ 952.904704][ T678] binder: BINDER_SET_CONTEXT_MGR already set [ 952.960957][ T678] binder: 677:678 ioctl 40046207 0 returned -16 [ 952.967614][ T690] binder: 687:690 unknown command 536871488 [ 953.003084][ T690] binder: 687:690 ioctl c0306201 20000440 returned -22 [ 953.024143][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 953.031051][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 953.038788][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 953.045300][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 953.052817][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 953.059061][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:22:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000003000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:57 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x74, 0x0, 0x0}) 00:22:57 executing program 3: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x101000, 0x10) 00:22:57 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f00000003c0)={0x1, 0xffff, 0x1}) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000180)={'nat\x00', 0x0, 0x4, 0x2f, [], 0x5, &(0x7f00000000c0)=[{}, {}, {}, {}, {}], &(0x7f0000000140)=""/47}, &(0x7f0000000200)=0x78) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f00000002c0)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000380)=0x0) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x100000000, 0x101, 0x4, 0xffffffff, 0x0, 0x7fff, 0x2, 0x0, 0x100, 0x1, 0x7, 0x4, 0x3ff, 0x9, 0x95f, 0xfffffffffffffffd, 0x0, 0x5, 0x9a, 0x200, 0x7fffffff, 0x2076, 0x800, 0xa48d, 0x0, 0x0, 0x200, 0x6, 0x2, 0x9, 0x1, 0x100000000, 0x9, 0x2, 0x80, 0x81, 0x0, 0xff, 0x1, @perf_config_ext={0x3, 0x6}, 0x200, 0x1ff, 0x0, 0x0, 0x1, 0x8, 0xfff}, r1, 0x0, 0xffffffffffffff9c, 0x1) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000280)) [ 953.214469][ T705] binder: 703:705 unknown command 536871488 [ 953.246741][ T705] binder: 703:705 ioctl c0306201 20000440 returned -22 [ 953.295204][ T707] binder: BINDER_SET_CONTEXT_MGR already set [ 953.332411][ T711] binder: 703:711 unknown command 536871488 [ 953.339576][ T712] binder: 706:712 unknown command 536871488 [ 953.366424][ T711] binder: 703:711 ioctl c0306201 20000440 returned -22 [ 953.375085][ T712] binder: 706:712 ioctl c0306201 20000440 returned -22 [ 953.386522][ T707] binder: 706:707 ioctl 40046207 0 returned -16 00:22:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000004000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 953.456756][ T717] binder: 706:717 unknown command 536871488 [ 953.488045][ T717] binder: 706:717 ioctl c0306201 20000440 returned -22 [ 953.505742][ T720] binder: 719:720 unknown command 536871488 [ 953.530627][ T720] binder: 719:720 ioctl c0306201 20000440 returned -22 [ 953.546421][ T723] binder: BINDER_SET_CONTEXT_MGR already set [ 953.546464][ T724] binder: 719:724 unknown command 536871488 [ 953.552572][ T723] binder: 719:723 ioctl 40046207 0 returned -16 [ 953.564958][ T724] binder: 719:724 ioctl c0306201 20000440 returned -22 00:22:57 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) io_setup(0x3, &(0x7f0000000200)=0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x90000, 0x0) io_cancel(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0x7fc0000000, r1, &(0x7f00000002c0)="3d3734060397728e8e5846caf7e56857847044bf7be16d8f67e2191fe4e1e411cbf11016b3d3319855375064b26a9903d8e0dd944866a6b8d49e05cf67ee3c126a875adfa3be4d95e7e50198885c10d35071f4725a716d79a4216e7386b9a153027633c52cca1d4d03f23c5b20fc54ad81994efe9b85eec94489841e4f6d56da8c1a37a08b7a3ed6bcbe23b548063cb3bc5396a77555778efe9895bcfdd2daae60a80fb51cb402a6985bd9e7ba229cd246806aa4956d8f1320773f9a42ee0821cb09aacd59204d8a", 0xc8, 0x4, 0x0, 0x3}, &(0x7f0000000400)) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000100)="ba4000ed660f0021670fc71966b84800c0fe0f23c80f21f86635080070000f23f8dae9660f22640f20e06635000010000f22e066b9800000c00f326635002000000f300f3566b9b608000066b803c1bd7a66ba000000000f30", 0x59}], 0x1, 0x10, &(0x7f00000001c0)=[@efer, @efer={0x2, 0x501}], 0x2) 00:22:57 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, 0x0, 0x0) 00:22:57 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) write(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x400200007fd, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0xffffff84) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x20013a5a}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) 00:22:57 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x200, 0x0) write$P9_RAUTH(r0, &(0x7f00000000c0)={0x14, 0x67, 0x1, {0x20, 0x4, 0x8}}, 0x14) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) 00:22:57 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x7a, 0x0, 0x0}) 00:22:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000005000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 953.674125][ T738] binder: 733:738 unknown command 536871488 [ 953.686808][ T737] binder: BINDER_SET_CONTEXT_MGR already set [ 953.693317][ T738] binder: 733:738 ioctl c0306201 20000440 returned -22 [ 953.703053][ T737] binder: 736:737 ioctl 40046207 0 returned -16 [ 953.728435][ T737] binder: 736:737 unknown command 536871488 [ 953.739080][ T746] binder: 733:746 unknown command 536871488 [ 953.755243][ T737] binder: 736:737 ioctl c0306201 20000440 returned -22 [ 953.774724][ T746] binder: 733:746 ioctl c0306201 20000440 returned -22 00:22:57 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0xc2100, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000140)={0xffff}) semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) umount2(&(0x7f00000000c0)='./file0\x00', 0x8) semop(0x0, &(0x7f0000000240)=[{0x1, 0x7fff, 0x1000}], 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_WIE_ON(r1, 0x700f) [ 953.819973][ T737] binder: BINDER_SET_CONTEXT_MGR already set [ 953.845343][ T750] binder: 736:750 unknown command 536871488 00:22:57 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x300, 0x0, 0x0}) [ 953.881396][ T737] binder: 736:737 ioctl 40046207 0 returned -16 [ 953.920011][ T750] binder: 736:750 ioctl c0306201 20000440 returned -22 00:22:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000006000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 954.041305][ T757] binder: 754:757 unknown command 536871488 [ 954.062309][ T757] binder: 754:757 ioctl c0306201 20000440 returned -22 [ 954.094765][ T760] binder: BINDER_SET_CONTEXT_MGR already set [ 954.101019][ T760] binder: 759:760 ioctl 40046207 0 returned -16 [ 954.109081][ T760] binder: 759:760 unknown command 536871488 [ 954.116405][ T760] binder: 759:760 ioctl c0306201 20000440 returned -22 [ 954.127641][ T760] binder: BINDER_SET_CONTEXT_MGR already set [ 954.136222][ T762] binder: 754:762 unknown command 536871488 00:22:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000007000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:58 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x500, 0x0, 0x0}) [ 954.143102][ T761] binder: 759:761 unknown command 536871488 [ 954.149205][ T762] binder: 754:762 ioctl c0306201 20000440 returned -22 [ 954.156843][ T760] binder: 759:760 ioctl 40046207 0 returned -16 [ 954.164711][ T761] binder: 759:761 ioctl c0306201 20000440 returned -22 [ 954.235815][ T765] binder: 764:765 unknown command 536871488 [ 954.242170][ T765] binder: 764:765 ioctl c0306201 20000440 returned -22 [ 954.254256][ T766] binder: 764:766 unknown command 536871488 [ 954.260433][ T766] binder: 764:766 ioctl c0306201 20000440 returned -22 00:22:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000008000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 954.316062][ T768] binder: 767:768 unknown command 536871488 [ 954.322176][ T768] binder: 767:768 ioctl c0306201 20000440 returned -22 [ 954.341482][ T770] binder: 767:770 unknown command 536871488 [ 954.347732][ T770] binder: 767:770 ioctl c0306201 20000440 returned -22 [ 954.424526][ T772] binder: 771:772 unknown command 536871488 [ 954.430760][ T772] binder: 771:772 ioctl c0306201 20000440 returned -22 [ 954.443884][ T773] binder: 771:773 unknown command 536871488 [ 954.456570][ T773] binder: 771:773 ioctl c0306201 20000440 returned -22 00:22:58 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'bond_slave_0\x00', 0x1000}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f00000001c0)={0x0, 0x0, {0x5, 0x0, 0x301f, 0xb, 0x7, 0x7, 0x3, 0x6}}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000280)=""/52) write$P9_RXATTRCREATE(r2, &(0x7f0000000140)={0x7, 0x21, 0x2}, 0x7) 00:22:58 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x600, 0x0, 0x0}) 00:22:58 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, 0x0, 0x0) 00:22:58 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000f00)) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:22:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000048000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 954.704719][ T783] binder: 778:783 unknown command 536871488 [ 954.710460][ T780] binder: BINDER_SET_CONTEXT_MGR already set [ 954.722546][ T780] binder: 779:780 ioctl 40046207 0 returned -16 [ 954.732295][ T783] binder: 778:783 ioctl c0306201 20000440 returned -22 [ 954.773145][ T780] binder: 779:780 unknown command 536871488 [ 954.775253][ T789] binder: 778:789 unknown command 536871488 [ 954.790516][ T789] binder: 778:789 ioctl c0306201 20000440 returned -22 [ 954.807902][ T780] binder: 779:780 ioctl c0306201 20000440 returned -22 00:22:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="00000000004c000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 954.851205][ T780] binder: BINDER_SET_CONTEXT_MGR already set [ 954.888486][ T793] binder: 779:793 unknown command 536871488 00:22:58 executing program 2: semop(0x0, &(0x7f0000000040)=[{0x10000000}], 0x6) semop(0x0, &(0x7f0000000000), 0x2d86) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) [ 954.919401][ T780] binder: 779:780 ioctl 40046207 0 returned -16 [ 954.938497][ T793] binder: 779:793 ioctl c0306201 20000440 returned -22 [ 954.994210][ T799] binder: 798:799 unknown command 536871488 [ 955.062241][ T799] binder: 798:799 ioctl c0306201 20000440 returned -22 00:22:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x700, 0x0, 0x0}) [ 955.152338][ T803] binder: 798:803 unknown command 536871488 [ 955.158455][ T803] binder: 798:803 ioctl c0306201 20000440 returned -22 00:22:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000060000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:59 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x54500, 0x53) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{}, {0x20, '-self'}, {}, {}, {0x20, '[$wlan0'}], 0xa, "4965bbc95da69a0db3bdc0ea7325f0e0a75b9618"}, 0x30) [ 955.314178][ T807] binder: 806:807 unknown command 536871488 [ 955.362298][ T807] binder: 806:807 ioctl c0306201 20000440 returned -22 [ 955.395598][ T809] binder: BINDER_SET_CONTEXT_MGR already set [ 955.442610][ T811] binder: 806:811 unknown command 536871488 [ 955.448652][ T809] binder: 808:809 ioctl 40046207 0 returned -16 [ 955.491476][ T811] binder: 806:811 ioctl c0306201 20000440 returned -22 [ 955.499149][ T812] binder: 808:812 unknown command 536871488 [ 955.512317][ T812] binder: 808:812 ioctl c0306201 20000440 returned -22 00:22:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x2000, 0x0, 0x0}) 00:22:59 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, 0x0, 0x0) [ 955.546377][ T809] binder: BINDER_SET_CONTEXT_MGR already set [ 955.559983][ T812] binder: 808:812 unknown command 536871488 [ 955.567751][ T809] binder: 808:809 ioctl 40046207 0 returned -16 [ 955.574965][ T812] binder: 808:812 ioctl c0306201 20000440 returned -22 00:22:59 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x20) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) semop(0x0, &(0x7f0000000000), 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x2, 0x2) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x6) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000ff9000/0x1000)=nil}) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x800000005) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000000)=@generic={0x1, 0x1, 0x4}) 00:22:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000068000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:22:59 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x800, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) futimesat(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={{}, {r2, r3/1000+30000}}) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000340)=""/242, &(0x7f0000000440)=0xf2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) getresuid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f00000001c0)) setxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000200)=@v3={0x3000000, [{0x100000001, 0x7ff}, {0x1d5, 0x80000001}], r4}, 0x18, 0x0) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)=@known='security.capability\x00', 0x0, 0x0) 00:22:59 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) r0 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x1000, 0x400240) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000100)=0x4) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {0x100000000000}], 0x2) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000180)=""/11) clone(0x10000, &(0x7f0000000280)="16818619982f3358d7d21d86580a7001faa113b3806312510277fb45dba5ba18d5d82bdfbecfd7ce9efc9fc5cdc8eda251481d176f7eb0a356844aefb4525be64790aeb15b1e580a65966872a187a5e2c1c51d35407f90f262cd59bcf4bade8c15b12b558f652ffbda661372558223e97fd747500c3da922b7a5be3434dc762bf6d7442f043ec708fc3cbb712d7d28881c96f6f512bce8dbfa53a6442693f55c823cfa1590fa1a678d29d9c203edea37000282be49d4fdff7b7515cefa376cfeafbab738185e", &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000380)="dd32c0f0c91d64911517a2a7") ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000000140)=0x6000) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) [ 955.638147][ T822] binder: 821:822 unknown command 536871488 [ 955.660237][ T822] binder: 821:822 ioctl c0306201 20000440 returned -22 [ 955.710815][ T824] binder: 821:824 unknown command 536871488 [ 955.770674][ T824] binder: 821:824 ioctl c0306201 20000440 returned -22 [ 955.791538][ T830] binder: BINDER_SET_CONTEXT_MGR already set 00:22:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x3f00, 0x0, 0x0}) [ 955.845908][ T830] binder: 828:830 ioctl 40046207 0 returned -16 [ 955.897510][ T838] binder: 828:838 unknown command 536871488 00:22:59 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x800, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) futimesat(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={{}, {r2, r3/1000+30000}}) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000340)=""/242, &(0x7f0000000440)=0xf2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) getresuid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f00000001c0)) setxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000200)=@v3={0x3000000, [{0x100000001, 0x7ff}, {0x1d5, 0x80000001}], r4}, 0x18, 0x0) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)=@known='security.capability\x00', 0x0, 0x0) [ 955.947385][ T845] binder: 843:845 unknown command 536871488 [ 955.959580][ T845] binder: 843:845 ioctl c0306201 20000440 returned -22 [ 955.979120][ T838] binder: 828:838 ioctl c0306201 20000440 returned -22 [ 955.986509][ T846] binder: 843:846 unknown command 536871488 00:23:00 executing program 2: semop(0x0, &(0x7f0000000100)=[{0x3, 0x1fe00000, 0x1000}, {0xd020813652e8b82d, 0x8, 0x800}, {0x0, 0x1000, 0x1000}, {0x0, 0x8, 0x1000}, {0x1, 0xff, 0x800}], 0x5) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) r0 = semget$private(0x0, 0x7, 0xc) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)=[0x1]) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xf9, 0x0) write$P9_RSYMLINK(r1, &(0x7f00000000c0)={0x14, 0x11, 0x2, {0x33, 0x2, 0x3}}, 0x14) [ 956.042698][ T846] binder: 843:846 ioctl c0306201 20000440 returned -22 [ 956.063701][ T850] binder: 828:850 unknown command 536871488 [ 956.091514][ T850] binder: 828:850 ioctl c0306201 20000440 returned -22 00:23:00 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x4000, 0x0, 0x0}) 00:23:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="00000000006c000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:23:00 executing program 3: r0 = socket(0x10, 0x20000000802, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000075c0)={{{@in6=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6}}, &(0x7f00000076c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000007700)={{{@in=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000007800)=0xe8) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000007840)={@remote, @loopback, 0x0}, &(0x7f0000007880)=0xc) sendmsg$inet(r0, &(0x7f0000007b00)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000040)="1af08cb1824fad033331b5898946e1525aaaccc2735f2da1f9a61684ba81a2bc85fa9fba702b4aaa81084f4c602476cbec64577000d7c11303", 0x39}, {&(0x7f0000000080)="d86c2ab23ea93f1cdf3a5fdd", 0xc}], 0x2, &(0x7f00000078c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @dev={0xac, 0x14, 0x14, 0x19}}}}, @ip_retopts={{0x90, 0x0, 0x7, {[@cipso={0x86, 0x11, 0x101, [{0x6, 0x4, "c974"}, {0x7, 0x7, "86348002c6"}]}, @timestamp={0x44, 0x34, 0x4, 0x3, 0xffff, [{[@empty], 0x80}, {[@remote], 0x6}, {[@broadcast], 0x2}, {[@loopback], 0x3}, {[], 0xea}, {[], 0x21}, {[], 0x200}, {[], 0xb5f}]}, @ssrr={0x89, 0x13, 0x8000000000000000, [@loopback, @rand_addr=0xff, @local, @dev={0xac, 0x14, 0x14, 0x27}]}, @ra={0x94, 0x6, 0x1f}, @ssrr={0x89, 0x1b, 0x66, [@rand_addr=0x100000000, @multicast2, @broadcast, @broadcast, @broadcast, @rand_addr=0x100000000]}, @ra={0x94, 0x6}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @rand_addr=0x8}}}, @ip_retopts={{0x104, 0x0, 0x7, {[@lsrr={0x83, 0x27, 0x5, [@local, @remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x23}, @broadcast, @broadcast, @loopback, @multicast1, @remote]}, @noop, @timestamp={0x44, 0x28, 0x5, 0x3, 0x10000, [{[], 0x2}, {[@rand_addr=0x3], 0x2}, {[@initdev={0xac, 0x1e, 0x1, 0x0}], 0xaedd}, {[@dev={0xac, 0x14, 0x14, 0x22}], 0x100000000}, {[@dev={0xac, 0x14, 0x14, 0x1c}], 0xbe03}]}, @cipso={0x86, 0x7b, 0x2, [{0x0, 0xb, "8e52af2de1795767a4"}, {0x1, 0xf, "1b52ca0ee4a62fc5c2e1ed7ffc"}, {0x0, 0x4, "e952"}, {0x1, 0x8, "258961be0696"}, {0x1, 0xd, "105a446aaf04ef28262990"}, {0x6, 0xd, "907a04ad8421edbd9f6504"}, {0x7, 0xb, "a213ac21f9399c3102"}, {0x5, 0x11, "e86b82358b60d758f829280dde2bd2"}, {0x7, 0x7, "e8ff753b10"}, {0x5, 0x12, "10ca07a818fa16cc7e6ee62548846f16"}]}, @rr={0x7, 0x27, 0x8, [@rand_addr=0x2, @multicast2, @rand_addr=0x7fff, @empty, @empty, @rand_addr=0x4, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xa}]}]}}}], 0x240}, 0x4010) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x5, 0x0, 0x3ff, 0x81, 0x0}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={r4, 0x3}, 0x8) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) write(r0, &(0x7f0000000340)="240000001a0025e00018000400edfc0e800000000000000000000000080002ba57310100", 0x24) [ 956.305458][ T856] binder: 855:856 unknown command 536871488 00:23:00 executing program 2: munlockall() semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) [ 956.372060][ C1] net_ratelimit: 12 callbacks suppressed [ 956.372068][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 956.383539][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 956.384807][ T856] binder: 855:856 ioctl c0306201 20000440 returned -22 [ 956.418214][ T863] binder: BINDER_SET_CONTEXT_MGR already set [ 956.442022][ T865] binder: 855:865 unknown command 536871488 [ 956.448878][ T858] binder: 857:858 unknown command 536871488 00:23:00 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080), 0x41) [ 956.471001][ T865] binder: 855:865 ioctl c0306201 20000440 returned -22 [ 956.478379][ T858] binder: 857:858 ioctl c0306201 20000440 returned -22 [ 956.505739][ T863] binder: 857:863 ioctl 40046207 0 returned -16 [ 956.516678][ T863] binder: 857:863 unknown command 536871488 [ 956.532611][ T863] binder: 857:863 ioctl c0306201 20000440 returned -22 00:23:00 executing program 5: getrlimit(0xf, &(0x7f0000000040)) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) 00:23:00 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7fc, 0x100001fd) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x7ff, 0x4) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000280)='exofs\x00\x1e\xa0\x1d\x97\x1a\xd7\r\x1e\x10\xa8\x15\xf2\x02\x9c\xc6m|`\xbf7J\xe1.\ne\r]v\x16\xf5,\x8b\"X\xc1\x19\xeb\x8ctf\xa43U\x8d\xab\xefIg\x01\xe82\x9e%\xadSb)\xb4\x90\xc80x0) write$cgroup_pid(r0, &(0x7f00000003c0)=r3, 0x12) 00:23:00 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x4800, 0x0, 0x0}) 00:23:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000074000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:23:00 executing program 2: r0 = semget(0x2, 0x2, 0x44) semop(r0, &(0x7f0000000000)=[{0x4, 0xffffffffffffffff, 0x1800}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x17ff}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x2000000000, 0x1000}], 0x1) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x101040, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000002c0)=0x441, 0xfffffffffffffed0) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x606, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x280, 0x0) ioctl$CAPI_SET_FLAGS(r3, 0x80044324, &(0x7f0000000300)) [ 956.713576][ T883] binder: 882:883 unknown command 536871488 [ 956.727415][ T883] binder: 882:883 ioctl c0306201 20000440 returned -22 [ 956.746605][ T881] binder: BINDER_SET_CONTEXT_MGR already set [ 956.759692][ T887] binder: 882:887 unknown command 536871488 [ 956.775469][ T881] binder: 880:881 ioctl 40046207 0 returned -16 [ 956.789276][ T887] binder: 882:887 ioctl c0306201 20000440 returned -22 [ 956.827744][ T892] binder: 880:892 unknown command 536871488 [ 956.847940][ T892] binder: 880:892 ioctl c0306201 20000440 returned -22 00:23:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="00000000007a000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 956.888152][ T881] binder: BINDER_SET_CONTEXT_MGR already set [ 956.900016][ T892] binder: 880:892 unknown command 536871488 [ 956.908857][ T881] binder: 880:881 ioctl 40046207 0 returned -16 [ 956.919958][ T892] binder: 880:892 ioctl c0306201 20000440 returned -22 00:23:00 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, 0x0, 0x0) 00:23:00 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x4c00, 0x0, 0x0}) [ 957.006843][ T899] binder: 898:899 unknown command 536871488 [ 957.037514][ T899] binder: 898:899 ioctl c0306201 20000440 returned -22 [ 957.093906][ T904] binder: BINDER_SET_CONTEXT_MGR already set [ 957.105886][ T905] binder: 898:905 unknown command 536871488 [ 957.136755][ T904] binder: 902:904 ioctl 40046207 0 returned -16 [ 957.151821][ T905] binder: 898:905 ioctl c0306201 20000440 returned -22 [ 957.172075][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 957.177888][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 957.183752][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 957.189592][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 957.195423][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 957.201282][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 957.240554][ T904] binder: 902:904 unknown command 536871488 00:23:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000030018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 957.306454][ T904] binder: 902:904 ioctl c0306201 20000440 returned -22 [ 957.332076][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 957.337982][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 957.360576][ T907] binder: 902:907 unknown command 536871488 [ 957.398065][ T909] binder: BINDER_SET_CONTEXT_MGR already set 00:23:01 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080), 0x41) [ 957.407217][ T909] binder: 908:909 ioctl 40046207 0 returned -16 [ 957.414068][ T907] binder: 902:907 ioctl c0306201 20000440 returned -22 [ 957.433414][ T909] binder: 908:909 unknown command 536871488 [ 957.454337][ T909] binder: 908:909 ioctl c0306201 20000440 returned -22 00:23:01 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x6000, 0x0, 0x0}) 00:23:01 executing program 3: timer_create(0xb, 0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) r1 = accept4$inet6(0xffffffffffffff9c, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000100)=0x1c, 0x80000) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x7f, @empty, 0x2}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000004a000)={{}, {0x0, r0+10000000}}, 0x0) timer_gettime(0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x6000, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000001c0)={0x3, "0d14a40a4cd568850d84342010376f853187873ef917674df4be43eaa2926007", 0x3, 0x86e4, 0x4, 0x1ff17ff, 0x2}) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@broadcast, @dev={0xac, 0x14, 0x14, 0x25}, @loopback}, 0xc) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000240)) [ 957.476478][ T909] binder: BINDER_SET_CONTEXT_MGR already set [ 957.485041][ T910] binder: 908:910 unknown command 536871488 [ 957.500038][ T909] binder: 908:909 ioctl 40046207 0 returned -16 [ 957.513857][ T910] binder: 908:910 ioctl c0306201 20000440 returned -22 [ 957.582864][ T917] binder: 916:917 unknown command 536871488 [ 957.613390][ T917] binder: 916:917 ioctl c0306201 20000440 returned -22 00:23:01 executing program 5: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000140)={{0x3, 0x6b, 0x6, 0x32a}, 'syz1\x00', 0x4}) semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001, 0x1000}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) prctl$PR_CAPBSET_READ(0x17, 0x23) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x40000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000001340)={{0x6, 0x4, 0x1000, 0x101, 'syz0\x00', 0x8000}, 0x0, [0xfff, 0x3, 0x772, 0x1, 0x6d3, 0x6, 0x9, 0x5, 0x80, 0x2, 0x24, 0x76, 0x4, 0xf32, 0xf400000000000000, 0x80000001, 0x7, 0x8, 0x6, 0x1, 0x1000, 0xff, 0x4, 0x3f, 0x7, 0xfb0a, 0x7fffffff, 0x7ff, 0x1, 0x7, 0x7, 0x1, 0x5, 0xd6d, 0x5, 0xffffffffffffffcb, 0x9, 0x401, 0x3, 0x4, 0x2, 0x1, 0x6, 0x80, 0x30e9, 0x0, 0x4, 0x8, 0x7, 0x6, 0x5, 0x9, 0x0, 0x5, 0x5, 0x2, 0x0, 0x2, 0xeba000000000000, 0x4, 0x5, 0x100000000, 0xf5d, 0x2, 0x9, 0x6, 0xfffffffffffffbff, 0x4, 0x6, 0x7f, 0x2, 0x5, 0x0, 0x1f, 0x7, 0x8, 0x8, 0x0, 0xd23, 0xf1d5, 0x9, 0x3f, 0x9, 0x6, 0x0, 0x6, 0x2010, 0x7, 0x8000, 0x5, 0x10001, 0x7, 0x7fffffff, 0x6, 0x0, 0x20, 0xe3dd, 0x3e, 0x0, 0x40, 0x2, 0xfffffffffffff800, 0x8, 0x1, 0xfffffffffffffe01, 0x8, 0xfffffffffffff001, 0x3ff, 0x9, 0x100000001, 0x0, 0x1, 0x1, 0x90, 0x795, 0x2, 0x6, 0x6, 0xffffffff80000000, 0x9, 0xfffffffffffffffe, 0x3, 0x4, 0xff, 0x7, 0x3ff, 0xa2, 0xffffffffffffffc0], {0x77359400}}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x103145, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000280)=""/177, &(0x7f00000001c0)=0xb1) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000100)={0x2, 0x80000000000}) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000340)=""/4096) 00:23:01 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket(0x200000000000011, 0x803, 0x0) io_setup(0x7, &(0x7f00000000c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000180)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000280)="a8", 0x1}]) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000000), 0x4) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x2000, 0x0) ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, &(0x7f0000000080)=0xa4fd) 00:23:01 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x1000000, 0x7fff, 0x1000}], 0x1) r0 = semget(0x2, 0x3, 0x24) semctl$IPC_INFO(r0, 0x2, 0x3, &(0x7f0000000280)=""/4096) 00:23:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000050018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 957.709299][ T923] binder: 916:923 unknown command 536871488 [ 957.734262][ T923] binder: 916:923 ioctl c0306201 20000440 returned -22 [ 957.788345][ T934] binder: BINDER_SET_CONTEXT_MGR already set [ 957.810375][ T934] binder: 932:934 ioctl 40046207 0 returned -16 00:23:01 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x6800, 0x0, 0x0}) [ 957.839663][ T939] binder: 932:939 unknown command 536871488 [ 957.849166][ T939] binder: 932:939 ioctl c0306201 20000440 returned -22 [ 957.865217][ T934] binder: BINDER_SET_CONTEXT_MGR already set [ 957.881470][ T939] binder: 932:939 unknown command 536871488 00:23:01 executing program 3: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uinput\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) epoll_create(0x4) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000140)) ioctl(r1, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f00000001c0)={0x400000001b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40000}, 0x0, 0x0) 00:23:01 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x280, 0x0) ioctl$VT_RELDISP(r0, 0x5605) semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000040)=[{0x1, 0x2, 0x1800}], 0x1) [ 957.893348][ T934] binder: 932:934 ioctl 40046207 0 returned -16 [ 957.923301][ T939] binder: 932:939 ioctl c0306201 20000440 returned -22 00:23:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000060018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 958.027426][ T943] binder: 941:943 unknown command 536871488 [ 958.042275][ T943] binder: 941:943 ioctl c0306201 20000440 returned -22 [ 958.086175][ T951] binder: 941:951 unknown command 536871488 [ 958.106116][ T951] binder: 941:951 ioctl c0306201 20000440 returned -22 00:23:02 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0xfffffffffffffffd) getpid() socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x14000, 0x0) listen(r0, 0x80000000000000bd) ioctl$VT_DISALLOCATE(r1, 0x5608) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x4400, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_RESERVED(r3, 0x5601, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) close(r2) [ 958.135190][ T954] binder: BINDER_SET_CONTEXT_MGR already set [ 958.157902][ T954] binder: 952:954 ioctl 40046207 0 returned -16 [ 958.201188][ T957] binder: 952:957 unknown command 536871488 [ 958.237317][ T957] binder: 952:957 ioctl c0306201 20000440 returned -22 [ 958.300171][ T957] binder: 952:957 unknown command 536871488 [ 958.309812][ T957] binder: 952:957 ioctl c0306201 20000440 returned -22 00:23:02 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080), 0x41) 00:23:02 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x6c00, 0x0, 0x0}) 00:23:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000070018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 958.398210][ T963] binder: 962:963 unknown command 536871488 [ 958.431527][ T963] binder: 962:963 ioctl c0306201 20000440 returned -22 [ 958.459366][ T968] binder: 967:968 unknown command 536871488 [ 958.471053][ T969] binder: 962:969 unknown command 536871488 [ 958.471157][ T963] binder: BINDER_SET_CONTEXT_MGR already set [ 958.487806][ T968] binder: 967:968 ioctl c0306201 20000440 returned -22 [ 958.505849][ T963] binder: 962:963 ioctl 40046207 0 returned -16 [ 958.517251][ T969] binder: 962:969 ioctl c0306201 20000440 returned -22 [ 958.531023][ T971] binder: 967:971 unknown command 536871488 [ 958.570682][ T971] binder: 967:971 ioctl c0306201 20000440 returned -22 00:23:02 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x80802, 0x0) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f00000000c0)={@rand_addr, @broadcast, 0x0}, &(0x7f0000000100)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000280)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@empty, 0x4e24, 0x0, 0x4e20, 0x5, 0x2, 0x80, 0x20, 0x3a, r1, r2}, {0x5, 0x8000, 0xe800, 0x8001, 0x2, 0x50619184, 0x4, 0xa888}, {0x2, 0xfffffffffffffff7, 0x9, 0x20}, 0x666, 0x6e6bb3, 0x0, 0x0, 0x2, 0x3}, {{@in6=@remote, 0x4d6, 0xff}, 0x0, @in=@broadcast, 0x3503, 0x3, 0x3, 0x3f11, 0x3155, 0x6, 0x3}}, 0xe8) semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) 00:23:02 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0xfffffffffffffffd) getpid() socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x14000, 0x0) listen(r0, 0x80000000000000bd) ioctl$VT_DISALLOCATE(r1, 0x5608) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x4400, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_RESERVED(r3, 0x5601, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) close(r2) 00:23:02 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x7400, 0x0, 0x0}) 00:23:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000200018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 958.710245][ T980] binder: 979:980 unknown command 536871488 [ 958.730943][ T982] binder: BINDER_SET_CONTEXT_MGR already set [ 958.777609][ T982] binder: 978:982 ioctl 40046207 0 returned -16 [ 958.778861][ T985] binder: 978:985 unknown command 536871488 [ 958.803019][ T980] binder: 979:980 ioctl c0306201 20000440 returned -22 [ 958.819506][ T985] binder: 978:985 ioctl c0306201 20000440 returned -22 00:23:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x20) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x180, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x40}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000140)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x16d) [ 958.857636][ T986] binder: 979:986 unknown command 536871488 [ 958.879759][ T986] binder: 979:986 ioctl c0306201 20000440 returned -22 [ 958.917148][ T985] binder: 978:985 unknown command 536871488 [ 958.956403][ T982] binder: BINDER_SET_CONTEXT_MGR already set 00:23:02 executing program 2: semget$private(0x0, 0x0, 0x684) semget(0x3, 0x1, 0x1) r0 = semget(0x0, 0x1, 0x80) semop(r0, &(0x7f0000000340)=[{0x5, 0x4cc31410, 0x1800}, {0x4, 0x7, 0x1000}, {0x0, 0xffff}], 0x3) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$RTC_AIE_OFF(r1, 0x7002) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x7fffffff, 0x40000) r3 = semget$private(0x0, 0x1, 0x0) semop(r3, &(0x7f00000000c0)=[{0x2, 0x5, 0x1000}, {0x0, 0x3, 0x800}], 0x2) r4 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0xfffffffffffffffc, 0x8000, 0x1000}], 0x2aaaaaaaaaaaab1f) r5 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0xfffffffffffffffa, 0x101080) ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0x40305652, &(0x7f0000000180)={0xfffffffffffffbff, 0x4, 0x7, 0x7dda, 0x6, 0x3, 0x81}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000280)={&(0x7f00000001c0)=[0x0], 0x1, 0x7, 0x3, 0x77c, 0xffffffffffffffe0, 0x3ff, {0x0, 0x6, 0x59, 0x8000, 0x2, 0x9ff, 0xff, 0x8000, 0x80, 0x4, 0x6, 0x1ff, 0x7fff, 0x4, "486e550d4194d47f61d00b323b4bede2fca786b4446afdf550b027e5db6ee129"}}) 00:23:03 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000080)={0x0, 0x561, 0x40, 0x1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x4) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, &(0x7f00000001c0)=0x154) r3 = socket$packet(0x11, 0x3, 0x300) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 958.990671][ T982] binder: 978:982 ioctl 40046207 0 returned -16 [ 959.025033][ T985] binder: 978:985 ioctl c0306201 20000440 returned -22 00:23:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0000000000003f0018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:23:03 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x7a00, 0x0, 0x0}) [ 959.178688][ T1003] binder: 1001:1003 unknown command 536871488 [ 959.219791][ T1003] binder: 1001:1003 ioctl c0306201 20000440 returned -22 00:23:03 executing program 1 (fault-call:13 fault-nth:0): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) [ 959.270531][ T1003] binder: BINDER_SET_CONTEXT_MGR already set [ 959.272644][ T1006] binder: 1005:1006 unknown command 536871488 [ 959.300641][ T1006] binder: 1005:1006 ioctl c0306201 20000440 returned -22 [ 959.307136][ T1007] binder: 1001:1007 unknown command 536871488 [ 959.326408][ T1010] binder: 1005:1010 unknown command 536871488 [ 959.332897][ T1003] binder: 1001:1003 ioctl 40046207 0 returned -16 [ 959.347341][ T1010] binder: 1005:1010 ioctl c0306201 20000440 returned -22 00:23:03 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0xff00, 0x0, 0x0}) [ 959.379789][ T1007] binder: 1001:1007 ioctl c0306201 20000440 returned -22 00:23:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000400018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 959.431914][ T1009] FAULT_INJECTION: forcing a failure. [ 959.431914][ T1009] name failslab, interval 1, probability 0, space 0, times 0 [ 959.454936][ T1009] CPU: 1 PID: 1009 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 959.462788][ T1009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 959.472955][ T1009] Call Trace: [ 959.476271][ T1009] dump_stack+0x172/0x1f0 [ 959.480620][ T1009] should_fail.cold+0xa/0x15 [ 959.485233][ T1009] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 959.491060][ T1009] ? ___might_sleep+0x163/0x280 [ 959.495947][ T1009] __should_failslab+0x121/0x190 [ 959.500720][ T1015] binder: 1014:1015 unknown command 536871488 [ 959.500902][ T1009] should_failslab+0x9/0x14 [ 959.500925][ T1009] kmem_cache_alloc_node+0x261/0x710 [ 959.510550][ T1015] binder: 1014:1015 ioctl c0306201 20000440 returned -22 [ 959.511473][ T1009] ? lockdep_hardirqs_on+0x418/0x5d0 [ 959.511492][ T1009] ? retint_kernel+0x2b/0x2b [ 959.511511][ T1009] ? trace_hardirqs_on_caller+0x6a/0x220 [ 959.511538][ T1009] __alloc_skb+0xd5/0x5e0 [ 959.528192][ T1016] binder: 1014:1016 unknown command 536871488 [ 959.529090][ T1009] ? skb_trim+0x190/0x190 [ 959.529108][ T1009] ? retint_kernel+0x2b/0x2b [ 959.529136][ T1009] sock_wmalloc+0xd9/0x120 [ 959.529155][ T1009] pppol2tp_sendmsg+0x23b/0x6b0 [ 959.529173][ T1009] ? apparmor_socket_sendmsg+0x2a/0x30 [ 959.529191][ T1009] ? pppol2tp_getname+0xd10/0xd10 [ 959.537117][ T1016] binder: 1014:1016 ioctl c0306201 20000440 returned -22 [ 959.539385][ T1009] sock_sendmsg+0xd7/0x130 [ 959.539404][ T1009] ___sys_sendmsg+0x3e2/0x920 [ 959.539424][ T1009] ? copy_msghdr_from_user+0x430/0x430 [ 959.539447][ T1009] ? lock_downgrade+0x880/0x880 [ 959.539464][ T1009] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 959.539484][ T1009] ? kasan_check_read+0x11/0x20 [ 959.580063][ T1013] binder: 1012:1013 unknown command 536871488 [ 959.585437][ T1009] ? __fget+0x381/0x550 [ 959.585460][ T1009] ? ksys_dup3+0x3e0/0x3e0 [ 959.585482][ T1009] ? __lockdep_free_key_range+0x120/0x120 [ 959.585500][ T1009] ? __fget_light+0x1a9/0x230 [ 959.585513][ T1009] ? __fdget+0x1b/0x20 [ 959.585530][ T1009] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 959.585546][ T1009] ? sockfd_lookup_light+0xcb/0x180 [ 959.585565][ T1009] __sys_sendmmsg+0x1bf/0x4d0 [ 959.585584][ T1009] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 959.585608][ T1009] ? lockdep_hardirqs_on+0x418/0x5d0 [ 959.585622][ T1009] ? retint_kernel+0x2b/0x2b [ 959.585642][ T1009] ? trace_hardirqs_on_caller+0x6a/0x220 [ 959.603504][ T1013] binder: 1012:1013 ioctl c0306201 20000440 returned -22 [ 959.605100][ T1009] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 959.605126][ T1009] ? retint_kernel+0x2b/0x2b [ 959.605154][ T1009] __x64_sys_sendmmsg+0x9d/0x100 [ 959.605174][ T1009] do_syscall_64+0xfd/0x680 [ 959.634686][ T1017] binder: 1012:1017 unknown command 536871488 [ 959.636574][ T1009] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 959.636589][ T1009] RIP: 0033:0x459519 [ 959.636606][ T1009] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 959.636615][ T1009] RSP: 002b:00007ff0f5cbbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 959.636630][ T1009] RAX: ffffffffffffffda RBX: 00007ff0f5cbbc90 RCX: 0000000000459519 [ 959.636639][ T1009] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000006 [ 959.636646][ T1009] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 959.636659][ T1009] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff0f5cbc6d4 [ 959.645015][ T1017] binder: 1012:1017 ioctl c0306201 20000440 returned -22 [ 959.645372][ T1009] R13: 00000000004c6af9 R14: 00000000004dbd80 R15: 0000000000000007 00:23:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000480018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:23:03 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x1000000, 0x0, 0x0}) 00:23:03 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'syzkaller0\x00', 0x200}) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x0) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000280)={{0x7, 0x80000000, 0x800, 0x0, 0x2, 0x800}, 0x3aff3896, 0x7, 0x9, 0x4, 0x3, "1c9771ec4f9d44481793ac6caec5c60e33c555c0845c61f7a6c04586f0b929b9ea2eff41471578253d3877acd7e8b3043b5dd255dcf80150a37a6a39642b72af518e590e886d7861b94019ee4aa4d928c9b6f071d54486116dd4da082304aa1b054fee760c81fe28e1f20b669d79c9c1843098c75fe74de029641b2984a3e51b"}) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x40, 0x0) getpeername$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) connect$packet(r1, &(0x7f0000000180)={0x11, 0x3, r2, 0x1, 0x9, 0x6, @remote}, 0x14) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f00000000c0)) 00:23:03 executing program 1 (fault-call:13 fault-nth:1): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) [ 959.887131][ T1021] binder: 1019:1021 unknown command 536871488 [ 959.902585][ T1025] binder: BINDER_SET_CONTEXT_MGR already set [ 959.909208][ T1021] binder: 1019:1021 ioctl c0306201 20000440 returned -22 [ 959.923037][ T1025] binder: 1020:1025 ioctl 40046207 0 returned -16 [ 959.931299][ T1025] binder: 1020:1025 unknown command 536871488 00:23:03 executing program 3: r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sysinfo(&(0x7f0000000000)=""/22) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000080)) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0xc3f, 0x8000, 0x5, 0x2, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r2}, &(0x7f00000001c0)=0x8) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@H\x00', @ifru_flags=0x814a010000000000}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x125000, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) [ 959.945423][ T1025] binder: 1020:1025 ioctl c0306201 20000440 returned -22 [ 959.954445][ T1030] FAULT_INJECTION: forcing a failure. [ 959.954445][ T1030] name failslab, interval 1, probability 0, space 0, times 0 [ 959.978430][ T1025] binder: BINDER_SET_CONTEXT_MGR already set [ 960.002638][ T1030] CPU: 1 PID: 1030 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 960.010496][ T1030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 960.020556][ T1030] Call Trace: [ 960.023869][ T1030] dump_stack+0x172/0x1f0 [ 960.028225][ T1030] should_fail.cold+0xa/0x15 [ 960.031049][ T1025] binder: 1020:1025 ioctl 40046207 0 returned -16 [ 960.032837][ T1030] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 960.032862][ T1030] ? ___might_sleep+0x163/0x280 [ 960.032886][ T1030] __should_failslab+0x121/0x190 [ 960.032902][ T1030] should_failslab+0x9/0x14 [ 960.032916][ T1030] kmem_cache_alloc_node_trace+0x26d/0x720 [ 960.032941][ T1030] __kmalloc_node_track_caller+0x3d/0x70 [ 960.032959][ T1030] __kmalloc_reserve.isra.0+0x40/0xf0 [ 960.032979][ T1030] __alloc_skb+0x10b/0x5e0 [ 960.080590][ T1030] ? skb_trim+0x190/0x190 [ 960.084933][ T1030] ? refcount_dec_and_mutex_lock+0x90/0x90 [ 960.090756][ T1030] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 960.096394][ T1030] ? aa_sk_perm+0x288/0x880 [ 960.100910][ T1030] sock_wmalloc+0xd9/0x120 [ 960.105339][ T1030] pppol2tp_sendmsg+0x23b/0x6b0 [ 960.110198][ T1030] ? apparmor_socket_sendmsg+0x2a/0x30 [ 960.115670][ T1030] ? pppol2tp_getname+0xd10/0xd10 [ 960.120704][ T1030] sock_sendmsg+0xd7/0x130 [ 960.125139][ T1030] ___sys_sendmsg+0x3e2/0x920 [ 960.130008][ T1030] ? copy_msghdr_from_user+0x430/0x430 [ 960.135592][ T1030] ? lock_downgrade+0x880/0x880 [ 960.140453][ T1030] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 960.146702][ T1030] ? kasan_check_read+0x11/0x20 00:23:03 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video1\x00', 0x2, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000000140)='syz1\x00') ioctl$FICLONE(r0, 0x40049409, r1) semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {0x1, 0x0, 0x1000}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) 00:23:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0000000000004c0018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 960.151561][ T1030] ? __fget+0x381/0x550 [ 960.155727][ T1030] ? ksys_dup3+0x3e0/0x3e0 [ 960.160153][ T1030] ? __lockdep_free_key_range+0x120/0x120 [ 960.165880][ T1030] ? __fget_light+0x1a9/0x230 [ 960.170559][ T1030] ? __fdget+0x1b/0x20 [ 960.174634][ T1030] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 960.180882][ T1030] ? sockfd_lookup_light+0xcb/0x180 [ 960.186098][ T1030] __sys_sendmmsg+0x1bf/0x4d0 [ 960.190788][ T1030] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 960.192700][ T1033] binder: 1019:1033 unknown command 536871488 [ 960.195839][ T1030] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 960.195856][ T1030] ? fput_many+0x12c/0x1a0 [ 960.195876][ T1030] ? fput+0x1b/0x20 [ 960.208159][ T1030] ? ksys_write+0x1cf/0x290 [ 960.221105][ T1030] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 960.226581][ T1030] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 960.232059][ T1030] ? do_syscall_64+0x26/0x680 [ 960.235738][ T1033] binder: 1019:1033 ioctl c0306201 20000440 returned -22 [ 960.236737][ T1030] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 960.236752][ T1030] ? do_syscall_64+0x26/0x680 [ 960.236776][ T1030] __x64_sys_sendmmsg+0x9d/0x100 [ 960.236795][ T1030] do_syscall_64+0xfd/0x680 [ 960.254515][ T1030] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 960.254530][ T1030] RIP: 0033:0x459519 [ 960.254547][ T1030] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 960.254555][ T1030] RSP: 002b:00007ff0f5c9ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 960.254568][ T1030] RAX: ffffffffffffffda RBX: 00007ff0f5c9ac90 RCX: 0000000000459519 [ 960.254581][ T1030] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000006 [ 960.317707][ T1030] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 960.325694][ T1030] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff0f5c9b6d4 [ 960.333674][ T1030] R13: 00000000004c6af9 R14: 00000000004dbd80 R15: 0000000000000007 00:23:04 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) r0 = open(&(0x7f0000000040)='./file0\x00', 0x8000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@initdev}}, &(0x7f00000006c0)=0xe8) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000700)={r1, @loopback, @local}, 0xc) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) 00:23:04 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x2000000, 0x0, 0x0}) 00:23:04 executing program 1 (fault-call:13 fault-nth:2): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) [ 960.425427][ T1056] binder: 1041:1056 unknown command 536871488 [ 960.449863][ T1056] binder: 1041:1056 ioctl c0306201 20000440 returned -22 [ 960.476685][ T1060] binder: BINDER_SET_CONTEXT_MGR already set [ 960.497463][ T1056] binder: 1041:1056 unknown command 536871488 [ 960.504197][ T1060] binder: 1055:1060 ioctl 40046207 0 returned -16 [ 960.505225][ T1056] binder: 1041:1056 ioctl c0306201 20000440 returned -22 00:23:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000600018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:23:04 executing program 3: r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sysinfo(&(0x7f0000000000)=""/22) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000080)) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0xc3f, 0x8000, 0x5, 0x2, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r2}, &(0x7f00000001c0)=0x8) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@H\x00', @ifru_flags=0x814a010000000000}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x125000, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) [ 960.537094][ T1065] binder: 1055:1065 unknown command 536871488 [ 960.549370][ T1065] binder: 1055:1065 ioctl c0306201 20000440 returned -22 00:23:04 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x440400, 0x0) getsockopt$inet6_dccp_int(r0, 0x21, 0x15, &(0x7f00000000c0), &(0x7f0000000100)=0x4) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) [ 960.592757][ T1068] binder: 1067:1068 unknown command 536871488 [ 960.616000][ T1068] binder: 1067:1068 ioctl c0306201 20000440 returned -22 [ 960.649924][ T1071] binder: 1067:1071 unknown command 536871488 [ 960.680509][ T1074] binder: 1055:1074 unknown command 536871488 [ 960.682665][ T1071] binder: 1067:1071 ioctl c0306201 20000440 returned -22 [ 960.702866][ T1074] binder: 1055:1074 ioctl c0306201 20000440 returned -22 [ 960.714108][ T1066] FAULT_INJECTION: forcing a failure. [ 960.714108][ T1066] name failslab, interval 1, probability 0, space 0, times 0 [ 960.726935][ T1066] CPU: 0 PID: 1066 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 960.734745][ T1066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 960.745157][ T1066] Call Trace: [ 960.748471][ T1066] dump_stack+0x172/0x1f0 [ 960.752831][ T1066] should_fail.cold+0xa/0x15 [ 960.757445][ T1066] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 960.763279][ T1066] __should_failslab+0x121/0x190 [ 960.768242][ T1066] should_failslab+0x9/0x14 [ 960.772756][ T1066] kmem_cache_alloc_node_trace+0x5a/0x720 [ 960.778478][ T1066] ? __lockdep_free_key_range+0x120/0x120 [ 960.784210][ T1066] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 960.789677][ T1066] ? lockdep_hardirqs_on+0x418/0x5d0 [ 960.794975][ T1066] __kmalloc_node_track_caller+0x3d/0x70 00:23:04 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x3000000, 0x0, 0x0}) [ 960.800618][ T1066] __kmalloc_reserve.isra.0+0x40/0xf0 [ 960.805986][ T1066] pskb_expand_head+0x151/0xe00 [ 960.806005][ T1066] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 960.806023][ T1066] ? iov_iter_advance+0x295/0xf70 [ 960.806049][ T1066] l2tp_xmit_skb+0xe4e/0x13e0 [ 960.826797][ T1066] pppol2tp_sendmsg+0x4a2/0x6b0 [ 960.831664][ T1066] ? pppol2tp_getname+0xd10/0xd10 [ 960.836705][ T1066] sock_sendmsg+0xd7/0x130 [ 960.841230][ T1066] ___sys_sendmsg+0x3e2/0x920 [ 960.845924][ T1066] ? copy_msghdr_from_user+0x430/0x430 [ 960.851410][ T1066] ? lock_downgrade+0x880/0x880 [ 960.856274][ T1066] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 960.862524][ T1066] ? kasan_check_read+0x11/0x20 [ 960.867383][ T1066] ? __fget+0x381/0x550 [ 960.871563][ T1066] ? ksys_dup3+0x3e0/0x3e0 [ 960.875979][ T1066] ? retint_kernel+0x2b/0x2b [ 960.880583][ T1066] ? __fget_light+0x1a9/0x230 [ 960.885265][ T1066] ? __fdget+0x1b/0x20 [ 960.889348][ T1066] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 960.895590][ T1066] ? sockfd_lookup_light+0xcb/0x180 00:23:04 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x105000, 0x0) 00:23:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000680018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:23:04 executing program 3: r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sysinfo(&(0x7f0000000000)=""/22) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000080)) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0xc3f, 0x8000, 0x5, 0x2, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r2}, &(0x7f00000001c0)=0x8) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@H\x00', @ifru_flags=0x814a010000000000}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x125000, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) 00:23:04 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) r0 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x3c8, 0x0, 0x208, 0x208, 0x118, 0x118, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x4, &(0x7f00000000c0), {[{{@ipv6={@dev={0xfe, 0x80, [], 0x28}, @remote, [0xffffffff, 0xffffffff], [0xffffff00, 0x0, 0xff, 0xff000000], 'bcsh0\x00', 'gretap0\x00', {}, {0xff}, 0x99, 0x3, 0x1, 0x40}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@eui64={0x28, 'eui64\x00'}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x9}}}, {{@uncond, 0x0, 0xc8, 0xf0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x9, 0x10000}, {0x0, 0x9, 0x6}}}}, {{@ipv6={@ipv4={[], [], @empty}, @local, [0x0, 0xff, 0xff000000], [0xffffffff, 0xffffffff, 0xffffffff], 'veth1\x00', 'veth0_to_bridge\x00', {0xff}, {}, 0x33, 0xff, 0x3, 0x50}, 0x0, 0xc8, 0xf0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) r1 = semget(0x2, 0x3, 0x1) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x40) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0xffffffff) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) r3 = semget(0x2, 0x0, 0x0) semop(r3, &(0x7f0000000240)=[{0x0, 0x8004, 0x1000}], 0x1) [ 960.895608][ T1066] __sys_sendmmsg+0x1bf/0x4d0 [ 960.895627][ T1066] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 960.910534][ T1066] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 960.916792][ T1066] ? fput_many+0x12c/0x1a0 [ 960.921244][ T1066] ? fput+0x1b/0x20 [ 960.925058][ T1066] ? ksys_write+0x1cf/0x290 [ 960.925083][ T1066] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 960.925099][ T1066] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 960.925122][ T1066] ? do_syscall_64+0x26/0x680 [ 960.945182][ T1066] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 960.951261][ T1066] ? do_syscall_64+0x26/0x680 [ 960.955959][ T1066] __x64_sys_sendmmsg+0x9d/0x100 [ 960.960906][ T1066] do_syscall_64+0xfd/0x680 [ 960.960931][ T1066] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 960.960944][ T1066] RIP: 0033:0x459519 [ 960.960961][ T1066] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 960.960970][ T1066] RSP: 002b:00007ff0f5cbbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 960.960994][ T1066] RAX: ffffffffffffffda RBX: 00007ff0f5cbbc90 RCX: 0000000000459519 [ 960.975246][ T1066] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000006 [ 960.975256][ T1066] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 960.975265][ T1066] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff0f5cbc6d4 [ 960.975274][ T1066] R13: 00000000004c6af9 R14: 00000000004dbd80 R15: 0000000000000007 [ 960.995780][ T1098] binder: 1089:1098 unknown command 536871488 00:23:05 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x4000000, 0x0, 0x0}) [ 961.147812][ T1098] binder: 1089:1098 ioctl c0306201 20000440 returned -22 [ 961.178399][ T1107] binder: 1089:1107 unknown command 536871488 00:23:05 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) r0 = semget(0x3, 0x4, 0x80) semop(r0, &(0x7f00000000c0), 0x6c) 00:23:05 executing program 3: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) r0 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x3c8, 0x0, 0x208, 0x208, 0x118, 0x118, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x4, &(0x7f00000000c0), {[{{@ipv6={@dev={0xfe, 0x80, [], 0x28}, @remote, [0xffffffff, 0xffffffff], [0xffffff00, 0x0, 0xff, 0xff000000], 'bcsh0\x00', 'gretap0\x00', {}, {0xff}, 0x99, 0x3, 0x1, 0x40}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@eui64={0x28, 'eui64\x00'}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x9}}}, {{@uncond, 0x0, 0xc8, 0xf0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x9, 0x10000}, {0x0, 0x9, 0x6}}}}, {{@ipv6={@ipv4={[], [], @empty}, @local, [0x0, 0xff, 0xff000000], [0xffffffff, 0xffffffff, 0xffffffff], 'veth1\x00', 'veth0_to_bridge\x00', {0xff}, {}, 0x33, 0xff, 0x3, 0x50}, 0x0, 0xc8, 0xf0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) r1 = semget(0x2, 0x3, 0x1) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x40) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0xffffffff) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) r3 = semget(0x2, 0x0, 0x0) semop(r3, &(0x7f0000000240)=[{0x0, 0x8004, 0x1000}], 0x1) [ 961.192264][ T1107] binder: 1089:1107 ioctl c0306201 20000440 returned -22 [ 961.201536][ T1106] binder: BINDER_SET_CONTEXT_MGR already set [ 961.216944][ T1106] binder: 1105:1106 ioctl 40046207 0 returned -16 [ 961.276675][ T1113] binder: 1105:1113 unknown command 536871488 [ 961.322439][ T1113] binder: 1105:1113 ioctl c0306201 20000440 returned -22 [ 961.355634][ T1113] binder: 1105:1113 unknown command 536871488 00:23:05 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:23:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0000000000006c0018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:23:05 executing program 3: r0 = socket$inet6(0x10, 0x1000000003, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5f00fe01b2a4a280930206000100000001000000003900090035000c004000000019000b4006000000000022dc1338d54400009b84136ef75afb83de4411000500c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001fc0)={'vcan0\x00', 0x0}) sendmmsg$sock(r0, &(0x7f0000002740)=[{{&(0x7f0000000100)=@un=@abs={0x1, 0x0, 0x4e20}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000180)="81d4220e5d8dc32a600a03c1c78ce8ce8fa71ac5ceddc70a47ebfd4784ff25eda3f744e4c021f1bd", 0x28}, {&(0x7f00000001c0)}, {&(0x7f0000000200)="255379e67d088d1ace5bd3a912e79a69b3f32ad0a1ba78b60c2abcd91856efc53c049a3bcb94406572faab58f0110d8e5508623e83bdeff41d761c5d2465b02e2522f1ef6f9e6bc136800961dda9d9c4958c33b797c401d91c55f50976b61ff62becb66f54771f2f6399afdfeee5c069edcdcf72dfff09e3330b70b27d00f40b5db7479e64f2972520ab1427a8163ad3339fd1f4ac5350ed40828abc6fcbdec4decdb1d0d493e1eb7d4a0733", 0xac}, {&(0x7f00000002c0)="32bb1516364e06d7b6a6fa6e24edfce9872ae4ce6f9eacc9b0fed17315e667b2fc0b910645e3a16a6083e664cd1943959481314bd2eb37665b75902ccab56e33f15397b2236e3faa1e5e7f8ee484ffe83512366427d4198f87c969a415d7c7bd3e390ecc7cc17b518cd69ff04088269713cc3dbd363bb08cb4e8bedfe21030e1cbf6aff6fff3f89194243d63e2cced6f87d9429efb4ee6a3b1d4ce862b1eec0a3557c7e91bc1efd68115b1b08e18225a727a6a698482741fcbe126bc3ee498e8d7bbfe323e2a85ca09a44c048f65f5fdceb4c30398a48f32de6d3028672764b3a546e3709ab992cc05075d4aa5d421272e39eae84156b1f0", 0xf8}], 0x4}}, {{&(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @multicast1}, 0x3, 0x0, 0x3}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000480)="3b258bc988ea0be5dc99430c612592198a56fe3b138a24798926b5d0a05c64fc0457d57ea3810d3be566718ab113f3f14864850af930ef61aa003a3f63f672d139ca5fb5adf851a9259e066637d3466f25c8ed48089d10f5893b4d12df45983d50de48c8e2a3d7bdc99a855611c5c2d6599e6c28612a50ed95747d3ae3df0f08946f6712812527992f89d0ad66244f09a4dce85bc276b38c0d65a53a0b3ffb2a2bf59d00d494d45d24db5539fed36bea3c0350a4f4a0728453d61602875694845054898e4dccd893d9c738d2df38245302", 0xd1}, {&(0x7f0000000580)="284fade6bcba6ca28005588b0c4ffbf07f50d1a24a7214ee450ab92a4e8e92d87992a175f263e23e801afb47baa97ce15a44c2503b853ca5eaf31c14f1e63ab3719f25df197c6a37b8b57680590ce0baabde69e85757d785a4333d4f794f5f0802a47940f6fb7da7d8b7ebaa9842d2a9f7f51a778c8fcfa9dd10bf23cf0b3d759b15ab4db5b6a44b4ad83ea7f20c2dbb614c33a476ba8720fd17acf4b3e00b137e51d6c911614ca9c55070e134d82d51ac60128600ccd9a40ffd6f96d1fe13", 0xbf}, {&(0x7f0000000640)="e265d23e564d6fe275dbe043cd28e4e90dc6584a22db75bbcbaf13ead57f100575a053d4d2552df764ff0f79663371e210f95d957512506dfa45581fdab5ad39d70eeaa0b15393ce0e", 0x49}, {&(0x7f00000006c0)="359fd84aa920612624f024f424236c330c39d41739a95d48a45219cbd4c3ce9a93213d6e8f702ab6667be3104dd9b4ebd2e409bef867971ff6d65e7cbf211b4e31df8793c653180364ab8e6aa56f8541157a6d57fcee46d7486a1f9f1f333272d90cea0ea80e53c29c98993b3f89b7c61f16773cd4e86b9314cf2dcbe1fb485bd4c65fa7fa87e6f8c30671dcf2c8fdf148404585c5bccb2b8a277c6113b14b885fae958c8dbc2f82ebfebdb842b845bae326819c", 0xb4}, {&(0x7f0000000780)="3a0b3d9b81cea86031b3c0753bf20803d8a48d21b6529ba4cd8cd5c6f4df9702a65d02210df91b8e5cb2b723e7c33f3ad92ae31af0cdbd9e7ba1c85dc2d0a56edad059f160768eb4bf325cdbd4d20697bb4e1878e2d8b3825110f8168bd6b78606602f2f1f1f50190a33e1cda8755d85b281a22585b510c61e3f88c2aff2e24741b8edd277949d", 0x87}, {&(0x7f0000000840)="1fb1e152d12fcff1d60f83d0c2a72c0e592e3579830e85a5e5b1e6f5b2bf803195cb3ef946605ac68e74d9c96dc2c54a539e8c849a7136011cb39482fa3334a87a5b3a8c106ea838ffc34adfd2e1830e46658486140451307cbbe75d4bd5deacf31eae6e1c14a3b12f5bbab08c00ab9162520fcc84b7ad2ac4b6", 0x7a}, {&(0x7f00000008c0)="fb1864db1c9c134e4c56e4e84e5ba49eb39ea64fd52088a7bea823ef665f5d44a8d289ee22f999565289c75a19cd02adfc9a703009fab1d4a18682f0348ad10296cbcc4e287048d071487fdf5661f6488dc73c1ca5bd3aa545ed08befaeebeb8f64f7af4e223512f02a8e2d6eafbcf323aee8a44e64348c8325807af998a84c58a2d51b06ad2a84f78bd53095bccbcedbd08f4285988ef3c71e02385a51e293976ddcce6a4d856dba93376cad9d50a62e6cbba06ad04e8568e05addf59499c970855e788c12dfdae50d8b2e42d016d37e50518b13953a1242f64", 0xda}, {&(0x7f00000009c0)="826bfb21126396da2cd89f1868fdbee66157e28dea59194a1b9db4f35c0dd1ce7aede3ffd9b77c70fb1e1f465345c3fff5321aa11a2edc17f0847fe1612612b42f56edf9886506f6d0a86fa082ae94cc58275b36f013ce74e7b66582dcb143bc2d7e4e365b4905bd96b6e1578c853fa9764317bc79f14eeaea2ecf0b", 0x7c}, {&(0x7f0000000a40)="61250a57794088b15797c53d7dea7b29744d8a6386832540e9c2", 0x1a}], 0x9, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0xfe}}, @txtime={{0x18, 0x1, 0x3d, 0x5f}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x200}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x1000}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffff3a24}}], 0xc0}}, {{&(0x7f0000000c00)=@ipx={0x4, 0x7fff, 0x0, "236d1aac87af", 0x7fff}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000c80)="b648dda937b41045ef09c6845cc19e9b766025ca928b24d0f3213b8f1a4d4513272f6c92cc54afe725bd4eaea4dc141663be8024584461fe0fb9eb82aa98e8afa9492d5509f5968f554870f95882ef654e49948a16a401f3271a61e95c9302387008", 0x62}, {&(0x7f0000000d00)="7de4acc0d0fe6a7c29a4fc3ae2e4327de204ca08330c0dfe6cb97ef9c7be9c14891a6e8e81513be80c513e2f21540deafe397b26ef65d47605c3bef6208f5ed2df3f84e5a1d9e188d29132360f71473a82180ddd9db9c4d1e69112f8ff1eafa8dd7e2309244d70ac7169dded0e7a1d1fbb0be95fa9286ea65f1ae839e90b098d37d1d474007ef4892635c8", 0x8b}, {&(0x7f0000000dc0)="b806c3aa9285c5e04da0ba2b6011f85e93caf8eb94c611c0425de9d5e48f07f9487be00488024212215018af5ba36a887e5282c796b116a6e0ad4487bcf0f415106b222f591a9b882784ae3ffbe11ec52d28409bf004bc9945cc472ff00490d1ee8306a4e768072c9dfac6bad56a67faceddb7c83058a6b1de6cc8", 0x7b}, {&(0x7f0000000e40)="d49ea9f7631dfc15bd8fe5ccd30c31e793fb2e4d1b97f7271605db87eb50b958b0442e9732a961c2d44550311a26f3585dfd6cfe6f7e1bdd4c011903ccf2bd465b27862e7a4ee0079436a5", 0x4b}, {&(0x7f0000000ec0)="c82349dee62ff1e89bea8fe076f15034c76e4105db455fbfd5b08f64f6e7ef882657de5c65084d8b1666e5c489", 0x2d}], 0x5, &(0x7f0000000f80)=[@mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001000)="c9c431b718bb4eb7a68b3c4d7b8df102335fa9a50b161085b66c83f3f72ed11a887bf3ab8a5c4a083985abe209bf57ab", 0x30}, {&(0x7f0000001040)="7ff11242c5d6878bfafe11637c417320aad1ad158da5744f8baea500ac90fe5526aae638e23909a2944b93f02e8c885f9961303690318d590288bc519336cc2bb1dbb653b7676afda74a42ba636c33c2e0e970f067b75373ae1aa6b113", 0x5d}, {&(0x7f00000010c0)="6f9bf90385064d242ec2fea932ce9ed3217f753cede71410ff62a5353e365dad060563c51626b20413260fb005feb2cfdead67aa077b5cc933bbf0cef69cdee2abce2d8f2cdd196560ce4d5701ca4d02382db748abec476441c9b106ccb93a8e576eadb4b81f6d42e1d85af098d1b2c5d346c0", 0x73}, {&(0x7f0000001140)="80e793cef51dabf49aaac2ca11ba6c664e68ba7085b23e72e0d11383f9248ba3d6288fdc56d8f9882edb0d93c3455611c7bd7db77dbfd69f3c359348ed18be7edc4a358d83d644c9e22d4c0be3a57421706c3a1f74b6c1eeede72a0b3aed322bb5eaa71d4ed60350dc", 0x69}, {&(0x7f00000011c0)="059bbf0f840f20983ad2f873e311b36dcbaa69c8d28c2c0064dd438bf0e202dbca8eb594e0940e9e1e634b5865f7a360a089d5748a53c8152b06d6d0c8648ef6eadc37bbc5ccd930bb4ce71ca2253c2a503864bf1d1521103ccd3febca85db1094fba636c877602be307d3d224ca336427ded35b754c0ec190219d52fb67292b86154617eab6e25da6fe07e5bc078114b508dc3e4ee891c1dfee273d0b63f39b6a09a9a49871cf2eb884fd21e6eade893953c047acae2790211417345ad0593adad881f1ab24b3a6433b9c831bdf93a1bc85e1b9b31a32cd756ee9c9e050c04f940f5e22f99e61b57eb39f09fb994607599a4bff5d", 0xf5}, {&(0x7f00000012c0)="1077ea209892f3401cbfa49eaea9e1d5ee685f7f43872c6b400dd545ba6618dff0e58407d16302c5b09181f153cd8b3e64e11fb6ab9bb4aff1583429e36b43b39fcaf349ad8ca28a9982c3de171e9f5c0659925f2f62c5be2d7a0ec515c75595824e82b3485400f27d079fcebdc56064ca9f3973aeaa6e4b00fbb3faaa769206dcf6a1844694652c67ace42180a30f0d6bc2ef3b261ce79e6874fc5a28e9198892e4346493c20ce5d9cb2e8e42610ea072e5edd90cea105b467285056dcb2dc0fdaf21dc0492b90c", 0xc8}, {&(0x7f00000013c0)="daac0c7c75e723de643792fe108385c4c855eded65ac0ff4d711724e405674a54efb95f38dbe0d3f9c8fb497811b5279df", 0x31}], 0x7, &(0x7f0000001480)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x30}}, {{&(0x7f00000014c0)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast2}, 0x3, 0x1, 0x1, 0x3}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000001540)="885a0f15a9ab01e4f8a797546579a4961e8bb76a60b9e031d897dc77cbad79c8be3bed3309a96f003e57ca5aec8992d435608f687ac166c5fbc2cc", 0x3b}, {&(0x7f0000001580)="715be9c5c5420e2a2a56b08639dab690938eb815b069284e067beaf406b63c216e7548b93a134193b89fb413d27ba030c2270119d4d47a01d78acfed5d1d3d8b4ca364714b6eb2d1b75ee8faa456eca84d7dcdf710c7d18245a737f7e0eaecc1a626bbce0c978475dacc60be8525c99dae7f374a9363b4f5b1df9387034832b3f4368c56d27be54b4bff834f018ac5f61251d8ba25dbd04c8e2592489daa820ead4890a94f809184449b4be6efc4e6980ea07ae5c9734a6b0c6cedf2d776924fd2b73405930488906511fdb440003d", 0xcf}, {&(0x7f0000001680)="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", 0xfc}], 0x3, &(0x7f00000017c0)=[@mark={{0x14, 0x1, 0x24, 0xd9}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x80000001}}], 0x48}}, {{&(0x7f0000002040)=@hci={0x1f, r1}, 0x80, &(0x7f0000002340)=[{&(0x7f00000020c0)="15a1017230ce2dd71c3a7bea0bff16e5bef346ef575f52352e6832d7c90a4b15d17c2fe9070db1309d750bdac03efc556fd0b3ce131b9bae3d838a046f", 0x3d}, {&(0x7f0000002100)="3f5f510a877bc72ae54bc7b26e94577a70a3586149969e5bc4645ac7909b7c89201d4031b435821c5d4832d58f60895842558817be894ec582837688d29c14e839c21c961f813313372e2446214346cd19011106be777bfe1017d8be7d3da9ed9024a2", 0x63}, {&(0x7f0000002180)="94898c6e73508fcee2", 0x9}, {&(0x7f00000021c0)="f8ad9c2c45d5e0825c99de6bf26f5ebcbfe378d5", 0x14}, {&(0x7f0000002200)="38aa8071558c7d538cd130e993", 0xd}, {&(0x7f0000002240)="836982ab883da760c0bbabb6b9dc737579b1ea72b8f385f9fcd3ce6ed45342e313f37926b82c9785b0c8eddd9609c393168e8af2586a522a0cceab0a08fd5f1c1627913b81ec987888bb0762b57e2b586d4f5b016f6b10eb97878f61991b91a49c46778f3b9b6e5202ee285c9c95b7e7ca972fc403821b265ac5c54bd4052d6f6fc75e4e91eb85c49c2f1accae53aba4d66822047b43a20882ea742c543e696f215806a996c9de211c63ec764c575c07ccb93ec2a223d48430771cbd19a457d9d0c7e42499db60558d", 0xc9}], 0x6, &(0x7f00000023c0)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x80000001}}, @txtime={{0x18, 0x1, 0x3d, 0x220a}}, @timestamping={{0x14, 0x1, 0x25, 0x3fe}}, @txtime={{0x18, 0x1, 0x3d, 0x4f}}], 0x78}}, {{&(0x7f0000002440)=@nfc_llcp={0x27, 0x1, 0x2, 0x7, 0x3, 0xff8, "3a7b4832f90e0be2a4fc7623e2eb5efb549135088d0fd4a3deda11d24c0a8239d96a3895a1f42ebe70cc049f8a36681eeb0639ffc993992eab46527b9a566f", 0xb}, 0x80, &(0x7f0000002640)=[{&(0x7f00000024c0)="d4c2cdb9ba042a433ea5ce073727d04ea56fd812262ce914b5d2889bdd9299088d4198bc28cdf69379ac2267eb5ad35e6477aa790a8b87791ee38213d6ad312d5090151f386cf282de85dcde7afb1845a5ec39afd4ea760712fb95df92d1291a3d056234d53bfe97854389a2a08335787c144c04adee362006eab39f4e2eeea204bfc78586f8e8b6813976a71f3f7d6d91bd0de52832b220", 0x98}, {&(0x7f0000002580)="2507231aff3f3905ac47cb769c800196400650e7cd5917d7af0cd90677f333bfe5a2efab68ef395d866ae413430fd1bf68825b7273dec61df7e40c9881d70be8106c6e824acd803009ca65b2aece2ca3da9faf30c65882f2170898077ef2b8c94cfd1bd93383f9dc5a121bb42d84b89874f0ef79fe8b5abbca8c8972ff968189e2fab04d897a3cf489", 0x89}], 0x2, &(0x7f0000002680)=[@mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x2800}}, @mark={{0x14, 0x1, 0x24, 0x8723}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x100000000}}], 0xc0}}], 0x7, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), 0x4) openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0xf7ffffffffffffff, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) 00:23:05 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x200) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000000c0)={0x3, 0x3, 0x4, 0x1, 0x1}) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) [ 961.373052][ T1113] binder: 1105:1113 ioctl c0306201 20000440 returned -22 00:23:05 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x5000000, 0x0, 0x0}) [ 961.428444][ T1118] binder: 1117:1118 unknown command 536871488 [ 961.474540][ T1118] binder: 1117:1118 ioctl c0306201 20000440 returned -22 [ 961.492014][ C0] net_ratelimit: 18 callbacks suppressed [ 961.492022][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 961.503613][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 961.507051][ T1130] binder: BINDER_SET_CONTEXT_MGR already set [ 961.559420][ T1134] binder: 1117:1134 unknown command 536871488 [ 961.571347][ T1130] binder: 1128:1130 ioctl 40046207 0 returned -16 [ 961.572150][ T1135] binder: 1128:1135 unknown command 536871488 [ 961.595941][ T1134] binder: 1117:1134 ioctl c0306201 20000440 returned -22 [ 961.721848][ T1135] binder: 1128:1135 ioctl c0306201 20000440 returned -22 [ 961.785754][ T1138] binder: 1128:1138 unknown command 536871488 [ 961.797132][ T1138] binder: 1128:1138 ioctl c0306201 20000440 returned -22 00:23:05 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x5, 0x10000) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f00000000c0)={0x800, 0x3}) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) 00:23:05 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x200, 0x0) fsetxattr$security_smack_entry(r0, &(0x7f00000000c0)='security.SMACK64\x00', &(0x7f0000000100)='$trusted\\qvboxnet0[proc\x00', 0x18, 0x1) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) 00:23:05 executing program 3: socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0x8, @mcast1, 0x3}, @in6={0xa, 0x4e23, 0x5, @remote, 0x2}, @in6={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7ed}, @in={0x2, 0x4e20, @loopback}], 0x64) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000040)={0x5, 0x7, 0x10000, 0x91, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) sendto$inet(r2, &(0x7f0000000240)="7ec6a35795ebef216e451ac5e11aa70724905e85d98a5e5bc74777c2b47e4316c06d945d9a348891fd17d3c276d911fe596c61663ac2e7d0e5535f31a8b9335ff28940f7a8ca8363661a37b0d00a0b306c77609ff54130c2b82664688811fce6", 0x60, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @rand_addr=0x7ff}, 0x10) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x14d}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:23:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000740018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:23:05 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x6000000, 0x0, 0x0}) [ 961.920890][ T1145] binder: 1142:1145 unknown command 536871488 [ 961.944418][ T1145] binder: 1142:1145 ioctl c0306201 20000440 returned -22 00:23:05 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) timer_create(0x5, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000000c0)=0x0) r1 = epoll_create1(0x80000) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffff9c, 0xae01, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000705ff4)={0x10, 0x0, 0x0, 0x400000000006}, 0xc) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x0, 0x0) accept4$packet(0xffffffffffffff9c, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14, 0x80000) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000280)={@loopback, @empty, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xfffffffffffffffd, 0x0, 0x10001, 0x500, 0x8001, 0x1000048, r5}) getsockopt$netlink(r3, 0x10e, 0x9, &(0x7f0000000040)=""/35, &(0x7f0000000080)=0x23) timer_getoverrun(r0) r6 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x1ff, 0x101000) bind$inet(r6, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) ioctl$KDSETMODE(r6, 0x4b3a, 0x3) [ 961.972578][ T1151] binder: BINDER_SET_CONTEXT_MGR already set [ 961.998734][ T1151] binder: 1149:1151 ioctl 40046207 0 returned -16 [ 962.007861][ T1154] binder: 1142:1154 unknown command 536871488 [ 962.016659][ T1157] binder: 1149:1157 unknown command 536871488 [ 962.037327][ T1154] binder: 1142:1154 ioctl c0306201 20000440 returned -22 [ 962.062345][ T1157] binder: 1149:1157 ioctl c0306201 20000440 returned -22 00:23:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0000000000007a0018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 962.193766][ T1162] binder: 1149:1162 unknown command 536871488 00:23:06 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000002, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) [ 962.250451][ T1162] binder: 1149:1162 ioctl c0306201 20000440 returned -22 00:23:06 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x7000000, 0x0, 0x0}) [ 962.322679][ T1164] binder: 1163:1164 unknown command 536871488 [ 962.376098][ T1164] binder: 1163:1164 ioctl c0306201 20000440 returned -22 00:23:06 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000003, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) [ 962.416753][ T1169] binder: 1163:1169 unknown command 536871488 [ 962.432597][ T1170] binder: BINDER_SET_CONTEXT_MGR already set [ 962.442032][ T1169] binder: 1163:1169 ioctl c0306201 20000440 returned -22 [ 962.455007][ T1170] binder: 1168:1170 ioctl 40046207 0 returned -16 00:23:06 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000040)=[{0x8000000, 0x80, 0x1800}, {}], 0x2aaaaaaaaaaaac2d) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) [ 962.488162][ T1170] binder: 1168:1170 unknown command 536871488 [ 962.510428][ T1170] binder: 1168:1170 ioctl c0306201 20000440 returned -22 00:23:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000ff0018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 962.580782][ T1173] binder: 1168:1173 unknown command 536871488 [ 962.607170][ T1173] binder: 1168:1173 ioctl c0306201 20000440 returned -22 [ 962.622028][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 962.627892][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 962.673520][ T1181] binder: BINDER_SET_CONTEXT_MGR already set [ 962.704746][ T1181] binder: 1179:1181 ioctl 40046207 0 returned -16 [ 962.717244][ T1181] binder: 1179:1181 unknown command 536871488 [ 962.724564][ T1181] binder: 1179:1181 ioctl c0306201 20000440 returned -22 [ 962.741825][ T1184] binder: 1179:1184 unknown command 536871488 [ 962.748203][ T1184] binder: 1179:1184 ioctl c0306201 20000440 returned -22 00:23:06 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x2000, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0xfffffffeffffffff}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={r1}, &(0x7f0000000180)=0x8) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) 00:23:06 executing program 2: semget$private(0x0, 0x3, 0x3b20d0ccd8bd8661) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x200000, 0x0) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x2) inotify_rm_watch(r0, r1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x12000) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f00000000c0)=""/189, &(0x7f0000000180)=0xbd) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) 00:23:06 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x8000000, 0x0, 0x0}) 00:23:06 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000004, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:23:06 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="f3550a0e26439455ee1fe9e31116ec06", 0x10) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x400, 0x0) close(r0) 00:23:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00/\x00\x00\x00\x00\x00\x00\x000\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) 00:23:06 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x100000001, 0x410001) recvfrom$rxrpc(r0, &(0x7f0000000140)=""/82, 0x2d6902f8506d84b1, 0x41, 0x0, 0x419c23b55a36536b) [ 962.860959][ T1194] binder: 1192:1194 unknown command 536871488 [ 962.895148][ T1197] binder: BINDER_SET_CONTEXT_MGR already set 00:23:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) accept$inet6(r0, 0x0, &(0x7f0000000240)) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x101000, 0x0) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f00000001c0)={0x6, &(0x7f0000000180)=[{0x80, 0x1, 0x0, 0x1}, {0x100000001, 0x1, 0x8, 0x5}, {0x1, 0xffffffff, 0x839b}, {0x411f8b0f, 0x8, 0x3b3b, 0x5}, {0x455108a1, 0x0, 0x8, 0x95}, {0x200, 0xfffffffffffffffc, 0x1ff, 0x3}]}) r2 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc80c, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, 0x0, 0x0) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000000)=""/209) close(r2) [ 962.942908][ T1194] binder: 1192:1194 ioctl c0306201 20000440 returned -22 [ 962.955956][ T1197] binder: 1193:1197 ioctl 40046207 0 returned -16 [ 962.962695][ T1204] binder: 1193:1204 unknown command 536871488 00:23:07 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x3) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) [ 962.989546][ T1206] binder: 1192:1206 unknown command 536871488 [ 963.002879][ T1204] binder: 1193:1204 ioctl c0306201 20000440 returned -22 [ 963.019068][ T1206] binder: 1192:1206 ioctl c0306201 20000440 returned -22 00:23:07 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e24, @empty}, {0x306, @random="ba74336f9495"}, 0x6, {0x2, 0x4e21, @broadcast}, 'ip_vti0\x00'}) semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000140)) [ 963.044465][ T1197] binder: BINDER_SET_CONTEXT_MGR already set [ 963.072449][ T1204] binder: 1193:1204 unknown command 536871488 00:23:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x20000000, 0x0, 0x0}) 00:23:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00E\x00\x00\x00\x00\x00\x00\x000\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) [ 963.097202][ T1197] binder: 1193:1197 ioctl 40046207 0 returned -16 [ 963.107757][ T1204] binder: 1193:1204 ioctl c0306201 20000440 returned -22 [ 963.212270][ T1225] binder: 1223:1225 unknown command 536871488 [ 963.232717][ T1228] binder: BINDER_SET_CONTEXT_MGR already set [ 963.241524][ T1225] binder: 1223:1225 ioctl c0306201 20000440 returned -22 [ 963.258810][ T1228] binder: 1227:1228 ioctl 40046207 0 returned -16 [ 963.301627][ T1231] binder: 1227:1231 unknown command 536871488 [ 963.324619][ T1233] binder: 1223:1233 unknown command 536871488 [ 963.336528][ T1231] binder: 1227:1231 ioctl c0306201 20000440 returned -22 [ 963.361079][ T1233] binder: 1223:1233 ioctl c0306201 20000440 returned -22 [ 963.380541][ T1228] binder: BINDER_SET_CONTEXT_MGR already set [ 963.392669][ T1231] binder: 1227:1231 unknown command 536871488 [ 963.409606][ T1228] binder: 1227:1228 ioctl 40046207 0 returned -16 [ 963.416232][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 963.416287][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 963.416386][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 963.416428][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 963.416519][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 963.416559][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 963.467470][ T1231] binder: 1227:1231 ioctl c0306201 20000440 returned -22 00:23:07 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x20000, 0x0) 00:23:07 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00') exit(0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/115, 0x73}], 0x1, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f00000000c0)={0x0, 0x10c000}) 00:23:07 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x7ffe, 0xfffffffffffffffe}], 0x1) fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) ioperm(0x0, 0x6, 0x6) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000000500)=[r4, r4, r4, r4, r1, r2]) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000300)={{0x9, r0, r2, r3, r5, 0x5, 0xc49}, 0xfffffffffffffffb, 0xc4c, 0x4f}) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) r6 = syz_open_dev$dmmidi(&(0x7f0000000380)='/dev/dmmidi#\x00', 0x0, 0x10000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000003c0)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) close(r6) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000440)={0x14, 0x88, 0xfa00, {r7, 0x1c, 0x0, @ib={0x1b, 0x7, 0x6, {"ab3fe5a9a0838505fab1e4cc77d89e28"}, 0x17, 0x8, 0x200}}}, 0x90) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) 00:23:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x3f000000, 0x0, 0x0}) 00:23:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x000\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) [ 963.864897][ T1242] binder: 1241:1242 unknown command 536871488 [ 963.871107][ T1242] binder: 1241:1242 ioctl c0306201 20000440 returned -22 [ 963.882556][ T1246] binder: 1241:1246 unknown command 536871488 [ 963.891364][ T1240] binder: BINDER_SET_CONTEXT_MGR already set [ 963.899662][ T1246] binder: 1241:1246 ioctl c0306201 20000440 returned -22 00:23:07 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) r0 = semget$private(0x0, 0x5, 0x0) semop(r0, &(0x7f0000000040)=[{0x1800000000, 0x7fff, 0x1000}], 0x2aaaaaaaaaaaaac0) [ 963.915906][ T1240] binder: 1239:1240 ioctl 40046207 0 returned -16 [ 963.934647][ T1240] binder: 1239:1240 unknown command 536871488 00:23:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000000ff000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:23:07 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x4) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) [ 963.982471][ T1240] binder: 1239:1240 ioctl c0306201 20000440 returned -22 [ 964.014137][ T1257] binder: 1239:1257 unknown command 536871488 [ 964.023967][ T1257] binder: 1239:1257 ioctl c0306201 20000440 returned -22 00:23:08 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f00000000c0)=0x7) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) 00:23:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x40000000, 0x0, 0x0}) [ 964.066436][ T1260] binder: BINDER_SET_CONTEXT_MGR already set [ 964.102047][ T1260] binder: 1259:1260 ioctl 40046207 0 returned -16 [ 964.120396][ T1265] binder: 1259:1265 unknown command 536871488 [ 964.156730][ T1265] binder: 1259:1265 ioctl c0306201 20000440 returned -22 [ 964.175273][ T1271] binder: 1270:1271 unknown command 536871488 [ 964.198604][ T1271] binder: 1270:1271 ioctl c0306201 20000440 returned -22 [ 964.209734][ T1260] binder: BINDER_SET_CONTEXT_MGR already set 00:23:08 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x2000, 0x0) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f00000000c0)={0x80000001}) semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) r1 = semget$private(0x0, 0x2, 0x200) semop(r1, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) [ 964.230902][ T1275] binder: 1270:1275 unknown command 536871488 [ 964.240591][ T1265] binder: 1259:1265 unknown command 536871488 [ 964.258097][ T1275] binder: 1270:1275 ioctl c0306201 20000440 returned -22 [ 964.287653][ T1260] binder: 1259:1260 ioctl 40046207 0 returned -16 [ 964.311389][ T1265] binder: 1259:1265 ioctl c0306201 20000440 returned -22 00:23:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x48000000, 0x0, 0x0}) [ 964.509892][ T1282] binder: 1281:1282 unknown command 536871488 [ 964.530950][ T1282] binder: 1281:1282 ioctl c0306201 20000440 returned -22 [ 964.569335][ T1284] binder: 1281:1284 unknown command 536871488 [ 964.579384][ T1284] binder: 1281:1284 ioctl c0306201 20000440 returned -22 00:23:08 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10, 0x80800) getsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000000280)=""/180, &(0x7f00000001c0)=0xb4) r1 = semget$private(0x0, 0x2, 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x20840, 0x0) ioctl$TCGETS2(r2, 0x802c542a, &(0x7f0000000100)) semop(r1, &(0x7f0000000080)=[{0x0, 0x100000000000080, 0x1800}, {0xfffffffffffffffe, 0x0, 0x1800}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x307}, "769a7b21341e9861", "2e002f34b98cea00ae8c0a67db68f94d93e0f932477350684f4ca184f0a6ce52", "d66dbb7a", "cc110f27798460ff"}, 0x38) 00:23:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000020018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:23:08 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) r0 = semget(0x0, 0x2, 0x304) semop(r0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x2aaaaaaaaaaaab00) 00:23:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x4c000000, 0x0, 0x0}) 00:23:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x200200842, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x1000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x14, 0x0, 0x0, 0x18d) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001880)=[@textreal={0x8, &(0x7f0000000040)="36f40f8bd0480f780eb4c20fc72f2e0f01d166b8f17f00000f23c80f21f86635040070000f23f8df4b3f66b8f00000000f23c00f21f86635020003000f23f835a200df1d", 0x44}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x7002, 0x8000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 964.877107][ T1296] binder: BINDER_SET_CONTEXT_MGR already set [ 964.884073][ T1294] binder: 1289:1294 unknown command 536871488 [ 964.893686][ T1296] binder: 1292:1296 ioctl 40046207 0 returned -16 [ 964.901363][ T1294] binder: 1289:1294 ioctl c0306201 20000440 returned -22 [ 964.926385][ T1301] binder: 1292:1301 unknown command 536871488 00:23:08 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x6}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') write$P9_RUNLINKAT(r0, &(0x7f0000000180)={0x7, 0x4d, 0x2}, 0x7) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x41800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x40000, 0x0) shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffd000/0x1000)=nil) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0xfffffffffffffffb, 0x0) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x400003) fcntl$setpipe(r0, 0x407, 0x3) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000100)=r2, 0x1) 00:23:08 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x11) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:23:08 executing program 3: sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0xfffffffffffffe3e}, 0x10) r0 = socket$inet(0x10, 0x2, 0x0) fstat(r0, &(0x7f0000000040)) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00\x00\xea:\x01\x00\x1e\r', @ifru_flags=0x2}) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000140)=0x8) [ 964.948189][ T1304] binder: 1289:1304 unknown command 536871488 [ 964.959519][ T1301] binder: 1292:1301 ioctl c0306201 20000440 returned -22 [ 964.968465][ T1304] binder: 1289:1304 ioctl c0306201 20000440 returned -22 [ 964.991338][ T1296] binder: BINDER_SET_CONTEXT_MGR already set 00:23:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000030018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 965.015368][ T1301] binder: 1292:1301 unknown command 536871488 [ 965.043426][ T1296] binder: 1292:1296 ioctl 40046207 0 returned -16 [ 965.051156][ T1301] binder: 1292:1301 ioctl c0306201 20000440 returned -22 00:23:09 executing program 3: r0 = perf_event_open(&(0x7f00004e7000)={0x2, 0x70, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/ip6_mr_cache\x00') setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000300)=0x800, 0x2) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x1, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000200)=0x0) capget(&(0x7f0000000240)={0x200f1526, r4}, &(0x7f0000000280)={0x8, 0x7ff, 0xffffffff, 0x3, 0x8391, 0x2}) syz_genetlink_get_family_id$net_dm(&(0x7f0000000340)='NET_DM\x00') ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000001c0)={0x0, r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='cpu&-xa\x00|\x00\x01\x00\x00\x01\x9c\xd3\x0e5\xa0\x1d=\x10\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7&\xb5yt\x82\xfb\x1d\x83\xf8.- \x00\x00\x00(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4#\xc5]Y;\xc16v\xf9\x89\t\x06\xbe*\xaa&\xbd\x16xQ\x8e\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dX5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\a\x01\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x01\x00\x00\x00\x01\x00\x00\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xfe\x1f\xe5\x86\xb1xu&\xfb\xf2\xbf\xe8\x7f\x91\x93\xab\x05\x004\x85\x86l\x8d\x00'/289) 00:23:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x60000000, 0x0, 0x0}) [ 965.155072][ T1316] binder: 1315:1316 unknown command 536871488 [ 965.193019][ T1316] binder: 1315:1316 ioctl c0306201 20000440 returned -22 [ 965.258889][ T1324] binder: 1315:1324 unknown command 536871488 [ 965.304974][ T1324] binder: 1315:1324 ioctl c0306201 20000440 returned -22 00:23:09 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000040)=[{0x0, 0x3, 0x1000}, {0x3, 0xaa7, 0x800}, {0x0, 0x0, 0x1800}, {0x1, 0x4}, {0x3, 0x0, 0x800}, {0x2, 0x1000, 0x1800}, {0x0, 0x2}, {0x7, 0x2, 0x800}], 0x8) semop(0x0, &(0x7f0000000240), 0x0) r0 = semget$private(0x0, 0x0, 0x81) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x101, 0x100000000, 0xffffffffffff046f, 0x7ff]) [ 965.357312][ T1328] binder: BINDER_SET_CONTEXT_MGR already set [ 965.433972][ T1328] binder: 1325:1328 ioctl 40046207 0 returned -16 [ 965.471065][ T1330] binder: 1325:1330 unknown command 536871488 [ 965.481540][ T1330] binder: 1325:1330 ioctl c0306201 20000440 returned -22 [ 965.535680][ T1330] binder: 1325:1330 unknown command 536871488 [ 965.636147][ T1330] binder: 1325:1330 ioctl c0306201 20000440 returned -22 00:23:09 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x7, 0x8001}], 0x1) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x800, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000000c0)={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfb\x13\x00'}, &(0x7f0000000040)=0x54) semop(0x0, &(0x7f0000000280)=[{0x7, 0x3, 0x800}, {0x0, 0xd7f, 0x1000}, {0x4, 0x2}, {0x3, 0x8, 0x1000}, {0x3, 0x440, 0x800}, {0x3, 0x7, 0x1000}], 0x6) dup2(r0, r0) r1 = semget$private(0x0, 0x1, 0x80) semop(r1, &(0x7f0000000240)=[{0x0, 0x7fff, 0xfffffffffffffffd}], 0x1) r2 = msgget$private(0x0, 0x430) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000180)=""/149) semget$private(0x0, 0x2, 0x84) 00:23:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000040018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:23:09 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000f5ffc)=0xfffffffeffffffff, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21}, 0x1c) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) syz_emit_ethernet(0x54, &(0x7f00000001c0)={@remote, @empty=[0x0, 0x0, 0x14], [{[{0x9100, 0x80000000, 0xb8, 0x1}], {0x8100, 0x5, 0x6, 0x1}}], {@x25={0x805, {0x3, 0x8, 0x13, "1aad9b170073ed1845a85de3ded0638d868d7359af96562cac46ded161683e9dfeaf583dd28f1e86ea4deae4574e2e04c9a31447c257b8e0ec9b5e"}}}}, 0x0) 00:23:09 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000140)={0x4, 0x2, 'client0\x00', 0xffffffff80000005, "2a7bc71414f32a64", "9f470148b8f0bf09c3ad350b273ae6c80ad72abc200d89dbf758624347c61ade", 0x7, 0x80000000}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000100)={r1, 0x2}) socket$pppoe(0x18, 0x1, 0x0) r2 = semget(0x3, 0x4, 0x8) semop(r2, &(0x7f0000000240)=[{0x3, 0x7fff, 0x1000}], 0x2aaaaaaaaaaaac76) 00:23:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x68000000, 0x0, 0x0}) 00:23:09 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x42, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f00000000c0)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x1) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x6685) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) [ 965.848365][ T1343] binder: 1342:1343 unknown command 536871488 [ 965.873295][ T1343] binder: 1342:1343 ioctl c0306201 20000440 returned -22 [ 965.923741][ T1348] binder: BINDER_SET_CONTEXT_MGR already set [ 965.929787][ T1348] binder: 1344:1348 ioctl 40046207 0 returned -16 [ 965.948870][ T1354] binder: 1342:1354 unknown command 536871488 00:23:10 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x58) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:23:10 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) recvmsg(0xffffffffffffff9c, &(0x7f0000000040)={&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001580)=[{&(0x7f0000000140)=""/94, 0x5e}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/220, 0xdc}, {&(0x7f0000001380)=""/249, 0xf9}, {&(0x7f00000001c0)=""/70, 0x46}, {&(0x7f0000001480)=""/237, 0xed}], 0x6}, 0x2) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001a40)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000001740)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x440000}, 0xc, &(0x7f0000001700)={&(0x7f0000001680)={0x68, r1, 0x2, 0x70bd28, 0x25dfdbfe, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x80) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) recvmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000001780)=@xdp, 0x80, &(0x7f0000001900)=[{&(0x7f0000001800)=""/147, 0x93}, {&(0x7f00000018c0)}], 0x2, &(0x7f0000001940)=""/128, 0x80}, 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) [ 965.998918][ T1354] binder: 1342:1354 ioctl c0306201 20000440 returned -22 [ 966.021436][ T1348] binder: 1344:1348 unknown command 536871488 00:23:10 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x5, 0x28e002) getsockopt$inet6_dccp_buf(r0, 0x21, 0xf, &(0x7f00000000c0)=""/63, &(0x7f0000000100)=0x3f) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) 00:23:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x6c000000, 0x0, 0x0}) [ 966.042640][ T1348] binder: 1344:1348 ioctl c0306201 20000440 returned -22 00:23:10 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) getgroups(0x8, &(0x7f0000000000)=[0xffffffffffffffff, 0xee00, 0xee01, 0x0, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00]) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) setgroups(0x4, &(0x7f0000000240)=[r1, r2, r3, r5]) perf_event_open(&(0x7f00000002c0)={0x4, 0x70, 0x2, 0x3, 0x0, 0x2, 0x0, 0x1, 0x2042, 0x8, 0x7fff, 0x951, 0x8, 0x0, 0xffff, 0xf7, 0x1000, 0x8, 0x8, 0x0, 0xc93, 0x1, 0x40, 0xfac, 0x0, 0x0, 0x330, 0x9, 0x800, 0x6, 0x7, 0x81, 0x0, 0x616b56b5, 0x9, 0x7fff, 0x1, 0x7fff, 0x0, 0xbcb, 0x2, @perf_bp={&(0x7f0000000280), 0x8}, 0x2109, 0x2, 0x8, 0x0, 0x7, 0x3, 0x2}, r4, 0xb, r0, 0x9) timerfd_create(0x5, 0x800) 00:23:10 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x1, 0x8001}], 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000200)='/dev/amidi#\x00', 0x7f, 0x281) open_tree(r0, &(0x7f0000000300)='./file0\x00', 0x1000) r1 = semget$private(0x0, 0x3, 0x80) r2 = geteuid() getresgid(&(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)) r4 = geteuid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000280)={{0x1, r2, r3, r4, r5, 0x80, 0x100}, 0x97, 0x9}) semop(0x0, &(0x7f0000000080)=[{0xfffffffffffffffd, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) [ 966.083013][ T1365] binder: 1344:1365 unknown command 536871488 [ 966.110870][ T1365] binder: 1344:1365 ioctl c0306201 20000440 returned -22 00:23:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000050018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 966.179517][ T1370] binder: BINDER_SET_CONTEXT_MGR already set [ 966.244541][ T1379] binder: 1369:1379 unknown command 536871488 [ 966.250911][ T1379] binder: 1369:1379 ioctl c0306201 20000440 returned -22 [ 966.271604][ T1370] binder: 1369:1370 ioctl 40046207 0 returned -16 00:23:10 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r2) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x14}, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040)=0xffffffff, 0x4) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)=0x0) setpriority(0x1, r4, 0xeb86) 00:23:10 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r1, &(0x7f0000000180)=0x4) [ 966.302709][ T1385] binder: 1369:1385 unknown command 536871488 [ 966.332264][ T1385] binder: 1369:1385 ioctl c0306201 20000440 returned -22 [ 966.406775][ T1388] binder: 1387:1388 unknown command 536871488 00:23:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x74000000, 0x0, 0x0}) [ 966.453078][ T1388] binder: 1387:1388 ioctl c0306201 20000440 returned -22 [ 966.529316][ T1397] binder: 1387:1397 unknown command 536871488 00:23:10 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x8080, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffff9c, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x6c, 0x0, &(0x7f00000003c0)=[@decrefs={0x40046307, 0x2}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000300)={@flat=@handle={0x73682a85, 0x110b, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/107, 0x6b, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/77, 0x4d, 0x2, 0x3b}}, &(0x7f0000000380)={0x0, 0x18, 0x40}}}, @increfs_done={0x40106308, 0x1}, @free_buffer={0x40086303, r1}], 0x21, 0x0, &(0x7f0000000440)="9b8737bf1840e0e9d02765b42996467c1a4ff599c86451a3bd6d7929c2f6c7ef3b"}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f00000000c0)={0x5, 0x6, 0x4, 0x66c, 'syz0\x00', 0x2}) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000100)={{0xff, @broadcast, 0x4e22, 0x4, 'lc\x00', 0x20, 0x0, 0x44}, {@multicast2, 0x4e20, 0x1, 0x2, 0x6, 0x4}}, 0x44) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) [ 966.570286][ T1397] binder: 1387:1397 ioctl c0306201 20000440 returned -22 00:23:10 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x9) ioctl$BLKRAGET(r0, 0x1263, &(0x7f00000000c0)) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) [ 966.625059][ T1399] binder: BINDER_SET_CONTEXT_MGR already set [ 966.631100][ T1399] binder: 1398:1399 ioctl 40046207 0 returned -16 [ 966.655523][ T1399] binder: 1398:1399 unknown command 536871488 [ 966.673261][ T1399] binder: 1398:1399 ioctl c0306201 20000440 returned -22 [ 966.700908][ T1399] binder: BINDER_SET_CONTEXT_MGR already set [ 966.717230][ T1408] binder: 1398:1408 unknown command 536871488 [ 966.749312][ T1399] binder: 1398:1399 ioctl 40046207 0 returned -16 [ 966.756334][ T1408] binder: 1398:1408 ioctl c0306201 20000440 returned -22 [ 966.792632][ C1] net_ratelimit: 12 callbacks suppressed [ 966.792658][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 966.805238][ C1] protocol 88fb is buggy, dev hsr_slave_1 00:23:10 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x60) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:23:10 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) r0 = syz_open_dev$sndpcmp(&(0x7f0000000340)='/dev/snd/pcmC#D#p\x00', 0x4, 0x40000) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0)='nbd\x00') r2 = syz_open_dev$sndpcmc(&(0x7f0000000400)='/dev/snd/pcmC#D#c\x00', 0x3, 0x40400) socketpair(0x8, 0xf, 0x3, &(0x7f0000000440)={0xffffffffffffffff}) r4 = syz_open_dev$swradio(&(0x7f0000000480)='/dev/swradio#\x00', 0x1, 0x2) pipe2(&(0x7f00000004c0)={0xffffffffffffffff}, 0x4000) r6 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) socketpair(0x1, 0x7, 0x9, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x121002, 0x0) r9 = open(&(0x7f0000000580)='./file0\x00', 0x6100, 0x168) r10 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/full\x00', 0x200000, 0x0) r11 = accept4(0xffffffffffffff9c, &(0x7f0000000600)=@ipx, &(0x7f0000000680)=0x80, 0x0) r12 = syz_open_dev$cec(&(0x7f00000006c0)='/dev/cec#\x00', 0x3, 0x2) r13 = open(&(0x7f0000000700)='./file0\x00', 0x4000, 0x80) r14 = syz_open_procfs(0x0, &(0x7f0000000740)='net/ipv6_route\x00') pipe2(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000008c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0xc0, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_SOCKETS={0x54, 0x7, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_SOCKETS={0x14, 0x7, [{0x8, 0x1, r12}, {0x8, 0x1, r13}]}, @NBD_ATTR_SOCKETS={0x14, 0x7, [{0x8, 0x1, r14}, {0x8, 0x1, r15}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xff}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) r16 = semget(0x1, 0x7, 0x132) semop(r16, &(0x7f0000000040)=[{0x4, 0x9, 0x1800}, {0x2, 0x5, 0x1800}, {0x0, 0x10000, 0x1800}, {0x3, 0x401, 0x1000}, {0x2, 0x1, 0x1800}, {0x7, 0x2, 0x1000}], 0x6) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) r17 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0xffffffffffffff85, 0x10000) r18 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r17, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r18, 0x100, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}}, 0x40000) getsockopt$XDP_MMAP_OFFSETS(r17, 0x11b, 0x1, &(0x7f0000000100), &(0x7f0000000180)=0x60) 00:23:11 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)='\x00'}, 0x30) r1 = getpid() fcntl$setown(r0, 0x8, r1) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) r2 = dup3(r0, r0, 0x80000) accept$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0}, &(0x7f0000000580)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000005c0)={'team0\x00', r3}) listen(r2, 0x1) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x1795) 00:23:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000060018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:23:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x7a000000, 0x0, 0x0}) [ 967.075467][ T1422] binder: 1420:1422 unknown command 536871488 [ 967.089023][ T1423] binder: BINDER_SET_CONTEXT_MGR already set [ 967.106808][ T1423] binder: 1421:1423 ioctl 40046207 0 returned -16 [ 967.131734][ T1423] binder: 1421:1423 unknown command 536871488 [ 967.138483][ T1423] binder: 1421:1423 ioctl c0306201 20000440 returned -22 [ 967.149425][ T1423] binder: BINDER_SET_CONTEXT_MGR already set [ 967.156290][ T1427] binder: 1421:1427 unknown command 536871488 [ 967.162515][ T1423] binder: 1421:1423 ioctl 40046207 0 returned -16 [ 967.169035][ T1427] binder: 1421:1427 ioctl c0306201 20000440 returned -22 00:23:11 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x28000, 0x0) fcntl$setsig(r0, 0xa, 0x30) [ 967.171955][ T1422] binder: 1420:1422 ioctl c0306201 20000440 returned -22 00:23:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000070018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 967.252313][ T1429] binder: 1420:1429 unknown command 536871488 [ 967.298027][ T1429] binder: 1420:1429 ioctl c0306201 20000440 returned -22 00:23:11 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000), 0x2) ioctl(r2, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") sendfile(r1, r0, 0x0, 0x80000000) 00:23:11 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x5, 0x101000) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000100)={0xffffffffffffffff}, 0x3, {0xa, 0x4e22, 0x3, @local, 0x1f}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000180)={0x11, 0x10, 0xfa00, {&(0x7f00000000c0), r1}}, 0x18) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) 00:23:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0xff000000, 0x0, 0x0}) [ 967.382982][ T1437] binder: 1436:1437 unknown command 536871488 [ 967.399692][ T1437] binder: 1436:1437 ioctl c0306201 20000440 returned -22 [ 967.466170][ T1442] binder: 1436:1442 unknown command 536871488 [ 967.481830][ T1443] binder: BINDER_SET_CONTEXT_MGR already set 00:23:11 executing program 2: semop(0x0, &(0x7f0000000040)=[{0x0, 0x8001}], 0x2aaaaaaaaaaaaf8b) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) r0 = semget(0x2, 0x7, 0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x105603, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)) semop(r0, &(0x7f0000000240)=[{0x0, 0xfffe0000, 0x1000}], 0x1) [ 967.509910][ T1443] binder: 1440:1443 ioctl 40046207 0 returned -16 [ 967.519815][ T1442] binder: 1436:1442 ioctl c0306201 20000440 returned -22 [ 967.547642][ T1448] binder: 1440:1448 unknown command 536871488 [ 967.582336][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 967.589470][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 967.598025][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 967.602724][ T1448] binder: 1440:1448 ioctl c0306201 20000440 returned -22 [ 967.607230][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 967.617883][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 967.624194][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:23:11 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x8a080, 0x0) write$nbd(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="06000000000000000000000000030000a3ef41749fa527ab78fc57f180bd82099cbab35a2fdbede5fbb11bedfb1f8cd557b0bdfcd7f42f63af872a0a11e32f7a06bebb02f6b78b0000000080000000ec7dfc4b75ea786eba8815c11e7bb247fa10275b21fe601165185947306a84eb578d5d1004425fc78b343624c6c5e7be78ab9406a3"], 0x68) [ 967.639883][ T1443] binder: BINDER_SET_CONTEXT_MGR already set [ 967.689861][ T1443] binder: 1440:1443 ioctl 40046207 0 returned -16 [ 967.732621][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 967.738552][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:23:11 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x300) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:23:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000080018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 967.958642][ T1461] binder: 1460:1461 unknown command 536871488 [ 967.966136][ T1461] binder: 1460:1461 ioctl c0306201 20000440 returned -22 [ 967.976650][ T1461] binder: BINDER_SET_CONTEXT_MGR already set [ 967.976747][ T1464] binder: 1460:1464 unknown command 536871488 [ 967.983171][ T1461] binder: 1460:1461 ioctl 40046207 0 returned -16 [ 967.995812][ T1464] binder: 1460:1464 ioctl c0306201 20000440 returned -22 00:23:12 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) get_thread_area(&(0x7f0000000040)={0x3f, 0x20000000, 0x400, 0x225b, 0x2, 0x5, 0x3, 0x7, 0xd54, 0x4}) 00:23:12 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r0, &(0x7f00000000c0)=""/12, 0xc) 00:23:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x100000000000000, 0x0, 0x0}) 00:23:12 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0xdc, 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="020bd9010200000000004037000000006a365a1ed744c356897d899efa75347a8d3461499dbe35a187534d52b1c9a44ea10a1ae2418bfd23256635c9cdea2254ace1d4efbc4e2f82d94c79c749a7b7f8181b19c4ac3652d78317ee4ea3ec3422c5985764456d9f0977340addd45338430c5836e0c5f2c78b48b9478227dc9909e3a8e6cf471fdf443632226e882a942da7a0770494f4ff3a7450b927b1081ae6ecdc8b0bec04becfe51e1c12da81f688b2cd0685cf8be72d6b41cec91f15e6a780d57e"], 0x10}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000140)=0xe0, 0x4) recvmmsg(r0, &(0x7f0000000f00), 0x400000000000308, 0x10000, &(0x7f0000001000)={0x77359400}) 00:23:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000480018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:23:12 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x400041, 0x0) flistxattr(r0, &(0x7f00000000c0)=""/166, 0xa6) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x2, 0x2) write$FUSE_NOTIFY_DELETE(r1, &(0x7f00000001c0)={0x32, 0x6, 0x0, {0x3, 0x3, 0x9, 0x0, '/dev/ion\x00'}}, 0x32) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) [ 968.138821][ T1479] binder: 1470:1479 unknown command 536871488 [ 968.164642][ T1477] binder: BINDER_SET_CONTEXT_MGR already set [ 968.170700][ T1477] binder: 1474:1477 ioctl 40046207 0 returned -16 00:23:12 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x100, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f00000000c0)={'raw\x00', 0x48, "cb6d8affb5d89f2040112e6d1ec0a4c6441c9176da13ad38a40c10db2f96127ee8a2ee06d52f70cb30edb9dc15402058e6b11007ffda3250f38e435c3fcda100b805b3519e6e0958"}, &(0x7f0000000140)=0x6c) r1 = socket$inet6(0xa, 0x80005, 0xff) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0x0, 0xffff}}) [ 968.184225][ T1479] binder: 1470:1479 ioctl c0306201 20000440 returned -22 [ 968.289335][ T1487] binder: BINDER_SET_CONTEXT_MGR already set [ 968.296770][ T1482] binder: 1474:1482 unknown command 536871488 00:23:12 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240), 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000000c0), &(0x7f0000000100)=0x10) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x85) [ 968.339425][ T1487] binder: 1470:1487 ioctl 40046207 0 returned -16 [ 968.356746][ T1482] binder: 1474:1482 ioctl c0306201 20000440 returned -22 00:23:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0000000000004c0018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 968.481343][ T1500] binder: 1474:1500 unknown command 536871488 [ 968.502174][ T1500] binder: 1474:1500 ioctl c0306201 20000440 returned -22 00:23:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x200000000000000, 0x0, 0x0}) [ 968.538819][ T1514] binder: 1511:1514 unknown command 536871488 [ 968.573020][ T1514] binder: 1511:1514 ioctl c0306201 20000440 returned -22 [ 968.619160][ T1516] binder: BINDER_SET_CONTEXT_MGR already set [ 968.640548][ T1520] binder: 1511:1520 unknown command 536871488 [ 968.651711][ T1516] binder: 1515:1516 ioctl 40046207 0 returned -16 [ 968.663363][ T1520] binder: 1511:1520 ioctl c0306201 20000440 returned -22 [ 968.676949][ T1521] binder: 1515:1521 unknown command 536871488 [ 968.688639][ T1521] binder: 1515:1521 ioctl c0306201 20000440 returned -22 [ 968.709068][ T1516] binder: BINDER_SET_CONTEXT_MGR already set [ 968.717155][ T1521] binder: 1515:1521 unknown command 536871488 [ 968.739285][ T1516] binder: 1515:1516 ioctl 40046207 0 returned -16 [ 968.751363][ T1521] binder: 1515:1521 ioctl c0306201 20000440 returned -22 00:23:12 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x1100) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:23:12 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x10, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0xa3}) [ 968.846968][ T1523] vhci_hcd: invalid port number 0 00:23:13 executing program 5: semop(0x0, &(0x7f0000000040)=[{0x0, 0x8001, 0xfffffffffffffffe}], 0x2aaaaaaaaaaaabf5) r0 = semget(0x2, 0x1, 0x40) semop(r0, &(0x7f0000000000)=[{0x3, 0x0, 0x1000}, {0x0, 0x7, 0x1000}, {0x4, 0x9e22, 0x800}, {0x0, 0x101, 0x1000}, {0x3, 0x6, 0x800}, {0x0, 0x401, 0x800}], 0x6) r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x100000001, 0x4000) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000280)=0x7, 0x4) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000100)={0xff61, 0xdb1c, 0x8000, 0x0, 0x0, [], [], [], 0x4, 0x3}) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000300)) 00:23:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f00000000c0)=@ethtool_rxfh_indir={0x3c}}) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) fcntl$addseals(r0, 0x409, 0x1) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1, 0x3) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f00000000c0)) 00:23:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000600018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:23:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x300000000000000, 0x0, 0x0}) 00:23:13 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$kcm(0xa, 0x7, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) rename(0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_access\x00', &(0x7f00000001c0)=""/210, 0xd2) [ 969.128598][ T1533] binder: 1531:1533 unknown command 536871488 [ 969.148525][ T1533] binder: 1531:1533 ioctl c0306201 20000440 returned -22 [ 969.172889][ T1539] binder: BINDER_SET_CONTEXT_MGR already set [ 969.198305][ T1543] binder: 1531:1543 unknown command 536871488 [ 969.225242][ T1543] binder: 1531:1543 ioctl c0306201 20000440 returned -22 [ 969.240438][ T1539] binder: 1530:1539 ioctl 40046207 0 returned -16 00:23:13 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) r0 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x4, 0x101400) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x7234}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r1, @in6={{0xa, 0x4e23, 0xba7b, @mcast2, 0x6}}, 0xe4d, 0x400, 0x20df, 0x6, 0x4}, &(0x7f00000001c0)=0x98) semop(0x0, &(0x7f0000000200)=[{0x7, 0x7fff, 0x100c}], 0x1a7) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x80000, 0x0) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f00000000c0)={0x7, 0x1, 0x8001}) 00:23:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x400000000000000, 0x0, 0x0}) [ 969.324103][ T1546] binder: 1530:1546 unknown command 536871488 00:23:13 executing program 3: r0 = socket$kcm(0x2b, 0x7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904014865160b00014104000000000a00180e0006001500cd5edc2976d153b4", 0x2e}], 0x1}, 0x0) [ 969.390265][ T1546] binder: 1530:1546 ioctl c0306201 20000440 returned -22 [ 969.440590][ T1553] binder: 1552:1553 unknown command 536871488 [ 969.452128][ T1546] binder: 1530:1546 unknown command 536871488 [ 969.452412][ T1539] binder: BINDER_SET_CONTEXT_MGR already set [ 969.458243][ T1546] binder: 1530:1546 ioctl c0306201 20000440 returned -22 [ 969.475669][ T1553] binder: 1552:1553 ioctl c0306201 20000440 returned -22 00:23:13 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) r0 = semget(0x2, 0x1, 0x400) semop(r0, &(0x7f0000000040)=[{0x6, 0x81, 0x800}, {0x7, 0x6, 0x800}, {0x0, 0x4}, {0x6, 0x0, 0x800}, {0x2, 0x2, 0x1800}, {0x2, 0x6, 0x800}, {0x3, 0x20, 0x1800}, {0x2, 0x9, 0x800}, {0x1, 0x80000000, 0x1800}], 0x9) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) [ 969.500560][ T1560] binder: 1552:1560 unknown command 536871488 [ 969.510081][ T1539] binder: 1530:1539 ioctl 40046207 0 returned -16 [ 969.527816][ T1560] binder: 1552:1560 ioctl c0306201 20000440 returned -22 00:23:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000680018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:23:13 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x2000) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:23:13 executing program 3: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000001480)={0x0}, &(0x7f0000000140)=0xffffffffffffff9e) r1 = syz_open_procfs(r0, &(0x7f0000000040)='schedstat\x00') ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000080)=0x800) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000012c0)='TIPC\x00') ioctl$BLKTRACESTART(r1, 0x1274, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x28, r3, 0xb08, 0x70bd2a, 0x25dfdbfd, {{}, 0x0, 0x4102, 0x0, {0xc, 0x13, @l2={'ib', 0x3a, 'bpq0\x00'}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r4 = syz_open_procfs(r2, &(0x7f00000000c0)='environ\x00\x15\x1d\xecdt\xff\x86\xafhp\xd8\xb0U\xdd;D\xe5}fD=d\xef\xac[\x80\x10%2Y\xee*\xa1G\xbe.\x9d\xca\xb9[\xdc#\x19\x00'/62) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0xffffffffffffff27}, 0x68) preadv(r4, &(0x7f0000001700)=[{&(0x7f00000015c0)=""/184, 0xb8}, {&(0x7f0000000280)=""/4096, 0x1000}], 0x2, 0x0) rename(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='./file0\x00') ioctl$CAPI_NCCI_OPENCOUNT(r1, 0x80044326, &(0x7f00000013c0)=0x9e) [ 969.698035][ T1569] binder: 1568:1569 unknown command 536871488 [ 969.728497][ T1569] binder: 1568:1569 ioctl c0306201 20000440 returned -22 [ 969.740275][ T1572] binder: 1568:1572 unknown command 536871488 [ 969.757041][ T1572] binder: 1568:1572 ioctl c0306201 20000440 returned -22 00:23:13 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000040)=[{0x1, 0x80000000}, {0x1, 0x5, 0x1800}], 0x2) 00:23:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x500000000000000, 0x0, 0x0}) 00:23:13 executing program 2: semop(0x0, &(0x7f0000000000)=[{0xfffffffffffffffc, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x40000, 0x0) tee(r0, r0, 0x7f, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x40, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) write$P9_RLOPEN(r1, &(0x7f0000000180)={0x18, 0xd, 0x2, {{0x2, 0x0, 0x1}, 0x6}}, 0x18) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000140)) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000340)) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000000c0)=0xf4276) 00:23:13 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x10, 0x502) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000100)={0x20123, 0x4}) ioctl$TCGETX(r0, 0x5432, &(0x7f0000000000)) 00:23:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0000000000006c0018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 970.030632][ T1585] binder: 1583:1585 unknown command 536871488 [ 970.052762][ T1587] binder: BINDER_SET_CONTEXT_MGR already set [ 970.064589][ T1589] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 970.073544][ T1585] binder: 1583:1585 ioctl c0306201 20000440 returned -22 [ 970.107086][ T1595] binder: 1583:1595 unknown command 536871488 [ 970.125984][ T1587] binder: 1586:1587 ioctl 40046207 0 returned -16 00:23:14 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semget$private(0x0, 0x7, 0x100) semop(0x0, &(0x7f0000000040), 0x2aaaaaaaaaaaaac9) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000020}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4230000", @ANYRES16=r1, @ANYBLOB="2c002bbd7000fbdbdf251100000078000100340002000800040003000000080003000800000008000100130000000800030006000000080002000700000008000400000400002c0004001400010002004e24ac1e010100000000000000001400020002004e21ac14140f00000000000000001400010069623a76657468305f746f5f687372001c00090008000200edc2ffff080001000700000008000200040000001c0009000800010002000000080001001c0900000800010001040000"], 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x44010) fcntl$getownex(r0, 0x10, &(0x7f0000000480)={0x0, 0x0}) r3 = geteuid() r4 = getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000c40)={{{@in=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000d40)=0xe8) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000900)={@remote, @rand_addr, @empty}, 0xc) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f00000008c0)={0x1, 0xffffffff, 0x1, 0x0, 0x1c, 0x10000}) stat(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000002c0)={0x1a8, 0x1e, 0x10, 0x70bd2c, 0x25dfdbfd, "", [@generic="efc6136414ac013aa18bbc36acb633a56d877b94c29bce7c20bffba9f4721ac8822dc75951ae28a09e770e2d63524ca002e3e63e309461a0508711a0b4f2fe7fd9026ce451a2c566237428ae1475c652fc798899c1d8cdc6dade04ea8142f99c5c7a0c6374", @typed={0x8, 0x62, @u32=0x1}, @nested={0x8, 0x4e, [@typed={0x4, 0x2e}]}, @typed={0xcc, 0x8f, @binary="b38751cf7c08b1173fc1068ae675bb34bfc3d9050125fe3a49d4c0ccb68838ffa4f3853d831381a27bc041f4445a80a8b762d2b1e2f0063274073057116094b6b0ba0c794898cd7ffe380412fcd10fef642635a36892c0698d7dc460f26746bc4e82d49392bad3079bda0518115cc739edc9ab8c8bc607ded1caa7a06e6245f43a642c8d0adcf457af00f54eb54a0e3ec17a09960aaf053eb16fd83aff7dc2368c3e6a85a7a79045bdacfca9baaf81368790f86d8752d28926112a9f6aa21d81d77b2e6cf0fc273f"}, @generic="721e61702834ea14f369c15e27e95fcfc6c691c46305d270123cf5e1952071e2965d351f7b9f17746a508086734ec6e810df62b0a4ae9a9eb7c1506eb5b1aa74fc29fcf9f2f5decb9fe97f28b3f423ee808b10f73769fe"]}, 0x1a8}, {&(0x7f00000004c0)={0x3f4, 0x2c, 0x0, 0x70bd2b, 0x25dfdbfe, "", [@typed={0x4, 0x18}, @typed={0x8, 0x30, @fd=r0}, @typed={0x8, 0x62, @u32=0x8}, @nested={0x1f4, 0x93, [@typed={0xd0, 0x85, @binary="b15cee8860fbda2a46c9c781b8d0e3ffa76fafb192dca88dc6b860c4f283b4a7591ae00fcc8a9abe69c9db863bf81f41d2f8d41f7215be8cd3ac72449ddce5c9e658b49f53b14727cc1a38ef15d73d047f4e1fbc7906eba29cb25be41d62d206e1fd3fa554aa109c5d3379ef6b8d97201740ed03a3497f3f9f472d362354c8d48eca811cef9e860b047384f227c855f53005750ad20ec666d5c63408ad24fd95ead4c7b9d0bcd08a6bc2224f509efae400f29b803b7f3f0df116e22006cc9038b8733309a148fea75b2a13"}, @generic="e91ea1682e4992cdd667984527471ecd54d9dfbf9a370608d07351e7bca5bf9a2474aa15cc00ad73e15d6daca1c3309c846c5435bb71262bfba7aedcf2b51cf8f5354c5a14505b12decb30783eceb210e143945e2069bd0c24415a45b698c8047f86b7487e07456ff32c7fd256594b9beb86878e4656f305a7795fdb484c4ab5ee419020457e4adf3c0e2faaec0397b645a049738883e80611c896f4625bda6b171d151fbebaaeeab4bfa29ce5e8c8a68c15e24ecd2c6d29f127d0e504d933cd0e7856c45211145c26d9dd8e9a961dc733f712b2dcf0393efec28e14760f6020425e06", @typed={0x8, 0x93, @ipv4=@remote}, @typed={0x14, 0x7a, @ipv6=@dev={0xfe, 0x80, [], 0x13}}, @typed={0x8, 0x23, @pid=r2}, @generic="c8e84a8e27d54ef6d1bb1af651d2d2b47803a6f1509c04"]}, @nested={0xec, 0x1d, [@typed={0x4, 0x17}, @generic="e96db93b36a22a23ace4cc0fbe7d549a05373da3af90086281f50b55efd82a451359bd28acf3be3effc6d5c7f36193f41cece87cde65856d4225272fb8219c062f35ce8633e1ef53b64cfe25819f9d7ea8a679240982d7f62ca4d37ab6ed10f8241b5f9194d880f7b854df8f137037f62e8a4449a91d887d2320e1e7e75f0eb76d40412bb5c5d44229a1b51896f5d00b63a5c35c84f2f3167db06d5bcbb246326e56f724e09b75e9f993713227235c45b95d5cdd5f84c56382170fb6377ccd96669cb86f8e", @generic="bd5aa7cb70b890d95101e905179df3b2c1a1a27295f451444fe9d6ae"]}, @generic="0a57a4f6b8b0e1269a8b8435d4315c13be542c7d8d2426270761ba4ad0e06593f472b21995bfa70f9dcf8bb6b8e391cd3d573cc8b62e5fe582e49705140a48d530a9a0c2602ecf97c47d1a628d9cfddb7ae3be60fa3c9d765ff4c95fcad94c12273173c1ac9c0c5757785660ca2de1bee209d344f45acdfab1cf04b858f03afa15c5dfb4b4be4b4c3062e22783d2ee1e378f81585e16cbb9b6fd74f9387628f0dfd76ebccc6d6fed550d6045e9a414a01c8f7356a45926151689ad85ff6ab49ddf191467b3fb1426ceb5575c09ec778fd745d4ff88503c431aff6747119d0120aa4c4abd9ccb1aca9ac2d4c5a9"]}, 0x3f4}, {&(0x7f0000000ec0)=ANY=[@ANYBLOB="080300003c00000029bd7000ffdbdf253c001c004d59475b661aefbe407343e219cd891f7552090704cfecca47754e435b17db22e84e974f371060461775dd8b02fca408007d000b529a585a57895565e505aec3f6c23d831903f63b05a52b1769d2f9e1858e90208da91e3d9394bec0afe78b118689f4a2180554263253f601000000010000007ecc14c0629e5e4411b84c49ac6767baf999e150fb3b9e930c79867c35fa22c84321bb0243415fe42ef17cd82aec3c8b00d1de22c959d24ee6f600"/204, @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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"], 0x308}], 0x3, &(0x7f0000000e40)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}], 0x20, 0x40}, 0x4000) [ 970.157334][ T1595] binder: 1583:1595 ioctl c0306201 20000440 returned -22 [ 970.185254][ T1591] binder: 1586:1591 unknown command 536871488 [ 970.222275][ T1591] binder: 1586:1591 ioctl c0306201 20000440 returned -22 00:23:14 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000100)=0x5, 0x12) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x40000, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x2, 0x1, 0x2}}, 0x28) 00:23:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x600000000000000, 0x0, 0x0}) [ 970.350015][ T1587] binder: BINDER_SET_CONTEXT_MGR already set [ 970.391501][ T1591] binder: 1586:1591 unknown command 536871488 [ 970.422175][ T1587] binder: 1586:1587 ioctl 40046207 0 returned -16 00:23:14 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x80000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@remote}}, &(0x7f00000001c0)=0xe8) sendmsg$can_raw(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f00000002c0)={&(0x7f0000000280)=@can={{0x2, 0x1, 0x0, 0x5}, 0x5, 0x3, 0x0, 0x0, "76e937428779eab4"}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x4008000) [ 970.436060][ T1591] binder: 1586:1591 ioctl c0306201 20000440 returned -22 [ 970.486561][ T1609] binder: 1608:1609 unknown command 536871488 [ 970.516153][ T1609] binder: 1608:1609 ioctl c0306201 20000440 returned -22 00:23:14 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xc4, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001800)={'team0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080), 0x4) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f00000002c0)="030400000300600000000000fff5", 0xe, 0x0, 0x0, 0x0) [ 970.556666][ T1614] binder: 1608:1614 unknown command 536871488 [ 970.590423][ T1614] binder: 1608:1614 ioctl c0306201 20000440 returned -22 00:23:14 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x3f00) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:23:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000740018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 970.727621][ T1624] binder: 1623:1624 unknown command 536871488 [ 970.735573][ T1624] binder: 1623:1624 ioctl c0306201 20000440 returned -22 [ 970.747214][ T1626] binder: 1623:1626 unknown command 536871488 [ 970.761802][ T1626] binder: 1623:1626 ioctl c0306201 20000440 returned -22 00:23:15 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x20000, 0x0) connect$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0x3, @broadcast}}, 0x1e) 00:23:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x700000000000000, 0x0, 0x0}) 00:23:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x2, 0x100ffc) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000080)=0x6) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)={&(0x7f0000000200)='./file0\x00', r1}, 0xfffffffffffffc97) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) syz_open_procfs$namespace(r2, &(0x7f00000001c0)='ns/pid\x00') writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001000090468fe07002b0000000100ff0020000000450001070300001419001a00120002000e00010003000300"/57, 0x39}], 0x1) fcntl$setsig(r1, 0xa, 0x40) 00:23:15 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x319000, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000140)=0x2, 0x4) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f00000000c0)={0x2}) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000180)="0134cdaf8e23e8622d18a04f714f03ffafd58d1057eeb957a767c3d19503f5c8c08a6dbaa4d7e553c524a7") ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000001c0)) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) 00:23:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0000000000007a0018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:23:15 executing program 3: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x80000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@remote}}, &(0x7f00000001c0)=0xe8) sendmsg$can_raw(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f00000002c0)={&(0x7f0000000280)=@can={{0x2, 0x1, 0x0, 0x5}, 0x5, 0x3, 0x0, 0x0, "76e937428779eab4"}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x4008000) [ 971.153515][ T1640] binder: BINDER_SET_CONTEXT_MGR already set [ 971.155722][ T1638] binder: 1632:1638 unknown command 536871488 [ 971.159659][ T1640] binder: 1636:1640 ioctl 40046207 0 returned -16 00:23:15 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) write$UHID_INPUT(r0, &(0x7f0000000280)={0x8, "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", 0x1000}, 0x1006) 00:23:15 executing program 3: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x80000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@remote}}, &(0x7f00000001c0)=0xe8) sendmsg$can_raw(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f00000002c0)={&(0x7f0000000280)=@can={{0x2, 0x1, 0x0, 0x5}, 0x5, 0x3, 0x0, 0x0, "76e937428779eab4"}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x4008000) [ 971.255765][ T1640] binder: 1636:1640 unknown command 536871488 [ 971.289767][ T1638] binder: 1632:1638 ioctl c0306201 20000440 returned -22 [ 971.336639][ T1640] binder: 1636:1640 ioctl c0306201 20000440 returned -22 [ 971.377792][ T1655] binder: 1632:1655 unknown command 536871488 [ 971.409102][ T1640] binder: BINDER_SET_CONTEXT_MGR already set [ 971.409990][ T1657] binder: 1636:1657 unknown command 536871488 00:23:15 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000000c0)=ANY=[@ANYBLOB="62726f7574650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000deff00"/128], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeff00"/88], 0xc8) semop(0x0, &(0x7f0000000080), 0x2aaaaaaaaaaaacbf) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) read(r0, &(0x7f00000003c0)=""/21, 0x15) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x100, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000400)=0x1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') write$P9_RSYMLINK(r1, &(0x7f0000000380)={0x14, 0x11, 0x1, {0x28, 0x1, 0x2}}, 0x14) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x101, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8015) [ 971.419353][ T1655] binder: 1632:1655 ioctl c0306201 20000440 returned -22 [ 971.440659][ T1640] binder: 1636:1640 ioctl 40046207 0 returned -16 00:23:15 executing program 3: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x80000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@remote}}, &(0x7f00000001c0)=0xe8) sendmsg$can_raw(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f00000002c0)={&(0x7f0000000280)=@can={{0x2, 0x1, 0x0, 0x5}, 0x5, 0x3, 0x0, 0x0, "76e937428779eab4"}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x4008000) [ 971.504342][ T1657] binder: 1636:1657 ioctl c0306201 20000440 returned -22 00:23:15 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x4000) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:23:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x800000000000000, 0x0, 0x0}) [ 971.709705][ T1670] binder: 1668:1670 unknown command 536871488 [ 971.726037][ T1670] binder: 1668:1670 ioctl c0306201 20000440 returned -22 [ 971.755209][ T1675] binder: 1668:1675 unknown command 536871488 [ 971.761889][ T1675] binder: 1668:1675 ioctl c0306201 20000440 returned -22 [ 971.892842][ C0] net_ratelimit: 18 callbacks suppressed [ 971.892857][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 971.905435][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:23:16 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {0x0, 0x0, 0x1800}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0xfffffffffffffff8}], 0x1) eventfd(0x3) setxattr$security_smack_entry(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='secu\x00'/14, &(0x7f0000000940)='lovmnet0\x00', 0x9, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@initdev, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f00000001c0)=0xe8) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getuid() lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@loopback}}, &(0x7f00000005c0)=0xe8) r5 = getgid() init_module(&(0x7f0000000100)='system.posix_acl_access\x00', 0x18, &(0x7f0000000980)='\x00') lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0, 0x0}, &(0x7f0000000700)=0xc) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getgid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000800)={0x0, 0x0, 0x0}, &(0x7f0000000840)=0xc) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000880)={{}, {0x1, 0x3}, [{0x2, 0x3, r0}, {0x2, 0x0, r1}, {0x2, 0x0, r2}, {0x2, 0x4, r3}, {0x2, 0x3, r4}], {0x4, 0x7}, [{0x8, 0x4, r5}, {0x8, 0x5, r6}, {0x8, 0x4, r7}, {0x8, 0x2, r8}, {0x8, 0x7, r9}, {0x8, 0x1, r10}, {0x8, 0x6, r11}], {0x10, 0x1}, {0x20, 0x7}}, 0x84, 0x3) 00:23:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000318000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:23:16 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0x1, 0x2) write$P9_RVERSION(r0, &(0x7f00000023c0)=ANY=[@ANYBLOB='R'], 0x1) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)=[&(0x7f00000000c0)='/dev/dsp#\x00', &(0x7f0000000100)='\x00', &(0x7f0000000140)='/dev/dsp#\x00', &(0x7f0000000180)='eth0lo/*@vmnet0\x00', &(0x7f00000001c0)='/dev/dsp#\x00'], &(0x7f0000000480)=[&(0x7f0000000240)='bdev$*(em0\xbatrusted,\x00', &(0x7f00000002c0)='/dev/dsp#\x00', &(0x7f0000000340)='/dev/dsp#\x00', &(0x7f0000000380)='trusted@\x00', &(0x7f00000003c0)='/dev/dsp#\x00', &(0x7f0000000400)='/dev/dsp#\x00', &(0x7f0000000440)='/dev/dsp#\x00']) ioctl$int_in(r0, 0x80000000005001, 0x0) r1 = gettid() syz_open_dev$media(&(0x7f0000000540)='/dev/media#\x00', 0x0, 0x501000) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) write$P9_RSTATFS(r0, &(0x7f0000000040)={0xfffffffffffffeda, 0x9, 0x0, {0x0, 0x0, 0x0, 0x800000000000}}, 0x43) getsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f00000004c0)={@multicast1, @loopback, @empty}, &(0x7f0000000500)=0xc) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x15) 00:23:16 executing program 2: semop(0x0, &(0x7f0000000100)=[{0x2, 0xe85, 0x800}, {0x0, 0xdc8, 0x1800}, {0x4, 0x4e, 0x1800}], 0x3) r0 = semget$private(0x0, 0x6, 0x1) semop(r0, &(0x7f0000000040)=[{0x0, 0x80, 0x1800}, {}], 0x2) semget(0x3, 0x1, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x202800) semget(0x0, 0x2, 0x23a) r1 = semget(0x2, 0x7, 0x40d) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x10000, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r2, 0xc0c85666, &(0x7f0000000140)={{0x3, @name="50a3fcb4f547cd6e7de2b1d2ac78127da9237f3b55a816eb3a44b73e2aaa0f72"}, "63f7907f0d82504e483e0440e5a6ab3c1090c9ecfdf064ed5863c8fa25ed7178", 0x2}) semop(r1, &(0x7f00000000c0)=[{0x0, 0x7fff, 0xfff}], 0x1) 00:23:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x2000000000000000, 0x0, 0x0}) [ 972.117665][ T1681] binder: 1680:1681 unknown command 536871488 [ 972.142308][ T1686] binder: BINDER_SET_CONTEXT_MGR already set [ 972.149485][ T1681] binder: 1680:1681 ioctl c0306201 20000440 returned -22 [ 972.169020][ T1691] binder: 1680:1691 unknown command 536871488 [ 972.178811][ T1686] binder: 1685:1686 ioctl 40046207 0 returned -16 [ 972.194832][ T1691] binder: 1680:1691 ioctl c0306201 20000440 returned -22 [ 972.204998][ T1695] binder: 1685:1695 unknown command 536871488 00:23:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000518000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 972.242680][ T1695] binder: 1685:1695 ioctl c0306201 20000440 returned -22 00:23:16 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x422201, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f00000001c0)={'NETMAP\x00'}, &(0x7f0000000200)=0x1e) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x200800, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000000280)=""/149, &(0x7f0000000240)=0x95) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000000)=""/243, &(0x7f0000000100)=0xf3) prctl$PR_SET_PTRACER(0x59616d61, 0x0) [ 972.316700][ T1695] binder: 1685:1695 unknown command 536871488 [ 972.345591][ T1695] binder: 1685:1695 ioctl c0306201 20000440 returned -22 [ 972.394186][ T1700] binder: BINDER_SET_CONTEXT_MGR already set 00:23:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x3f00000000000000, 0x0, 0x0}) [ 972.444725][ T1703] binder: 1699:1703 unknown command 536871488 [ 972.460567][ T1704] IPVS: length: 243 != 24 [ 972.484525][ T1700] binder: 1699:1700 ioctl 40046207 0 returned -16 [ 972.498820][ T1704] IPVS: length: 243 != 24 [ 972.523653][ T1703] binder: 1699:1703 ioctl c0306201 20000440 returned -22 00:23:16 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x40000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 00:23:16 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x5800) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) [ 972.586811][ T1703] binder: 1699:1703 unknown command 536871488 [ 972.603729][ T1708] binder: BINDER_SET_CONTEXT_MGR already set [ 972.614324][ T1703] binder: 1699:1703 ioctl c0306201 20000440 returned -22 [ 972.622087][ T1708] binder: 1707:1708 ioctl 40046207 0 returned -16 [ 972.641506][ T1708] binder: 1707:1708 unknown command 536871488 [ 972.655596][ T1708] binder: 1707:1708 ioctl c0306201 20000440 returned -22 [ 972.670894][ T1708] binder: BINDER_SET_CONTEXT_MGR already set [ 972.678624][ T1710] binder: 1707:1710 unknown command 536871488 [ 972.684908][ T1708] binder: 1707:1708 ioctl 40046207 0 returned -16 00:23:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000618000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 972.708913][ T1710] binder: 1707:1710 ioctl c0306201 20000440 returned -22 [ 972.737337][ T1712] IPVS: ftp: loaded support on port[0] = 21 00:23:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x4000000000000000, 0x0, 0x0}) [ 972.848816][ T1717] binder: 1716:1717 unknown command 536871488 [ 972.864320][ T1717] binder: 1716:1717 ioctl c0306201 20000440 returned -22 [ 972.878109][ T1719] binder: 1716:1719 unknown command 536871488 [ 972.907408][ T1719] binder: 1716:1719 ioctl c0306201 20000440 returned -22 [ 972.917433][ T1721] binder: BINDER_SET_CONTEXT_MGR already set [ 972.934818][ T1721] binder: 1720:1721 ioctl 40046207 0 returned -16 [ 972.955184][ T1721] binder: 1720:1721 unknown command 536871488 [ 972.972924][ T1721] binder: 1720:1721 ioctl c0306201 20000440 returned -22 [ 973.003202][ T1726] binder: 1720:1726 unknown command 536871488 [ 973.012056][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 973.017875][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 973.022031][ T1726] binder: 1720:1726 ioctl c0306201 20000440 returned -22 00:23:17 executing program 5: socket$tipc(0x1e, 0x2, 0x0) semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000600)={{{@in=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000700)=0xe8) pipe(&(0x7f0000000740)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x19, 0x4, &(0x7f0000000040)=@raw=[@generic={0x9, 0xd4, 0xfffffffffffffc00, 0x3, 0x1}, @exit, @jmp={0x5, 0x80000000, 0xd, 0x7, 0x7, 0x20, 0x8}, @call={0x85, 0x0, 0x0, 0x44}], &(0x7f00000000c0)='GPL\x00', 0xfffffffeffffffff, 0x43, &(0x7f0000000100)=""/67, 0x40f00, 0x2, [], r0, 0x6, r1, 0x8, &(0x7f0000000780)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000007c0)={0x4, 0x1, 0x417, 0x800}, 0x10}, 0x70) 00:23:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000718000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:23:17 executing program 3: r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000000), 0x4) sendmsg$tipc(r0, &(0x7f0000003600)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10, 0x0}, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x9, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0xb000002) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/219, 0xdb}], 0x1, &(0x7f0000000340)=""/4096, 0x1000}, 0x0) 00:23:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x4800000000000000, 0x0, 0x0}) 00:23:17 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x100, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000000c0)={0x1000, 0x3, 0xff, 0x2000000000000000, 0x7, "2a8f3a65ed28df678d4d97ff473f2364e0272d", 0x6, 0x6}) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) 00:23:17 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000040)=0x3) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000080)={0x5, 'syz1\x00'}) r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x8000000000b, 0x1000000000000002) ioctl$TUNSETPERSIST(r1, 0x80045518, 0x716000) [ 973.180443][ T1738] binder: 1736:1738 unknown command 536871488 [ 973.185207][ T1733] binder: BINDER_SET_CONTEXT_MGR already set [ 973.215914][ T1738] binder: 1736:1738 ioctl c0306201 20000440 returned -22 [ 973.242522][ T1733] binder: 1729:1733 ioctl 40046207 0 returned -16 [ 973.245519][ T1744] binder: 1729:1744 unknown command 536871488 [ 973.267277][ T1747] binder: 1736:1747 unknown command 536871488 [ 973.287505][ T1747] binder: 1736:1747 ioctl c0306201 20000440 returned -22 00:23:17 executing program 2: semop(0x0, &(0x7f0000000000), 0x0) semop(0x0, &(0x7f0000000040)=[{0x0, 0x3, 0x7ff}], 0x1) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x200, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000080)) read$FUSE(r0, &(0x7f0000000280), 0x1000) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001280)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001380)={{{@in, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@broadcast}}, &(0x7f0000000200)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001480)={{{@in6=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @initdev}}, 0x0, @in=@remote}}, &(0x7f0000001580)=0xe8) r6 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000015c0)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f00000016c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001700)={{{@in=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000001800)=0xe8) stat(&(0x7f0000001840)='./file0\x00', &(0x7f0000001880)) stat(&(0x7f0000001900)='./file0\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000019c0)={{}, {0x1, 0x6}, [{0x2, 0x5, r1}, {0x2, 0x1, r3}, {0x2, 0x3, r4}, {0x2, 0x0, r5}, {0x2, 0x1, r6}, {0x2, 0x0, r7}, {0x2, 0x1, r8}, {0x2, 0x3, r2}], {0x4, 0x7}, [{0x8, 0x3, r9}], {0x10, 0x2}, {0x20, 0x3}}, 0x6c, 0x1) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) 00:23:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x4c00000000000000, 0x0, 0x0}) 00:23:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) [ 973.379267][ T1744] binder: 1729:1744 ioctl c0306201 20000440 returned -22 [ 973.471541][ T1744] binder: 1729:1744 unknown command 536871488 [ 973.515031][ T1756] binder: BINDER_SET_CONTEXT_MGR already set [ 973.533910][ T1744] binder: 1729:1744 ioctl c0306201 20000440 returned -22 [ 973.552473][ T1756] binder: 1754:1756 ioctl 40046207 0 returned -16 00:23:17 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x6000) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:23:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000002018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:23:17 executing program 2: ioctl$TIOCGPTPEER(0xffffffffffffff9c, 0x5441, 0xffffffffffff0001) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x800000000008032, r0, 0x0) mbind(&(0x7f0000769000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) mbind(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0xfffffffffffffffe, 0x0, 0x0, 0x10000000002) [ 973.578369][ T1761] binder: 1754:1761 unknown command 536871488 [ 973.617839][ T1761] binder: 1754:1761 ioctl c0306201 20000440 returned -22 [ 973.657737][ T1761] binder: 1754:1761 unknown command 536871488 [ 973.697882][ T1761] binder: 1754:1761 ioctl c0306201 20000440 returned -22 [ 973.717428][ T1769] binder: BINDER_SET_CONTEXT_MGR already set [ 973.775743][ T1769] binder: 1765:1769 ioctl 40046207 0 returned -16 [ 973.789923][ T1777] binder: 1765:1777 unknown command 536871488 [ 973.797928][ T1777] binder: 1765:1777 ioctl c0306201 20000440 returned -22 [ 973.813620][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 973.816660][ T1777] binder: 1765:1777 unknown command 536871488 [ 973.820289][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 973.830969][ T1777] binder: 1765:1777 ioctl c0306201 20000440 returned -22 [ 973.832941][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 973.844457][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 973.851481][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 973.857711][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:23:18 executing program 5: r0 = semget(0x2, 0x3, 0x100) semop(r0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x420080, 0x0) r2 = accept4$packet(0xffffffffffffff9c, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14, 0x80000) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000140)={r2}) 00:23:18 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc038563c, &(0x7f00000000c0)={0xb98}) r1 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r1, 0x2) accept4$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$USERIO_CMD_SEND_INTERRUPT(r2, 0x0, 0x0) 00:23:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x6000000000000000, 0x0, 0x0}) 00:23:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000003f18000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:23:18 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x4, 0x80000000, 0x100000000, 'queue0\x00', 0x4}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendfile(r1, r0, 0x0, 0x80000000) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8955, &(0x7f0000000000)=0x2) sendfile(r1, r0, 0x0, 0x80000000) [ 974.120104][ T1796] binder: 1794:1796 unknown command 536871488 [ 974.128312][ T1796] binder: 1794:1796 ioctl c0306201 20000440 returned -22 [ 974.166146][ T1803] binder: 1794:1803 unknown command 536871488 [ 974.172852][ T1801] binder: BINDER_SET_CONTEXT_MGR already set [ 974.190849][ T1803] binder: 1794:1803 ioctl c0306201 20000440 returned -22 [ 974.201780][ T1801] binder: 1793:1801 ioctl 40046207 0 returned -16 00:23:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000004018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 974.233002][ T1807] binder: 1793:1807 unknown command 536871488 [ 974.248690][ T1807] binder: 1793:1807 ioctl c0306201 20000440 returned -22 00:23:18 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000530295920080dbabbee8e2180001810000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 974.276558][ T1801] binder: 1793:1801 unknown command 536871488 [ 974.293137][ T1801] binder: 1793:1801 ioctl c0306201 20000440 returned -22 [ 974.304344][ T1810] binder: BINDER_SET_CONTEXT_MGR already set [ 974.312443][ T1810] binder: 1809:1810 ioctl 40046207 0 returned -16 00:23:18 executing program 3: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000040)='\x01\x1cP\xc6qb\xf3\xda$\x055X \xdc\x85)Ge\x9e\xc9~\xbcZ\xe6\x01yU\x83\xb3\xfd\x17\x90\x18\rM2G\x9b\x02\xd3W\xaa\xf6\x94\x14\x12\xbaO\xa04\xae5\x8f\xb0\xd6\xc6\xeb\xfa\x81\xb4w_\x8e\x808\xb7\xf7\xb8- !\xe4\x1b\x93\x94\xbd\x00\x00\x00\x00\x00\x00') [ 974.397298][ T1810] binder: 1809:1810 unknown command 536871488 00:23:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x6800000000000000, 0x0, 0x0}) [ 974.440140][ T1810] binder: 1809:1810 ioctl c0306201 20000440 returned -22 [ 974.492422][ T1818] binder: 1809:1818 unknown command 536871488 [ 974.498564][ T1818] binder: 1809:1818 ioctl c0306201 20000440 returned -22 [ 974.507874][ T1820] binder: BINDER_SET_CONTEXT_MGR already set [ 974.514369][ T1820] binder: 1819:1820 ioctl 40046207 0 returned -16 [ 974.524116][ T1820] binder: 1819:1820 unknown command 536871488 [ 974.530680][ T1820] binder: 1819:1820 ioctl c0306201 20000440 returned -22 00:23:18 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x40000) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:23:18 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr="f7f0e4e03238d8f15e81045dd1c33fde", 0x8}, @in={0x2, 0x4e22, @loopback}], 0x2c) r1 = dup3(r0, r0, 0x80000) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000200)) unshare(0x40000000) timer_gettime(0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_flowlabel\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x2cc) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) lsetxattr$security_ima(0x0, &(0x7f0000000280)='security.ima\x00', 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x2180, 0x0) ioctl$VIDIOC_ENUMSTD(r3, 0xc0485619, &(0x7f0000000240)={0x8, 0x1d000f, "b4bbb49515bb9acb425dd21cfa849f11897d079af6c9eda2", {0x5, 0x2}, 0x400}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f00000000c0)={0x0, 0x5, 0x4, 0x4020100, {0x0, r4/1000+30000}, {0x0, 0xc, 0x3, 0x0, 0x0, 0xfff, "a3d8f40e"}, 0x27, 0x3, @userptr=0x7, 0x4}) getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x40, 0x5}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000340)={r5, 0x8, 0x9}, 0x8) ioprio_get$pid(0x0, 0x0) pkey_free(0xffffffffffffffff) 00:23:18 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) getpeername(r2, &(0x7f0000000080)=@hci, &(0x7f0000000100)=0x80) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000a00)=[{{0x0, 0xfffffffffffffcba, 0x0}}], 0x1, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0x0) [ 974.571635][ T1820] binder: BINDER_SET_CONTEXT_MGR already set [ 974.588252][ T1824] binder: 1819:1824 unknown command 536871488 [ 974.609567][ T1820] binder: 1819:1820 ioctl 40046207 0 returned -16 [ 974.621300][ T1824] binder: 1819:1824 ioctl c0306201 20000440 returned -22 [ 974.770372][ T1826] IPVS: ftp: loaded support on port[0] = 21 00:23:19 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x80200, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000001c0)={r0}) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000180)={'caif0\x00', 0x2}) fcntl$dupfd(r0, 0x406, r0) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000002c00)={@empty, 0x0}, &(0x7f0000002c40)=0x14) sendmsg$inet(r0, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000280)="0f6cf8a12477ecae65bf42124e4699e88e54b7b47a3ddd56fb921693073dc65b7b14df7b180af72be5b58be980a60a4baf31b75724633f6dc6fb265465f7292a88febd347bd6af9623f8f38f2295d36533cbeb2cab16d3e5d1b624f269ad61a854a8", 0x62}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="f21c40813d453c40579ffd752145f6957590a06127c1f81bde3b63a2991397148b59cc7ff6078e1861800b604e75f89091fb9dffd66b910e99d38b5232cc61fe69cb0189c7fae1ec31fc253d96d92a36ea0e3479c5cf928eaa0255a59303eaf9b3e1e33f5c3ac6f05a6667ec6844e5c0dcdf638be1519fe147405566296470c087385de4fa92c7c215734d6b87ac5b149cb4ddc925f797f4960a7e5e142f44174f070e0c15f4b8", 0xa7}, {&(0x7f0000000200)="69f1f8f95a87004988efe09310e9a176e7733c5ca1b36b8560d8e14a4eca3c63389f826b", 0x24}, {&(0x7f00000013c0)="6bd87f5b35455405b4bd9a95b0", 0xd}, {&(0x7f0000001400)="eea868d563bee83db645a1d1464947432b0c08096776499bef4b4b54f376705c005b948fd2a941b642163c143c2d448f19177d1150c73183acc421460d3f19e110723aceff51a61775c8696ded0e1541d0439a9695790865e5cf50818a83c9f4161e5df247146a336073407cf0945dca17f9bd88ebfb41a93f7ba9258cc3f54342e5b23b41dded4684c90cdd708e43380e58983c8694ce5c234449f161350b5fe0aa77fbd1b2f04106692ece0697c8d920e195cd4ebeb3f4b81f6568d87778ba69f80ceebb732c313eeb81075494c2af65c99ad371395f652a6554b940e9be3c608ab9e2b23b2958556a39059f772183c64964", 0xf3}], 0x6, &(0x7f0000001580)=ANY=[@ANYBLOB="1100000000e700000000000001000000c10000000000000014000000000000000000000002000000318a0000000000001c000000000000", @ANYRES32=r1, @ANYBLOB="00000000ac1e000100000000140000000000003f00000000000000000000ffff0000000044000000000000000000000007000034384430ff00ac1414bb00000004ffff8000ac14142400000006ac1e00010000b921e00000020000000300000044000100010000000000000016ce999f00c69d9fec6b0a82938269adbb949d765fff59e1ab43f7ee27baaa70e7cb745e23770911c2fbac"], 0xb0}, 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3f, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3f}, 0x1c) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x200002, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f00000000c0)=0x7) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x86) 00:23:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000004818000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:23:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x6c00000000000000, 0x0, 0x0}) 00:23:19 executing program 3: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000180)='clear_refs\x00\xb0Ix\xe6\fK\xa3/\xd7\xb9IqK\xcb\xe8\fW\xafYt|a\xa3\x16\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1!$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xcaPx\xfcd\xd3\x8d\x1e\xff\xff\xff\xff\xff\xff\xff\xfe,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\x98\xfc\xbfX\x12\x97\xb3\x1b\xea\xfa\xff\xb7gx\xa1\x96\xad\x93\xaa=-z\x06r\b\'') r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000000080)='syscall\x00') sendfile(r1, r3, 0x0, 0x1) [ 975.135265][ T1842] binder: 1841:1842 unknown command 536871488 [ 975.141540][ T1842] binder: 1841:1842 ioctl c0306201 20000440 returned -22 [ 975.202819][ T1849] binder: BINDER_SET_CONTEXT_MGR already set [ 975.228202][ T1849] binder: 1840:1849 ioctl 40046207 0 returned -16 00:23:19 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x80500, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x40}}, 0x101, 0x3, 0x5, 0x10000, 0x8}, &(0x7f00000001c0)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x4, 0x8, 0x205, 0x80, 0xcfb, 0xfffffffffffffff8, 0x0, 0x2, r1}, &(0x7f0000000240)=0x20) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000300)={r2, 0x2}) ioctl$RTC_PIE_OFF(r0, 0x7006) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$int_out(r0, 0x2, &(0x7f0000000280)) r4 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0505510, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) [ 975.252592][ T1851] binder: 1841:1851 unknown command 536871488 [ 975.265692][ T1852] binder: 1840:1852 unknown command 536871488 [ 975.292031][ T1851] binder: 1841:1851 ioctl c0306201 20000440 returned -22 [ 975.306111][ T1852] binder: 1840:1852 ioctl c0306201 20000440 returned -22 [ 975.345242][ T1855] Unknown ioctl 35297 [ 975.361414][ T1855] Unknown ioctl 35125 00:23:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x7400000000000000, 0x0, 0x0}) [ 975.393595][ T1857] Unknown ioctl -1073191904 [ 975.424681][ T1857] Unknown ioctl 1074291755 [ 975.468079][ T1857] Unknown ioctl 28678 00:23:19 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x1000000) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) [ 975.488407][ T1846] binder: BINDER_SET_CONTEXT_MGR already set [ 975.495382][ T1861] binder: 1860:1861 unknown command 536871488 [ 975.516237][ T1849] binder: 1840:1849 unknown command 536871488 [ 975.517574][ T1846] binder: 1840:1846 ioctl 40046207 0 returned -16 [ 975.522724][ T1861] binder: 1860:1861 ioctl c0306201 20000440 returned -22 [ 975.531873][ T1857] Unknown ioctl -1073191904 [ 975.544127][ T1849] binder: 1840:1849 ioctl c0306201 20000440 returned -22 [ 975.544876][ T1830] IPVS: ftp: loaded support on port[0] = 21 [ 975.561415][ T1865] Unknown ioctl 1074291755 [ 975.571401][ T1865] Unknown ioctl 28678 [ 975.590096][ T1870] binder: 1860:1870 unknown command 536871488 [ 975.618327][ T1870] binder: 1860:1870 ioctl c0306201 20000440 returned -22 00:23:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x2) write$P9_RAUTH(r2, &(0x7f0000000040)={0x14, 0x67, 0x2, {0x4, 0x3, 0x2}}, 0x14) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000002840)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f0000000180)={0x1a0fffffffb, 0x0, @ioapic={0x120}}) 00:23:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000004c18000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:23:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x7a00000000000000, 0x0, 0x0}) [ 975.844581][ T1875] kvm: apic: phys broadcast and lowest prio [ 975.861302][ T1877] binder: 1876:1877 unknown command 536871488 [ 975.885792][ T1880] binder: BINDER_SET_CONTEXT_MGR already set [ 975.914629][ T1877] binder: 1876:1877 ioctl c0306201 20000440 returned -22 [ 975.936924][ T1880] binder: 1878:1880 ioctl 40046207 0 returned -16 [ 975.937381][ T1882] binder: 1878:1882 unknown command 536871488 [ 975.993372][ T1882] binder: 1878:1882 ioctl c0306201 20000440 returned -22 [ 976.028240][ T1883] binder: BINDER_SET_CONTEXT_MGR already set [ 976.028314][ T1884] binder: 1876:1884 unknown command 536871488 [ 976.098627][ T1882] binder: 1878:1882 unknown command 536871488 [ 976.107596][ T1884] binder: 1876:1884 ioctl c0306201 20000440 returned -22 [ 976.116014][ T1880] binder: BINDER_SET_CONTEXT_MGR already set [ 976.132634][ T1883] binder: 1876:1883 ioctl 40046207 0 returned -16 [ 976.169671][ T1880] binder: 1878:1880 ioctl 40046207 0 returned -16 [ 976.202975][ T1882] binder: 1878:1882 ioctl c0306201 20000440 returned -22 [ 977.172047][ C1] net_ratelimit: 12 callbacks suppressed [ 977.172057][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 977.184179][ C1] protocol 88fb is buggy, dev hsr_slave_1 00:23:21 executing program 2: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2, 0x0) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x9, 0x88040) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000100)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) dup2(r1, r2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000180)=0x0) fcntl$getownex(r3, 0x10, &(0x7f00000001c0)={0x0, 0x0}) kcmp(r4, r5, 0x3, r2, r2) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400, 0x0) ioctl$VT_WAITACTIVE(r6, 0x5607) r7 = gettid() r8 = dup3(r3, r0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r8, 0xab07, 0x8) tkill(r7, 0x401104000000016) 00:23:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x141000, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000200)=ANY=[@ANYRES16=r0], 0x1) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f00000020c0)=""/4096) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000040)={'mangle\x00', 0x2, [{}, {}]}, 0x48) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000001c0)={'teql0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) 00:23:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0xff00000000000000, 0x0, 0x0}) 00:23:21 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)) 00:23:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000006018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:23:21 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x3000000) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) [ 977.962252][ T1897] binder: 1896:1897 unknown command 536871488 [ 977.972077][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 977.977983][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 977.983968][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 977.989820][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 977.995698][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 978.001467][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:23:22 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x200, 0x0) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000300)=@ccm_128={{0x307}, "2e8e6d801e10c042", "e60ffa459588286e2b8f7cca4e7123cc", "00048f3a", "a60b11e64c64fa81"}, 0x28) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71001dc50000570000006e168dd26b4e", 0x10) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="000004000000000000000100000000000000024110cd0014001369623a73797a6b614d6c657230000000fd52910c5db66121a695e0ca3380fd211777e34c350d7e207f553a"], 0x1}}, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x178c) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000340)=0x40) io_setup(0x4e44, &(0x7f0000000540)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000380)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340)}]) r4 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xca9f, 0x40080) ioctl$PPPIOCGDEBUG(r4, 0x80047441, &(0x7f0000000040)) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f00000001c0)) ioctl$TUNSETOWNER(r4, 0x400454cc, r5) [ 978.018965][ T1897] binder: 1896:1897 ioctl c0306201 20000440 returned -22 [ 978.130735][ T1912] binder: 1896:1912 unknown command 536871488 [ 978.142533][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 978.148679][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 978.195562][ T1918] binder: 1900:1918 unknown command 536871488 [ 978.215207][ T1912] binder: 1896:1912 ioctl c0306201 20000440 returned -22 [ 978.243798][ T1918] binder: 1900:1918 ioctl c0306201 20000440 returned -22 00:23:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x604400, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000001800)={0x0, 0x822, 0x7, 0x5, 0x5, 0x1000}, &(0x7f0000001840)=0x14) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000001880)={0x0, 0x2}, &(0x7f00000018c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000001900)={0x0, 0xa28}, &(0x7f0000001940)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000003040)={0x0, 0x1}, &(0x7f0000003080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000030c0)={0x6, 0xf, 0x3ff, 0x1, 0x0}, &(0x7f0000003100)=0x10) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000003400)={0x0, 0x2, 0x2, 0xfffffffffffffffd, 0x7, 0x0, 0xed, 0x7fffffff, {0x0, @in6={{0xa, 0x4e22, 0x4, @mcast1, 0x800}}, 0x20, 0x1ff, 0x8, 0x9, 0x4}}, &(0x7f00000034c0)=0x19f) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000003500)={r7, 0xfffffffffffffff5}, &(0x7f0000003540)=0x8) dup3(r1, r0, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000003900)=[{&(0x7f0000000100)=@in6={0xa, 0x4e23, 0x6, @mcast2, 0x8001}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000140)="c438d17b97927294363c161e3bcce8483afce04fabd4a9e400bb807466da27d3b913a2ea92899490aa9c288a12f443010891115f9d570f2bf17cb52dc709bb741c80ca5a98ad0d1ff94d58ac6de92f25762edabdd94015e76e21c6d034a21aee8b16971432c069c229faf6d256f4959b368aa5d67de824545e97a7560d075ec754da5633399010c20cf6b6c76aaf36715c0c7eba1ad425679026f318e163629513e6150f6311beeddb5e89be885817fe188d751734676431a49c8057d278c8246b4f507ff46808323d7c683bf7f58e152712bf768f663db1e88767b66571ea547d495952622242b94860", 0xea}, {&(0x7f0000000240)="3b104f69c2d8500efdb7c95c113ab082eb11949ca3994e055530fbb7fd873b28d81f33b582deb3fb20911eccc027c5e728a6faf59984940a6069bfa09b86c3d239f7225759242b6799248b5a973f1353562ecf031ba11f206ff8184bf110b1450254e8e8b4cedb13b0dcacdf986561281d4778c5297fea374f8035947b1a9da88756cb3b0b6e7ab979cf8b3060f240c3bad73f7d3ce4ab7688214b32d8038d1383d1e3feed9dfeac7de10bc7602acdfa492d811234860ce37fa88af1a4924465619774bf0dc40178b0a39da59f94da5dbe778e", 0xd3}, {&(0x7f0000000340)="a5d0247884c7a804c731d3169acdf67a022a7c7419f481ffd8f97b0726a70ad49cdaaa60d3022d488794542ac62deff1783bd98c8767b915a4362f763afc4d4d1cf9fceb9c27940c", 0x48}, {&(0x7f00000003c0)="afb385eddee8308750d8e0081719bb190a7b4a99a026ee8299b77cef2d5f76d301999a9f722052a094b2a60092832a80b042ecbf1039f9342d72dc3259071acfcff1b148aa41c8c676ec02976cfb585fed1921ba30656d8545", 0x59}, {&(0x7f0000000440)="b7a02d11658174a6782bbee13381f015ef8078d05b10deddf500044e0a792759ea053406bcdfd08f9b820286b313c7e806ca96cff8ed64c94836abb99ddb58200d97b62a6ea3b0ecf1604df96616acb775c7e7804f228a5721f6c1e173cd979c72eacef359ad1988d1c68df479d71c6fff11ce909b6b752329b3933b3e8010ab496a8730ed633326c4ef700012f1faf5462aebf7ea3ead43fe558af9c667e5f1789efc4e2e8ec8726581835d2e8f39a8ecde62167e1a02d66cd25139b98e5548440e0e492f328e09102f8c2b34823ee3a592d161287fe3f4f2d4429559dc13569365be3bcf1a05c4101e36b1fd8a8416e2dcf32b646c", 0xf6}, {&(0x7f0000000540)="af96f9c22eea89d295d37793a29c006d2b86ffa411d310bc9ec9d40b5b1af83b838b28a0d41c77d8c1b96ff2b26903095c9929d96411666d3e5b63d6c0fb72aebcf1fb9eff05d7994bcdeab7e0a232a55ce787667d74be8236b4fea234cc30d729afce2efb91c6551e4f3d4b8b2ef8d2db70906ca32d8adc35a5a632d7e9fe33474eaf3fabaf1ffc12959f7499581321d531744606e13a", 0x97}, {&(0x7f0000000600)="b4b2ff98b932a86f198b03968c39ab8b826ba94b714477052e976c077accd55d73dd1088101735a6fce2f6383e6f1db278b04b117cd8974fc552ae0f55213e8a1670d73c62a6ebdaedff36af876b3ae7fc27566ed46d2dadcf1dc19629fbca943476cc6752e0091b224d251e90003035a3dee95a7434c737e7d2a23601a38dafdef3dd3c3c265bae1fb62101016f3272cb6ea6fb8d198e2420db47d4aefb03426ab1df72793d0291c79bb6976b6e870d2a5487", 0xb3}], 0x7, &(0x7f0000000740)=[@authinfo={0x18}], 0x18, 0x40000}, {&(0x7f0000000780)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000017c0)=[{&(0x7f00000007c0)="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", 0x1000}], 0x1, &(0x7f0000001980)=[@sndrcv={0x30, 0x84, 0x1, {0x8, 0x9, 0xc, 0x5, 0x9, 0x8, 0xffffffff, 0x3, r2}}, @sndinfo={0x20, 0x84, 0x2, {0x4, 0x9, 0x3, 0x81, r3}}, @sndrcv={0x30, 0x84, 0x1, {0x4a82, 0xfffffffffffffff9, 0x4, 0x1ff, 0x101, 0x7, 0x5, 0x8000, r4}}], 0x80, 0x20000000}, {&(0x7f0000001a00)=@in6={0xa, 0x4e20, 0x86f6, @loopback, 0x5ec9}, 0x1c, &(0x7f0000002fc0)=[{&(0x7f0000001a40)="569536d850904dce9b208ce355085e7b51ea1a2e22abb5520de18a1e45a34c1f3f4d28d06e488db3629b40707cdd8cca6d4986599eacb9391f1bc124c339a148e766ea213507f7ba74aec7e7f4255e7ab303896b0fc67a74b548953e06e1c63b81285456d65b534fe03d5f51742df1c83aeeac8421292024b3254b6a04ccb91654c8a9e8a35fb391d97dddc2d49b3b252718d773516631b0d948c627e7968bb9d1d48446d424f6608b3ef094c084ea835ba0e13026e1ffddb92090b29f93074cbf880e6a2ff2d677ee13de76c9ff45c08dd84840e208741eb61747cb7fa6203c8c358995187f7cfa", 0xe8}, {&(0x7f0000001b40)="eca61e117c96a6f0aed4ec14a69c8bd09fe42b10c0d2cde649fd0962928e86d5a7299817788fc830c20add9def6f96361beb24d87166b4d4be4f53a0a4160a2c01358d13b292a2104321412d50e8e03333ec0c4a717bb8d4fcc5857056ed71b2b1b3dc0cb79c403b2ea645c22fd3db801f77429925b929a20659526917c52342845f0e67aa433e5bb53d495117917fa41c9ffe7d579cfccf7de9a9b059f6540b8c329dbe90ad5abcde947e451d88b12c5354511540708651cfd18a2fd873656e965e147eeac7537f6b269f1adc8b856c2db4fbc27ee1af37a099a78e3f6e27e70c5db5cd8e623da7059fb2be154145e32a6ca2626ab292db", 0xf8}, {&(0x7f0000001c40)="5511cd5f66d3ee7bccedfa83119d51ca", 0x10}, {&(0x7f0000001c80)="b551b0ec01309c1dc21294f921f2ca79c6843bcdf5adaa4eac8db595d79871734b2cfd4050f7ce0a48adea21cd6b301f5f60ac5c2357c28044b8937b83c8ede1cb1c183e973e8fea2b71a877e95fb018ad5d48ed5c949f4fa4b33d89629410829f1eb0b388c4624dd3198cbff4135e5060bed528d6bdeb10d358c5b20ea576f94f418828ab2da6f76b0fcafdcafcb3b3d2f021f92cc9eaa023566d29a3e2d075b778cfc6d4e6a6f7987cf1e58b38bacc50982178b2cbc943f9f261954bfee42009a475782550ff131caa55c679eefb1aebd6e05ba5c3fd6d8d3459c9b9cb4264b992ecd817cb22560b", 0xe9}, {&(0x7f0000001d80)="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", 0x1000}, {&(0x7f0000002d80)="b2a1ad893d3e21058e577ac9e287e0e4111f4174bc8884ba0a950fbcd650d190825814d27914d0c3473e9d41579824130f6101b676f45f15a1e0a32fdca8a129998b58a66b5f7b1d08f0d4dd579d76385ca7d4e3b989483471c91b1229b9cc4f83c7b78dccdf65ab42d6ee823bec241a0ac68640dbd6742e5dfdf46a087ace69326fc91f6845d51d789c77a22e044d5de1949785d0f3be9157e0fc96a9ad46782c21c82e4cee850e69e5ca061729549e91b762eb0021495823eaa26d78f6003a71fd6b941db6f28b1ae86441f35e", 0xce}, {&(0x7f0000002e80)="796c0e7df71e4c39d26c1d56c3a0e7cce2cdfe4db8f6143cfdf3f809f6e82e1eba3b749ad403d22c66c4671cb76c8df311c290fa38ea9681d17ce7", 0x3b}, {&(0x7f0000002ec0)="aec0250fe620d11f5af56c87b1ea192a6cfbd45781f8fed55d68633f359c87d5cfc504f5d69972f115c61b99ae07123ae8d3b75b47a01bff09c30218b66c91416630a040bcd4912b212e2d159f33676fa5df8e06efbed30f84b0766d548dceaa1fec8846d93bb72b183d759ffc5f2dd2c1d0364a13054fb29e55b675d5b7f5c670cd67a59c2c703beda088f799054ad5d479a2004324a28f9d9c0d6259a72f105ed4941823aa43305f81a09ac5ae5b2da699bbd6fa81c8b4512f075dbffb5bc48aa075f7a70edf24", 0xc8}], 0x8, &(0x7f0000003140)=[@dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, [], 0xc}}, @sndinfo={0x20, 0x84, 0x2, {0x1, 0x201, 0x100000000, 0xfffffffffffffffe, r5}}, @sndinfo={0x20, 0x84, 0x2, {0xffffffff, 0x0, 0x4, 0xfffffffffffffff9, r6}}], 0x60, 0x2404c811}, {&(0x7f00000031c0)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f00000033c0)=[{&(0x7f0000003200)="b979a9f6f726134b80c42002c278438e1a1abf3344a55e5f2d77005bbfee0b7a7256dab7f7948441e123d1ecc1086465537ff8e6517e591e5ffc260e11fba88d44de74664e377c83317c4d86bacd6cd60067b7208b12737e93268b22e5030fee72366f23d6b2d275376d20fbb1d1f5f7124e24716539cac5f7f96a945fece4fc9cabb6985fcce9c72bfc3776d6ba09f6f09e5e50399103", 0x97}, {&(0x7f00000032c0)="b66bcb6ec94668181ff3588fa8ff206a75", 0x11}, {&(0x7f0000003300)="8169e678afff4c83cff2009d865bc7ed5ceacee6c2b55174074d6f2b5390d5285b9f6ccd80515276466d744ff50a9a5aeb2a323272434692f5f6ba2c14682e9fd846cbd1d8c5b9950b232de46a06032d6d06ba4e6c5e8643b396201916c44a4f19508c25005ae010507f47541ca2fbc04da1f67d5af5cfcb7b2d24316dd7f432df21", 0x82}], 0x3, &(0x7f0000003580)=[@sndrcv={0x30, 0x84, 0x1, {0x100, 0x2, 0x4, 0x2, 0x6, 0x8, 0x6, 0xfffffffffffffff7, r7}}, @sndrcv={0x30, 0x84, 0x1, {0x1, 0x8, 0x8008, 0x9, 0x0, 0x7, 0xff, 0x3, r8}}], 0x60, 0x40000c5}, {&(0x7f0000003600)=@in6={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, 0x1c, &(0x7f00000036c0)=[{&(0x7f0000003640)}, {&(0x7f0000003680)="64c021b30067b8bda753a1be9711b6832141baf601", 0x15}], 0x2, &(0x7f0000003700)=[@dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}}], 0x20, 0x90}, {&(0x7f0000003740)=@in={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000003880)=[{&(0x7f0000003780)="2d2bbbddd839e0436567ea3bad0228e583c245b5891bf70b47aa1ab10bb9ea0b6b772c536917a07f059ecc00074466b8165a793c6666d71345ae157782796037ba6eaf016a5d6cb0118cf1881a2ed23a8e54b748074f4a0f491f8cca6be735871bcb0fdc25fc105f372c89987429f4bbbad7f241fd084920bc5f3ba8c66e4053fd0bf4194da2ae17e05d76573b83ea6c25d709d4e531b2b65f7696f6114f7147111d99e31717c1379e13cc6740a742137fdbbbf821a847dd035df0e864642548c34e558ecd4e", 0xc6}], 0x1, &(0x7f00000038c0)=[@init={0x18, 0x84, 0x0, {0x6, 0xf4, 0x8, 0x7fffffff}}], 0x18, 0x20000045}], 0x6, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003640)=ANY=[@ANYBLOB="2400000033001901000000000000000002000000ffd38d9b0c0001007ae62d39de1c780800100004000f00"], 0x24}}, 0x0) 00:23:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000006818000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:23:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x0, 0x2, 0x0}) 00:23:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0xfffffffffffffff7, &(0x7f0000000040)="c0dca5055e0bcfec7be070") ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="24000000200007041dfffd946f6105000200000a1f0000030028080008000e0004000300", 0x24}], 0x1}, 0x0) [ 978.525589][ T1929] binder: 1928:1929 unknown command 536871488 00:23:22 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/dev\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000002200)=""/4096, 0x1000}], 0x1, 0x2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) [ 978.590310][ T1929] binder: 1928:1929 ioctl c0306201 20000440 returned -22 [ 978.593626][ T1931] binder: BINDER_SET_CONTEXT_MGR already set [ 978.664780][ T1931] binder: 1930:1931 ioctl 40046207 0 returned -16 [ 978.665289][ T1936] binder: 1930:1936 unknown command 536871488 [ 978.696327][ T1935] binder: 1928:1935 unknown command 536871488 [ 978.729585][ T1935] binder: 1928:1935 ioctl c0306201 20000440 returned -22 00:23:22 executing program 5: r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xbe2b, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@remote, @in6=@initdev}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xe8) semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x100000001, 0x200000) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000200)=0x0) write$FUSE_LK(r1, &(0x7f0000000100)={0x28, 0xffffffffffffffda, 0x4, {{0xfffffffffffffff9, 0x8, 0x1, r2}}}, 0x28) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000140)) socket$l2tp(0x18, 0x1, 0x1) 00:23:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000006c18000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:23:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000000)=0x1, 0x4) r1 = semget(0x1, 0x3, 0x244) semctl$IPC_RMID(r1, 0x0, 0x0) 00:23:22 executing program 3: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x80) r1 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x1000006ae6, 0x200040) getsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f00000000c0), &(0x7f0000000100)=0x4) dup2(r1, r1) r2 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000180)={0x0, 0x0, 0x1, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) [ 978.852233][ T1936] binder: 1930:1936 ioctl c0306201 20000440 returned -22 00:23:22 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x4000000) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) [ 978.909501][ T1936] binder: 1930:1936 unknown command 536871488 [ 978.945550][ T1950] binder: BINDER_SET_CONTEXT_MGR already set [ 978.945563][ T1936] binder: 1930:1936 ioctl c0306201 20000440 returned -22 00:23:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x0, 0x3, 0x0}) 00:23:23 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0x80045643, &(0x7f0000000200)={0x0, @pix_mp={0x613, 0x8, 0x737f777b, 0xe, 0x1, [{0x6, 0x1}, {0x0, 0x200}, {0x1f, 0x35df758d}, {0x0, 0x5}, {0x100000001, 0xffff}, {0x1f, 0x80000001}, {0x400, 0x6b6}, {0x5, 0x4}], 0x18, 0x3785, 0x6, 0x1, 0x3}}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x200100, 0x0) getpeername$unix(r1, &(0x7f0000000080), &(0x7f0000000100)=0x6e) [ 979.025097][ T1950] binder: 1949:1950 ioctl 40046207 0 returned -16 [ 979.025670][ T1961] binder: 1949:1961 unknown command 536871488 [ 979.081226][ T1961] binder: 1949:1961 ioctl c0306201 20000440 returned -22 00:23:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0) r1 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0) r2 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0) write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffcde) splice(r1, 0x0, r2, 0x0, 0x100000000803, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x9}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000240)={r3, 0xaa, "efb757104b75db310131741cb33c292d11241508be3fd30f584886b87dd4fe9aea2ce1fa7c7be4305fac7d518f0841ffb2f459c218f45b09962cdaaa6c1d5ccc22ecff4cb013c282bd1283db186bcc23fe4406c56a7e15b32138b21b83bc7eee46d3a0de25b76604968021bbc6aff398d94273a4ecbe5652fb1dd42f080b08a8b0ae36eadf46bea38e0cf5732b3266818cf5ceef17f5dc3c514689fab62dabb5d302c9c8df11945cda17"}, &(0x7f0000000100)=0xb2) ioctl(r0, 0x1f, &(0x7f0000000300)="f116509779b32b8a147f9b5dc2703d1bca9b2ce53a353aa3f8129e189daa17f7de8079949386f89cb5e8cdf38f6bd2113601dde2e5a7de4752fc31c46c4c21a881f4bfb72122447c5b555e3a1c7306558b235a0820870f05d335a56e03caf2e4fbf1184645b53282c368290be1e61095f5d195e959ea78b513492d2356bdbb0fbfb2da1f8eceebee75f8c338bd178a6901d3246a8fa136521b9b63e6cc0380c0929ec13d9ca324") ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") [ 979.185900][ T1969] binder: 1965:1969 unknown command 536871488 00:23:23 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xf, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000040)={0x3f, 0xfffffffffffffff8, 0xb7ea, 0x0, 0x4, 0x7}) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x180323}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f0000000280)=0xe8) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000002c0)=r1) [ 979.242177][ T1969] binder: 1965:1969 ioctl c0306201 20000440 returned -22 [ 979.305431][ T1974] binder: 1965:1974 unknown command 536871488 [ 979.331791][ T1961] binder: 1949:1961 unknown command 536871488 [ 979.345058][ T1961] binder: 1949:1961 ioctl c0306201 20000440 returned -22 [ 979.368337][ T1969] binder: BINDER_SET_CONTEXT_MGR already set [ 979.398351][ T1969] binder: 1965:1969 ioctl 40046207 0 returned -16 [ 979.442715][ T1974] binder: 1965:1974 ioctl c0306201 20000440 returned -22 [ 979.454078][ T1978] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub 00:23:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000007418000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:23:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x0, 0x4, 0x0}) [ 979.540168][ T1980] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub 00:23:23 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @initdev, @remote}, &(0x7f0000000040)=0xc) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000000c0)={@remote, 0x15, r1}) ioctl(r0, 0x400c4146, &(0x7f0000000300)="b0") [ 979.654228][ T1984] binder: 1983:1984 unknown command 536871488 [ 979.689059][ T1984] binder: 1983:1984 ioctl c0306201 20000440 returned -22 [ 979.732685][ T1986] binder: BINDER_SET_CONTEXT_MGR already set 00:23:23 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$NBD_SET_SOCK(r0, 0xab00, r0) setxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x0) getpeername$unix(r0, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x100, 0x0) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) [ 979.776988][ T1986] binder: 1985:1986 ioctl 40046207 0 returned -16 [ 979.797355][ T1992] binder: 1983:1992 unknown command 536871488 [ 979.830670][ T1991] binder: 1985:1991 unknown command 536871488 [ 979.883488][ T1992] binder: 1983:1992 ioctl c0306201 20000440 returned -22 [ 979.898480][ T1991] binder: 1985:1991 ioctl c0306201 20000440 returned -22 [ 979.914777][ T1986] binder: BINDER_SET_CONTEXT_MGR already set [ 979.921447][ T1991] binder: 1985:1991 unknown command 536871488 00:23:23 executing program 2: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000000)) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000200)={{0x4, 0x3002, 0xca33e5fe17e3318e, 0x800, 0x9, 0x7, 0x2, 0xe9d7, 0x3f, 0x0, 0x80, 0x5}, {0x10000, 0x110004, 0xd, 0x101, 0x6889, 0x40, 0x8, 0x800, 0xd54, 0xfffffffffffff258, 0xa9, 0x6}, {0x10000, 0x6, 0xe, 0xf19c, 0x400, 0x7, 0x6a, 0x6, 0x40, 0x8, 0xcae}, {0xf000, 0x0, 0xc, 0x3fba, 0x9, 0x6c, 0x40, 0xff, 0x3e532615, 0x1200000000, 0xfffffffffffffffd, 0x1f}, {0x106004, 0x197299d4be8e6fbd, 0x1e, 0xff, 0x4, 0x1f, 0x5c, 0x66, 0x7f, 0x80000000, 0x0, 0x7ff}, {0x4000, 0xf000, 0x9, 0x7, 0x1, 0x0, 0x359f, 0x0, 0x2, 0x80000001, 0x0, 0x5}, {0x6000, 0x0, 0xd, 0x9, 0x8000, 0x4, 0x3f, 0xffffffff, 0x100, 0x8, 0x1, 0xbb0}, {0xd000, 0x15000, 0x9, 0x0, 0x6, 0xcce9, 0x80000001, 0x7fffffff, 0x2, 0xfffffffffffffffd, 0x7, 0x2}, {0x3000, 0x1000}, {0x4}, 0x1, 0x0, 0x100000, 0x9, 0x6929458d, 0xa000, 0x3000, [0x7, 0x80000001, 0x86, 0x4]}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000100)={0x0, 0x0, 0x0, {0xd, @vbi}}) getpeername$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10) 00:23:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x0, 0x5, 0x0}) [ 979.928099][ T1986] binder: 1985:1986 ioctl 40046207 0 returned -16 [ 979.934749][ T1991] binder: 1985:1991 ioctl c0306201 20000440 returned -22 00:23:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000007a18000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 980.047229][ T2005] binder: 2003:2005 unknown command 536871488 [ 980.064432][ T2005] binder: 2003:2005 ioctl c0306201 20000440 returned -22 [ 980.088221][ T2008] binder: BINDER_SET_CONTEXT_MGR already set [ 980.104068][ T2011] binder: 2003:2011 unknown command 536871488 00:23:24 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x11000000) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:23:24 executing program 2: r0 = openat$full(0xffffffffffffff9c, 0x0, 0x40200, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x8, 0x70bd28}, 0x1c}}, 0x20000000) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) set_mempolicy(0x4002, &(0x7f0000000a80)=0xffffffffffffffff, 0xa) stat(0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x9) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) [ 980.136936][ T2013] binder: 2007:2013 unknown command 536871488 [ 980.138379][ T2008] binder: 2007:2008 ioctl 40046207 0 returned -16 [ 980.166444][ T2011] binder: 2003:2011 ioctl c0306201 20000440 returned -22 [ 980.190297][ T2013] binder: 2007:2013 ioctl c0306201 20000440 returned -22 00:23:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x0, 0x6, 0x0}) [ 980.308774][ T2021] binder: 2007:2021 unknown command 536871488 [ 980.352265][ T2021] binder: 2007:2021 ioctl c0306201 20000440 returned -22 00:23:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f00000000c0)={'tun\x00\x04\x9fP\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="00083c542d620f11000000000000000000000040800000000400"/44]}) recvfrom(r0, &(0x7f0000000100)=""/4096, 0x1000, 0x40, 0x0, 0x0) [ 980.442547][ T2023] binder: 2022:2023 unknown command 536871488 00:23:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="00000000000000ff18000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 980.497244][ T2023] binder: 2022:2023 ioctl c0306201 20000440 returned -22 00:23:24 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') readv(r0, &(0x7f0000000500), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x18f2, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) setxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4800) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x80, 0x100}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x3, 0x30, 0x2f9, 0xf800000}, &(0x7f00000001c0)=0x18) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000200)={r3, 0xa91, 0x5107, 0x4, 0x9ca, 0x3, 0x2, 0x5, {r4, @in6={{0xa, 0x4e23, 0x5, @empty, 0x8}}, 0x7, 0x0, 0x8, 0x100, 0x6}}, &(0x7f00000002c0)=0xb0) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) [ 980.587120][ T2030] binder: 2022:2030 unknown command 536871488 [ 980.606856][ T2032] binder: BINDER_SET_CONTEXT_MGR already set [ 980.613525][ T2032] binder: 2031:2032 ioctl 40046207 0 returned -16 [ 980.621513][ T2032] binder: 2031:2032 unknown command 536871488 [ 980.627875][ T2032] binder: 2031:2032 ioctl c0306201 20000440 returned -22 00:23:24 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x5, 0x2000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000200)={0x9, 0x108, 0xfa00, {r1, 0x92, "f10643", "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"}}, 0x110) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-cast6-avx\x00'}, 0x58) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) pause() ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000080)={'veth1_to\xb2nridge\x00', 0x7}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00', r0}, 0x10) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000380)={0x2000000a}) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340)='/proc/capi/capi20\x00', 0x2, 0x0) [ 980.641584][ T2032] binder: BINDER_SET_CONTEXT_MGR already set [ 980.648639][ T2033] binder: 2031:2033 unknown command 536871488 [ 980.654987][ T2032] binder: 2031:2032 ioctl 40046207 0 returned -16 [ 980.661666][ T2033] binder: 2031:2033 ioctl c0306201 20000440 returned -22 [ 980.665126][ T2030] binder: 2022:2030 ioctl c0306201 20000440 returned -22 00:23:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x0, 0x7, 0x0}) 00:23:24 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x500, 0x0) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f00000000c0)={{0x0, 0x1, 0x0, 0x966d, 0x7, 0x2, 0x1, 0x408, 0x66d0, 0x1ff, 0x400, 0x4c}, {0xd000, 0x13000, 0xf, 0x20, 0xffffffff, 0x3, 0x1f, 0x800, 0xff, 0xa85, 0x8}, {0x7000, 0x2002, 0x1a, 0x2, 0x0, 0xfff, 0x2, 0x1a0, 0x2, 0x6, 0x8, 0x11e1b3c}, {0x11f000, 0x2004, 0xb, 0x10000, 0x100000001, 0x4, 0x1ff, 0x8, 0x8, 0x7, 0x2, 0x100000000}, {0x5000, 0x6000, 0xb, 0x80000000, 0xd4cf, 0x100000000, 0x0, 0x3, 0x2, 0x52, 0x80, 0xffff}, {0xf002, 0x2, 0xf, 0x9, 0x7fff, 0x7, 0xffffffffffffff53, 0x40, 0xffffffff7fffffff, 0x7, 0x100000001, 0xfffffffffffffffa}, {0x15004, 0x0, 0x1f, 0x8, 0x1e3, 0x101, 0x101, 0x0, 0x6, 0x1000, 0x5, 0xfffffffffffff37d}, {0x0, 0x0, 0x8, 0x1, 0x7, 0x1, 0x4, 0x6, 0xfffffffffffffffd, 0x3, 0x7664e1cd, 0x4}, {0x4, 0x10000}, {0x10000, 0x6004}, 0x20000005, 0x0, 0x0, 0x30000, 0xf, 0x0, 0x0, [0x0, 0x3, 0xdb64, 0x8]}) listxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)=""/166, 0xa6) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000340)) 00:23:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000218000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 980.913741][ T2050] binder: BINDER_SET_CONTEXT_MGR already set [ 980.922638][ T2047] binder: 2045:2047 unknown command 536871488 [ 980.969349][ T2047] binder: 2045:2047 ioctl c0306201 20000440 returned -22 [ 980.985952][ T2050] binder: 2049:2050 ioctl 40046207 0 returned -16 [ 980.995411][ T2057] binder: 2049:2057 unknown command 536871488 [ 981.016017][ T2057] binder: 2049:2057 ioctl c0306201 20000440 returned -22 [ 981.032594][ T2061] binder: 2045:2061 unknown command 536871488 [ 981.038736][ T2061] binder: 2045:2061 ioctl c0306201 20000440 returned -22 00:23:25 executing program 2: syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x20000) r0 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x1, 0x200000) r1 = socket$caif_stream(0x25, 0x1, 0x5) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000180)={r1}) r2 = socket$inet(0x2, 0x3, 0x6) sendmmsg(r2, &(0x7f00000038c0)=[{{&(0x7f00000000c0)=@nl=@unspec, 0x80, 0x0}}, {{&(0x7f0000000000)=@nl=@unspec, 0xa, 0x0}}], 0x2, 0x0) 00:23:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x0, 0x8, 0x0}) 00:23:25 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x20000000) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) [ 981.065173][ T2057] binder: 2049:2057 unknown command 536871488 [ 981.085073][ T2050] binder: BINDER_SET_CONTEXT_MGR already set [ 981.103491][ T2050] binder: 2049:2050 ioctl 40046207 0 returned -16 [ 981.129903][ T2057] binder: 2049:2057 ioctl c0306201 20000440 returned -22 [ 981.147283][ T2067] raw_sendmsg: syz-executor.2 forgot to set AF_INET. Fix it! 00:23:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000318000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 981.175030][ T2069] binder: 2068:2069 unknown command 536871488 [ 981.187659][ T2069] binder: 2068:2069 ioctl c0306201 20000440 returned -22 00:23:25 executing program 2: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x204000, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000140)) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000180)=0x2, &(0x7f00000001c0)=0x1) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000200)=0x40) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000240)=""/127, &(0x7f00000002c0)=0x7f) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x9}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000380)={0x100000000, 0x200, 0x8, 0x7, 0x0, 0x2, 0x976, 0x1, r2}, 0x20) request_key(&(0x7f00000003c0)='rxrpc_s\x00', &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000440)='syz', r0) pwritev(r1, &(0x7f0000000a00)=[{&(0x7f0000000480)="3ea3cf9048968c5179c2174775f2c8044827b069e0e9fdc6c1a6c621f49891109e8a70790244910de2c1b9aa7e56fe98c9fd3681077b27a8be2fb50382abbc7797f1d8c0d799eb2642d9a022892b2cbb9db4430d6a8ed86a9bbd6b932ae371111596c7392fe5ef051464feb1556b7b6a066aa625dc8117d9ca39f793071a557a16d491efaea0f8a5d843a28db54d36fd0ef21ed9c69f8ddf21bda0d80c39b18d80294a1e2dd59e1324bd8d0d4819f42665158ed7601d9f2f48ead3b7adef73ea9b792f64ac3b14768dfb0eac79befd94", 0xd0}, {&(0x7f0000000580)="4f8be28a8f0d5d63203f06a1a4a42b00a818cb3a7fd8c6aba5215c68b55633b45856b7515f4316d61ef3a307157523db6a9e7049994091dcd9e20be7e6fdbc2c1cd056096b37b9e6a8697e917e532318090b52c14673c5bca63a932e3ebaf461f05983e4b972272d0a1c512d0959e98e800c533a61", 0x75}, {&(0x7f0000000600)="31a276588b103c7684b11e5250b5c1f54f94f948898c188c0292dc7f31df8394b4d261516b22e69f00f028ff33dfe4aba0adb2f740c9f77e3d54a27b3cf407f9dab6857ef6015e3cf7e9cb314d65e69a5346cafa088a0c35082fa48d12029f17062c1d1ff700ec62513baa6bca2c1843f7b156221e5a96", 0x77}, {&(0x7f0000000680)="6f1eabae135a6fa0b23c6e97923ebe0eb022d9a51f90858318f932bf2eb669c75b6fb618211ba9f0a5f3fc95fe3a32487f37fc17b8880f576570b1a5d62c37fb79def617755ca2fe0981daa4a8d9", 0x4e}, {&(0x7f0000000700)="3a3b04d11360db7cdfff24be46be6f477935823caf84b43cd1be5054490dce1828e898ef6e05c6696ec3e782ba417a800b4da365fdca1747c9ae99cec9534f3d08487e4f4126f93646972edfccbf1b3e6fcc12cc096b415dfd91b03c826deb8fa341d7a6a4884d6471f0f5935fa2458135e1f4998e29f7ac4bc13eff7885b87c4b3a6ca90a7b8573fd15e7da", 0x8c}, {&(0x7f00000007c0)="d4f174270608247e728698bccd1a9f96070f28cf6e3242ea9d2f358dc72691372baf7f2e2ac998632cc1298900bb1c9e6648e8e4a5a6628af62c52432881ed5e0756fa1d48ac45d3ba160725de077c09543b9173b9fa28e2a2337425df1d6707e6935bbaa5c6d1284b8bd6c734ae8c549aa827e1eb2c099271f31c53d30d8599a002c837127d8d1ed810d328990dd1a1", 0x90}, {&(0x7f0000000880)="92e55cef8b56e076e950fd62d9089800ae449590612e1ec5f69cdb10f9ccdf4f647a84f06e1e5c3ed2753868c399d648d95b292331e01c44545afc9d1525a9a785f87572e9d3db50b5c8468dbfacd61606934ddf1c7ca22ce45684b9252a3aa80922a3ab7a25b5a4aacc7f84d9f3dde363e3dbadf1defe0d525e5fd032e325a6361d559d1ec7fc", 0x87}, {&(0x7f0000000940)="d0ac7c1638eeac642305a33c08511b2dc816ba375f8f64dacb774a5a6c8a20083e10be19a33defdd7f5de709ec2eb17f206ab89055bce1b89bf310cdc2a0145ae6362196663e308bbf", 0x49}, {&(0x7f00000009c0)="99", 0x1}], 0x9, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000b00)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000bc0)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000000cc0)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e40)={'veth1_to_bond\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e80)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000026c0)={'vxcan1\x00', 0x0}) r8 = accept$packet(r1, &(0x7f0000002740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002780)=0x14) r10 = accept(r1, &(0x7f00000027c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0xfffffffffffffffe) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000002b00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20080000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002840)={0x250, r3, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x168, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r7}, {0xc4, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x2eb00d2d}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r11}}}]}}]}, 0x250}, 0x1, 0x0, 0x0, 0x50}, 0x20000000) socket$isdn(0x22, 0x3, 0x11) r12 = syz_genetlink_get_family_id$fou(&(0x7f0000002b80)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f0000002c40)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x16000800}, 0xc, &(0x7f0000002c00)={&(0x7f0000002bc0)={0x28, r12, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4840}, 0x1) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000002d80)={0x100000000, 0x6, 0x80000001, 0x3d, &(0x7f0000002c80)=""/61, 0x2, &(0x7f0000002cc0)=""/2, 0x68, &(0x7f0000002d00)=""/104}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000002dc0)=0x8) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000002e00)='mode\x00', 0x0, r10) fcntl$F_GET_FILE_RW_HINT(r8, 0x40d, &(0x7f0000002e40)) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000002e80)) write$nbd(r10, &(0x7f0000002ec0)={0x67446698, 0x1, 0x3, 0x3, 0x1, "456081106b0d8420a43785d8e285f60c822ca6edb49efeca6284137eaf62c553357c138d90a9b0f6db1aef705ff0be1e1e51f1991b3c964e3cd338aaf0f6e0871b7f23826e9ff82ee85f5734f4e1769141e1f055dc111630ef44ea0c016c39566271117d817a4d5a"}, 0x78) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000002f40)={0x0, 0x7, 0xfff, 0x3}) write$selinux_attr(r1, &(0x7f0000002f80)='system_u:object_r:iptables_unit_file_t:s0\x00', 0x2a) [ 981.279585][ T2069] binder: BINDER_SET_CONTEXT_MGR already set [ 981.298000][ T2076] binder: 2068:2076 unknown command 536871488 [ 981.309358][ T2069] binder: 2068:2069 ioctl 40046207 0 returned -16 00:23:25 executing program 2: r0 = pkey_alloc(0x0, 0x0) pkey_free(r0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) eventfd(0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd(0x7) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x6, 0x2}, 0x14) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r1, r2, 0x0) [ 981.366019][ T2081] binder: 2080:2081 unknown command 536871488 [ 981.384736][ T2081] binder: 2080:2081 ioctl c0306201 20000440 returned -22 [ 981.400937][ T2076] binder: 2068:2076 ioctl c0306201 20000440 returned -22 00:23:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x0, 0x48, 0x0}) [ 981.442672][ T2083] binder: 2080:2083 unknown command 536871488 [ 981.450688][ T2083] binder: 2080:2083 ioctl c0306201 20000440 returned -22 00:23:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000418000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 981.548966][ T2087] binder: 2086:2087 unknown command 536871488 [ 981.577924][ T2087] binder: 2086:2087 ioctl c0306201 20000440 returned -22 00:23:25 executing program 3: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f00000000c0)="2400000052001f00ff03f5f9002304050a04f5010800010040000000080002800100702a", 0x24) 00:23:25 executing program 2: r0 = socket$kcm(0x10, 0x800000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000001a008100a00f80ecdb4cb904024865160b000000d4126efb12001b4001010020e2000000180000000000", 0x2e}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000040)={r0}) [ 981.598413][ T2089] binder: BINDER_SET_CONTEXT_MGR already set [ 981.607280][ T2090] binder: 2086:2090 unknown command 536871488 [ 981.617343][ T2089] binder: 2088:2089 ioctl 40046207 0 returned -16 [ 981.631253][ T2090] binder: 2086:2090 ioctl c0306201 20000440 returned -22 [ 981.658027][ T2094] binder: 2088:2094 unknown command 536871488 [ 981.673931][ T2094] binder: 2088:2094 ioctl c0306201 20000440 returned -22 [ 981.681287][ T2093] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 981.719925][ T2089] binder: BINDER_SET_CONTEXT_MGR already set [ 981.734145][ T2093] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 981.760547][ T2094] binder: 2088:2094 unknown command 536871488 [ 981.792696][ T2089] binder: 2088:2089 ioctl 40046207 0 returned -16 [ 981.822863][ T2094] binder: 2088:2094 ioctl c0306201 20000440 returned -22 00:23:25 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) r0 = socket$tipc(0x1e, 0x5, 0x0) getsockname$tipc(r0, &(0x7f0000000040)=@name, &(0x7f00000000c0)=0x10) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) 00:23:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x0, 0x4c, 0x0}) 00:23:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f00000004c0)=@sack_info={0x0, 0x4}, &(0x7f0000000500)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000540)={0xd0, 0x80000000, 0x8, 0xffffffffffff411c, 0x2, 0x2, 0x80000001, 0x8b3, r4}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0x20003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x532]}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:23:25 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000140)=@v1={0x1000000, [{0x9, 0x9}]}, 0xc, 0x3) msgsnd(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b0000000000850700191c64f0d8ec2b801def37e5e2885d8acb320000166aaf35b9e58efd9e14206c92d9e780c63c2d7a3d4e9831067c1ad8dfd4324ba98ed1927375b640b17241e8035b05123285739c0297d8ae3e79c629d43945a1c62fc28e9ca83fe8bf2c8d83063503000000000000007bb3bd88c08cc117f7a31330f5eea2de590fff8a6fe92fb49e3e249b0784f9726926cf0b99839767f60514809dafbce994e8bd3c00"], 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb], 0x8000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 982.016787][ T2109] binder: 2104:2109 unknown command 536871488 [ 982.061323][ T2109] binder: 2104:2109 ioctl c0306201 20000440 returned -22 [ 982.124601][ T2109] binder: BINDER_SET_CONTEXT_MGR already set [ 982.145192][ T2116] binder: 2104:2116 unknown command 536871488 [ 982.165625][ T2109] binder: 2104:2109 ioctl 40046207 0 returned -16 00:23:26 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x3f000000) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:23:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000518000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:23:26 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000007000/0x2000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x8000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0xd}}, 0x20) write$P9_RSTATFS(r1, &(0x7f0000000100)={0x43, 0x9, 0x1, {0x9, 0x5a8, 0x7, 0x0, 0x4d68, 0xc0, 0x5, 0x3, 0x40}}, 0x43) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000009c0)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @ib={0x1b, 0x4, 0xffff, {"5f7510db792516bed9257454bac70981"}, 0x800, 0x1000, 0xff}}}, 0x90) process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940), 0x0, 0x0) [ 982.181036][ T2116] binder: 2104:2116 ioctl c0306201 20000440 returned -22 00:23:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x0, 0x60, 0x0}) [ 982.237424][ T2121] binder: 2120:2121 unknown command 536871488 [ 982.267853][ T2121] binder: 2120:2121 ioctl c0306201 20000440 returned -22 [ 982.298611][ T2128] binder: 2120:2128 unknown command 536871488 [ 982.302682][ C0] net_ratelimit: 19 callbacks suppressed [ 982.302706][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 982.311246][ T2128] binder: 2120:2128 ioctl c0306201 20000440 returned -22 [ 982.317065][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:23:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000618000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 982.374132][ T2131] binder: 2127:2131 unknown command 536871488 [ 982.401023][ T2131] binder: 2127:2131 ioctl c0306201 20000440 returned -22 00:23:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40000, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x2, 0x70bd25, 0x25dfdbff, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x9}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) poll(&(0x7f00000000c0)=[{r1}, {r0}], 0x2, 0x0) [ 982.438248][ T2134] binder: 2127:2134 unknown command 536871488 [ 982.461068][ T2134] binder: 2127:2134 ioctl c0306201 20000440 returned -22 00:23:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x0, 0x68, 0x0}) [ 982.504727][ T2137] binder: BINDER_SET_CONTEXT_MGR already set [ 982.534816][ T2137] binder: 2136:2137 ioctl 40046207 0 returned -16 [ 982.566844][ T2138] binder: 2136:2138 unknown command 536871488 [ 982.598953][ T2138] binder: 2136:2138 ioctl c0306201 20000440 returned -22 [ 982.655702][ T2138] binder: 2136:2138 unknown command 536871488 [ 982.665997][ T2143] binder: BINDER_SET_CONTEXT_MGR already set [ 982.678941][ T2138] binder: 2136:2138 ioctl c0306201 20000440 returned -22 [ 982.688783][ T2143] binder: 2140:2143 ioctl 40046207 0 returned -16 00:23:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000718000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 982.712116][ T2143] binder: 2140:2143 unknown command 536871488 [ 982.742379][ T2143] binder: 2140:2143 ioctl c0306201 20000440 returned -22 [ 982.816300][ T2145] binder: 2140:2145 unknown command 536871488 [ 982.902166][ T2145] binder: 2140:2145 ioctl c0306201 20000440 returned -22 [ 982.943323][ T2151] binder: BINDER_SET_CONTEXT_MGR already set 00:23:26 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) r0 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x8, 0x80102) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f00000000c0)={0xfffffffffffffff7, 0x1}) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) 00:23:26 executing program 3: r0 = socket$inet6(0xa, 0x100000000000001, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000000)) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x71, 0x0, 0x0) 00:23:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x0, 0x6c, 0x0}) [ 982.989789][ T2151] binder: 2148:2151 ioctl 40046207 0 returned -16 [ 982.994934][ T2155] binder: 2148:2155 unknown command 536871488 00:23:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0xa, 0x200000006, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) r2 = dup3(r1, r1, 0x80000) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x7e52c86a}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000000c0)={r3, 0x7}, &(0x7f0000000100)=0x8) setsockopt$inet6_opts(r1, 0x29, 0x6, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x7, 0x4, 0x4a8, 0x0, 0x140, 0x0, 0x3c0, 0x3c0, 0x3c0, 0x4, &(0x7f0000000000), {[{{@arp={@broadcast, @empty, 0xffffffff, 0xff000000, @mac=@random="db3b0f076ff5", {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0xff, 0x0, 0x0, 0xff]}, 0x7f37, 0x3, 0x5, 0x0, 0xfffffffffffffeff, 0x4, 'bcsh0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x20}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @multicast1, 0x0, 0xffffffff}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @empty, @broadcast, 0xf}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x0, 0xffffffff}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4f8) [ 983.128520][ T2155] binder: 2148:2155 ioctl c0306201 20000440 returned -22 [ 983.158664][ T2164] binder: 2162:2164 unknown command 536871488 [ 983.171167][ T2155] binder: BINDER_SET_CONTEXT_MGR already set [ 983.189449][ T2164] binder: 2162:2164 ioctl c0306201 20000440 returned -22 [ 983.204427][ T2166] binder: 2148:2166 unknown command 536871488 [ 983.210564][ T2166] binder: 2148:2166 ioctl c0306201 20000440 returned -22 00:23:27 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x40000000) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:23:27 executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000037000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffba) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f00000000c0)=0x0) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000100)=r2) [ 983.233423][ T2155] binder: 2148:2155 ioctl 40046207 0 returned -16 00:23:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000818000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 983.268099][ T2177] binder: 2162:2177 unknown command 536871488 [ 983.297520][ T2177] binder: 2162:2177 ioctl c0306201 20000440 returned -22 00:23:27 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x200000000003, 0x9e) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x1c102, 0x0) syz_emit_ethernet(0xfffffffffffffefb, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaa0caaaaaaaaaaaa08004500001c000000000002907800000000ffffffff11009078e00000013570061a4a05107b980be51f81e240bec21f1352cd147529bc2c235760ead6bf29df0022725b60598ba53b04e7d715f451821a9866a9e1b5738a7af6b9511c8af1185dfffe9db594dc93348b721c13d2f12128822c7f45860232630492a553f6680e21f90b843303a009bb178148354c6d54dc7c1eba542053e82f065a7a3e43cb02e180c0a8a557b9eddb47ba70bb7326a25eea7189e7ab80601c44c9a22154d772e80ec977768fd572478937d86288f43153847d99a08b64a2615423c2eecead68861f4ad176acf4bb2465"], 0x0) [ 983.412029][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 983.418131][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 983.433397][ T2183] binder: BINDER_SET_CONTEXT_MGR already set 00:23:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x0, 0x74, 0x0}) 00:23:27 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}], 0x1}}], 0x1, 0x0, 0x0) [ 983.461851][ T2183] binder: 2181:2183 ioctl 40046207 0 returned -16 [ 983.480560][ T2186] binder: 2181:2186 unknown command 536871488 [ 983.493412][ T2186] binder: 2181:2186 ioctl c0306201 20000440 returned -22 [ 983.543760][ T2186] binder: 2181:2186 unknown command 536871488 [ 983.568814][ T2186] binder: 2181:2186 ioctl c0306201 20000440 returned -22 00:23:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000004818000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 983.633713][ T2194] binder: BINDER_SET_CONTEXT_MGR already set [ 983.670328][ T2194] binder: 2191:2194 ioctl 40046207 0 returned -16 [ 983.701601][ T2197] binder: 2191:2197 unknown command 536871488 [ 983.725523][ T2197] binder: 2191:2197 ioctl c0306201 20000440 returned -22 [ 983.771762][ T2197] binder: 2191:2197 unknown command 536871488 [ 983.783931][ T2200] binder: BINDER_SET_CONTEXT_MGR already set [ 983.810919][ T2197] binder: 2191:2197 ioctl c0306201 20000440 returned -22 00:23:27 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x82) sendmmsg(r0, &(0x7f0000e8e000)=[{{&(0x7f00008b6000)=@in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x1}, 0x80, &(0x7f0000231ff0)=[{&(0x7f0000f89000)='t', 0x1}], 0x1}}], 0x1, 0x0) r1 = accept(r0, 0x0, &(0x7f0000000000)) listen(r0, 0x400000000007) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000040)={0x3004, 0x3000, 0x5, 0x400}) accept4(r0, &(0x7f00000000c0)=@nfc, 0x0, 0x0) [ 983.820934][ T2200] binder: 2199:2200 ioctl 40046207 0 returned -16 [ 983.850884][ T2201] binder: 2199:2201 unknown command 536871488 [ 983.887546][ T2201] binder: 2199:2201 ioctl c0306201 20000440 returned -22 00:23:27 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {0x3}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) 00:23:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x0, 0x7a, 0x0}) [ 983.962548][ T2201] binder: 2199:2201 unknown command 536871488 00:23:28 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1d98ffff2e000000350000001000000095000000000000006c0d2c563b7801c32aadc19ac40d8c1bb160fc2791bc8ea11d237ce5167d8e448b8a28c375b5a3077084d83f6962a549eb3574d87834fd336dc56116955f2a549b2263d324ab537b3349752e49fa65b3ba291043"], &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) [ 984.026666][ T2201] binder: 2199:2201 ioctl c0306201 20000440 returned -22 [ 984.088701][ T2213] binder: BINDER_SET_CONTEXT_MGR already set 00:23:28 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x58000000) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:23:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000004c18000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 984.139249][ T2213] binder: 2209:2213 ioctl 40046207 0 returned -16 [ 984.156445][ T2221] binder: 2209:2221 unknown command 536871488 [ 984.191025][ T2221] binder: 2209:2221 ioctl c0306201 20000440 returned -22 [ 984.212107][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 984.216380][ T2226] binder: 2225:2226 unknown command 536871488 [ 984.217987][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 984.224618][ T2226] binder: 2225:2226 ioctl c0306201 20000440 returned -22 00:23:28 executing program 3: syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x8, 0x40800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) recvmsg(r0, &(0x7f00000002c0)={&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)=""/94, 0x5e}, {&(0x7f0000000180)=""/192, 0xc0}], 0x2, &(0x7f0000000280)=""/30, 0x1e}, 0x20) read(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='pagemap\x00') sendfile(r0, r1, 0x0, 0x88001) [ 984.229922][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 984.242942][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 984.248891][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 984.254451][ T2227] binder: 2225:2227 unknown command 536871488 [ 984.254722][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 984.269420][ T2228] binder: 2209:2228 unknown command 536871488 [ 984.280490][ T2228] binder: 2209:2228 ioctl c0306201 20000440 returned -22 00:23:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") r3 = dup2(r1, r0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) [ 984.290125][ T2227] binder: 2225:2227 ioctl c0306201 20000440 returned -22 00:23:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x0, 0x300, 0x0}) 00:23:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000006018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:23:28 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x501800) read(r0, &(0x7f0000000140)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000340)={0x204000000bd, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0bc5310, &(0x7f00000002c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000480)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x38, 0x4, @tid=r1}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x4000, 0x0) tkill(r1, 0x1000000000013) ioctl$KVM_GET_CLOCK(r2, 0x8030ae7c, &(0x7f0000000040)) [ 984.578157][ T2243] binder: 2242:2243 unknown command 536871488 [ 984.584430][ T2243] binder: 2242:2243 ioctl c0306201 20000440 returned -22 [ 984.600422][ T2247] binder: 2242:2247 unknown command 536871488 [ 984.607352][ T2245] binder: BINDER_SET_CONTEXT_MGR already set [ 984.613492][ T2247] binder: 2242:2247 ioctl c0306201 20000440 returned -22 [ 984.620651][ T2245] binder: 2244:2245 ioctl 40046207 0 returned -16 00:23:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x0, 0x500, 0x0}) [ 984.640468][ T2245] binder: 2244:2245 unknown command 536871488 [ 984.656494][ T2245] binder: 2244:2245 ioctl c0306201 20000440 returned -22 [ 984.679612][ T2250] binder: 2244:2250 unknown command 536871488 [ 984.691051][ T2250] binder: 2244:2250 ioctl c0306201 20000440 returned -22 00:23:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000006818000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 984.748519][ T2252] binder: 2251:2252 unknown command 536871488 [ 984.761840][ T2252] binder: 2251:2252 ioctl c0306201 20000440 returned -22 [ 984.781002][ T2253] binder: 2251:2253 unknown command 536871488 [ 984.787645][ T2253] binder: 2251:2253 ioctl c0306201 20000440 returned -22 [ 984.810014][ T2255] binder: BINDER_SET_CONTEXT_MGR already set [ 984.830615][ T2255] binder: 2254:2255 ioctl 40046207 0 returned -16 [ 984.867709][ T2256] binder: 2254:2256 unknown command 536871488 [ 984.888351][ T2256] binder: 2254:2256 ioctl c0306201 20000440 returned -22 [ 984.906928][ T2256] binder: 2254:2256 unknown command 536871488 00:23:28 executing program 5: semget(0x1, 0x5, 0x100) semget(0x3, 0x5, 0x2) r0 = semget$private(0x0, 0x2, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x2, 0x1000}, {0x2, 0xa293, 0x1000}, {0x5, 0x7, 0x1000}, {0x2, 0xff, 0x800}, {0x1, 0x2, 0x800}], 0x2aaaaaaaaaaaac35) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) 00:23:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x0, 0x600, 0x0}) [ 984.926685][ T2256] binder: 2254:2256 ioctl c0306201 20000440 returned -22 00:23:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000006c18000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 985.015212][ T2260] binder: BINDER_SET_CONTEXT_MGR already set [ 985.053421][ T2260] binder: 2259:2260 ioctl 40046207 0 returned -16 [ 985.104094][ T2264] binder: 2259:2264 unknown command 536871488 [ 985.143064][ T2264] binder: 2259:2264 ioctl c0306201 20000440 returned -22 00:23:29 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x60000000) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:23:29 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000100)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc0000034}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x400, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0x4) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f00000000c0)) 00:23:29 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000480)='/dev/nullb0\x00', 0x2000, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[], 0xfffffffffffffecd) ioctl$VIDIOC_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f0000000240)={0x0, 0x0, [], {0x0, @reserved}}) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000), 0xfffffce4}]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$P9_RXATTRCREATE(r6, &(0x7f0000000180)={0x7, 0x21, 0x2}, 0x7) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000004c0)={{0x107, 0x3f, 0x5, 0x2bf, 0x17a, 0x7af, 0xdb, 0xdc}, "3d51897d375c35a45cd231", [[], [], [], [], [], [], [], []]}, 0x82b) mremap(&(0x7f0000b50000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004a5000/0x4000)=nil) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0xf) r8 = semget$private(0x0, 0x0, 0x48) semctl$SETALL(r8, 0x0, 0x11, &(0x7f00000000c0)=[0x8]) read(r7, 0x0, 0x0) [ 985.195739][ T2268] binder: 2265:2268 unknown command 536871488 [ 985.203307][ T2269] binder: 2259:2269 unknown command 536871488 [ 985.210989][ T2269] binder: 2259:2269 ioctl c0306201 20000440 returned -22 [ 985.229052][ T2268] binder: 2265:2268 ioctl c0306201 20000440 returned -22 00:23:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x0, 0x700, 0x0}) [ 985.264202][ T2268] binder: BINDER_SET_CONTEXT_MGR already set [ 985.276864][ T2271] binder: 2265:2271 unknown command 536871488 [ 985.311823][ T2268] binder: 2265:2268 ioctl 40046207 0 returned -16 [ 985.342207][ T2271] binder: 2265:2271 ioctl c0306201 20000440 returned -22 [ 985.397196][ T2281] binder: 2279:2281 unknown command 536871488 00:23:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000007418000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 985.463306][ T2281] binder: 2279:2281 ioctl c0306201 20000440 returned -22 [ 985.547078][ T2287] binder: 2279:2287 unknown command 536871488 [ 985.578578][ T2286] binder: BINDER_SET_CONTEXT_MGR already set [ 985.579625][ T2287] binder: 2279:2287 ioctl c0306201 20000440 returned -22 [ 985.624722][ T2286] binder: 2285:2286 ioctl 40046207 0 returned -16 [ 985.647282][ T2289] binder: 2285:2289 unknown command 536871488 00:23:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x0, 0x2000, 0x0}) [ 985.692112][ T2289] binder: 2285:2289 ioctl c0306201 20000440 returned -22 [ 985.779261][ T2290] binder: 2285:2290 unknown command 536871488 [ 985.832338][ T2290] binder: 2285:2290 ioctl c0306201 20000440 returned -22 [ 985.842207][ T2292] binder: 2291:2292 unknown command 536871488 [ 985.869829][ T2292] binder: 2291:2292 ioctl c0306201 20000440 returned -22 [ 985.959018][ T2294] binder: 2291:2294 unknown command 536871488 [ 986.032089][ T2294] binder: 2291:2294 ioctl c0306201 20000440 returned -22 [ 987.572046][ C1] net_ratelimit: 12 callbacks suppressed [ 987.572055][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 987.583602][ C1] protocol 88fb is buggy, dev hsr_slave_1 00:23:31 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000480)='/dev/nullb0\x00', 0x2000, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[], 0xfffffffffffffecd) ioctl$VIDIOC_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f0000000240)={0x0, 0x0, [], {0x0, @reserved}}) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000), 0xfffffce4}]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$P9_RXATTRCREATE(r6, &(0x7f0000000180)={0x7, 0x21, 0x2}, 0x7) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000004c0)={{0x107, 0x3f, 0x5, 0x2bf, 0x17a, 0x7af, 0xdb, 0xdc}, "3d51897d375c35a45cd231", [[], [], [], [], [], [], [], []]}, 0x82b) mremap(&(0x7f0000b50000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004a5000/0x4000)=nil) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0xf) r8 = semget$private(0x0, 0x0, 0x48) semctl$SETALL(r8, 0x0, 0x11, &(0x7f00000000c0)=[0x8]) read(r7, 0x0, 0x0) 00:23:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000007a18000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 00:23:31 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x0, 0x3f00, 0x0}) 00:23:31 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0xeffdffff) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:23:31 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000480)='/dev/nullb0\x00', 0x2000, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[], 0xfffffffffffffecd) ioctl$VIDIOC_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f0000000240)={0x0, 0x0, [], {0x0, @reserved}}) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000), 0xfffffce4}]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$P9_RXATTRCREATE(r6, &(0x7f0000000180)={0x7, 0x21, 0x2}, 0x7) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000004c0)={{0x107, 0x3f, 0x5, 0x2bf, 0x17a, 0x7af, 0xdb, 0xdc}, "3d51897d375c35a45cd231", [[], [], [], [], [], [], [], []]}, 0x82b) mremap(&(0x7f0000b50000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004a5000/0x4000)=nil) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0xf) r8 = semget$private(0x0, 0x0, 0x48) semctl$SETALL(r8, 0x0, 0x11, &(0x7f00000000c0)=[0x8]) read(r7, 0x0, 0x0) 00:23:31 executing program 5: r0 = eventfd2(0x9, 0x1) fcntl$getownex(r0, 0x10, &(0x7f0000000180)) r1 = syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000005c0)=[@in6={0xa, 0x4e23, 0xffffffffffffffe1, @dev={0xfe, 0x80, [], 0x28}, 0xffffffffffffffe0}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x3c) semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) r2 = socket$kcm(0x29, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000040)=0x7) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f0000000100)={0x7ff, 0x0, 0x300f, 0x2, 0x2, 0xffff, 0x3f, 0x1}) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000003c0)={0x0, 0x101}, &(0x7f0000000400)=0x8) ioctl$VIDIOC_G_JPEGCOMP(r4, 0x808c563d, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000440)={r5, 0x6, 0x3, 0x27e2}, &(0x7f0000000480)=0x10) fcntl$addseals(r3, 0x409, 0x2) ioctl$TIOCGISO7816(r4, 0x80285442, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000280)={0x0, 0xd4, "4bb5bfa1e35b6e1fb753d8e94d9720005ac9d302ec8669f87b7ab73fccaaa6185f301cf0ffc9ef53c5910b9d09a33e26731291c94b77659783f2100effa024f28298cecc650e328bfb47657a4a3a82515c23dd0ed587db1464b66b910a956bda314671dc66a700ae04003b4f17949b1cf298328c64c6d81e99c08a0fc30e9ca2946499b3b7457f3fe3a0348d2f379b5691b382b2722f67c9ec02d09c20b502aa71758ea57095cf99207596b89f9524f1f7e337e790639922504762819886362800b6e51728db93a2232a5ceddccc64a88754c179"}, &(0x7f00000001c0)=0xdc) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000600)={0x7ff, 0x7, 0x5, 0x220, 0x1000, 0x2, 0xa}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000200)={r6, 0x28, "f79a18d129baf3dde7eb3cae6aa366024898b61e6384b2fce38531af5ef9d7b52fb7c04d3dcb59aa"}, &(0x7f0000000380)=0x30) [ 987.702222][ T2304] binder: 2302:2304 unknown command 536871488 [ 987.718261][ T2312] binder: BINDER_SET_CONTEXT_MGR already set [ 987.742996][ T2304] binder: 2302:2304 ioctl c0306201 20000440 returned -22 [ 987.763704][ T2318] binder: 2305:2318 unknown command 536871488 [ 987.772902][ T2312] binder: 2305:2312 ioctl 40046207 0 returned -16 [ 987.791065][ T2319] binder: 2302:2319 unknown command 536871488 [ 987.811690][ T2319] binder: 2302:2319 ioctl c0306201 20000440 returned -22 [ 987.817413][ T2318] binder: 2305:2318 ioctl c0306201 20000440 returned -22 00:23:31 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0xf5ffffff) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:23:31 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x0, 0x4000, 0x0}) [ 987.910653][ T2318] binder: 2305:2318 unknown command 536871488 [ 987.949591][ T2318] binder: 2305:2318 ioctl c0306201 20000440 returned -22 00:23:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00/\x00\x00\x00\x00\x00\x00\x000\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) [ 988.057005][ T2324] binder: 2321:2324 unknown command 536871488 [ 988.075782][ T2324] binder: 2321:2324 ioctl c0306201 20000440 returned -22 [ 988.097176][ T2329] binder: 2321:2329 unknown command 536871488 00:23:32 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0xfffffdef) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) [ 988.105911][ T2329] binder: 2321:2329 ioctl c0306201 20000440 returned -22 [ 988.120607][ T2330] binder: BINDER_SET_CONTEXT_MGR already set [ 988.137058][ T2330] binder: 2328:2330 ioctl 40046207 0 returned -16 [ 988.147513][ T2330] binder: 2328:2330 unknown command 536871488 00:23:32 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x0, 0x4800, 0x0}) [ 988.155809][ T2330] binder: 2328:2330 ioctl c0306201 20000440 returned -22 [ 988.177292][ T2333] binder: 2328:2333 unknown command 536871488 [ 988.190500][ T2333] binder: 2328:2333 ioctl c0306201 20000440 returned -22 00:23:32 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0xffffff7f) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:23:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x44000, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x3, @ipv4=@multicast1=0xa000000}]}]}, 0x24}}, 0x0) 00:23:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00E\x00\x00\x00\x00\x00\x00\x000\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) [ 988.218352][ T2336] binder: BINDER_SET_CONTEXT_MGR already set [ 988.236575][ T2336] binder: 2334:2336 ioctl 40046207 0 returned -16 [ 988.296045][ T2338] binder: 2337:2338 unknown command 536871488 [ 988.319843][ T2338] binder: 2337:2338 ioctl c0306201 20000440 returned -22 [ 988.327562][ T2343] binder: 2334:2343 unknown command 536871488 [ 988.343427][ T2344] binder: 2337:2344 unknown command 536871488 [ 988.349669][ T2344] binder: 2337:2344 ioctl c0306201 20000440 returned -22 [ 988.372045][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 988.377982][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 988.383912][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 988.389795][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:23:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x000\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) 00:23:32 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000480)='/dev/nullb0\x00', 0x2000, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)=ANY=[], 0xfffffffffffffecd) ioctl$VIDIOC_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f0000000240)={0x0, 0x0, [], {0x0, @reserved}}) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000), 0xfffffce4}]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$P9_RXATTRCREATE(r6, &(0x7f0000000180)={0x7, 0x21, 0x2}, 0x7) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000004c0)={{0x107, 0x3f, 0x5, 0x2bf, 0x17a, 0x7af, 0xdb, 0xdc}, "3d51897d375c35a45cd231", [[], [], [], [], [], [], [], []]}, 0x82b) mremap(&(0x7f0000b50000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004a5000/0x4000)=nil) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0xf) r8 = semget$private(0x0, 0x0, 0x48) semctl$SETALL(r8, 0x0, 0x11, &(0x7f00000000c0)=[0x8]) read(r7, 0x0, 0x0) [ 988.395744][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 988.401539][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 988.410040][ T2349] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 988.417847][ T2343] binder: 2334:2343 ioctl c0306201 20000440 returned -22 [ 988.464822][ T2352] binder: 2334:2352 unknown command 536871488 [ 988.507094][ T2352] binder: 2334:2352 ioctl c0306201 20000440 returned -22 [ 988.518528][ T2353] binder: 2350:2353 unknown command 536871488 [ 988.532073][ C0] protocol 88fb is buggy, dev hsr_slave_0 00:23:32 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) r0 = accept4$tipc(0xffffffffffffff9c, &(0x7f0000001540)=@name, &(0x7f0000001580)=0x10, 0x80000) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/sequencer2\x00', 0x8000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000001600)={0xffffffffffffffff}, 0x13f, 0xe}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000001680)={0x6, 0x118, 0xfa00, {{0x46, 0x9, "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", 0x17, 0x7fffffff, 0x0, 0x1, 0x4, 0xd3e3, 0x8, 0x1}, r2}}, 0x120) timer_create(0x4, &(0x7f0000001800)={0x0, 0x3a, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000001840)=0x0) timer_gettime(r3, &(0x7f0000001880)) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f00000017c0)) semop(0x0, &(0x7f0000000240), 0x0) r4 = fanotify_init(0x0, 0x400) preadv(r4, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/14, 0xe}, {&(0x7f00000000c0)=""/1, 0x1}, {&(0x7f0000000100)=""/105, 0x69}, {&(0x7f0000000180)=""/81, 0x51}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/251, 0xfb}, {&(0x7f0000001300)=""/155, 0x9b}, {&(0x7f00000013c0)=""/255, 0xff}], 0x8, 0x0) [ 988.552487][ T2353] binder: 2350:2353 ioctl c0306201 20000440 returned -22 00:23:32 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00Y\xc6\x8b*\x8cU&\xf5\fI2\x02fs\xd2\xe6*dM\x16>B*R\xcd,\xa0\x00.\x9d\xfd\x13$b\xf7\xfa\xe2\xd8\xab_\xcd5\\LT\xf9\x8a\xcc\xc3C%=\xa7\xb6\xe8\xec\x9f\xcd\xf6\xdb+H\x8a\xf7\xc4\xec\x04\xedo\xe0\xa2\x84\xcb\x81\xcf\xd6\xa3qv\xcaFB\xd1\xc6F/\xecw\x99\xb9\x00\xfeI\vtp\xe9\x85\b\bFF\v\xab\x1c\xc57z\xdb<-\xfb\xf5\x82\xd0\x94n2\xc2\xe1\xf8\x06\x06k\fFv\xb8\xbfm\xa6\xe6\x1c\xc0\xa6\xdb\xc41Q\xc1ZJa%\x062\xfc\xa3\x9ae\xabO\xabvSfq\x80\x9d\xe8\x0f5+\xee2\xf1\x1eE\xf5W\xca\xad /\xd3\xc0\x81\x9at\xcc\x89N\x1c;J\xcb\x96G\xd7\xcbxF\xa2\bPO\x8b\xc6\xcci9\x8dB_\xec\x14B \xaf\x06m\xf8\x94', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000100), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x1c) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {0x4000000000000, 0x200000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0xfffffff5) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 00:23:32 executing program 2: r0 = socket(0x10, 0x3, 0x0) connect$vsock_dgram(r0, &(0x7f0000000080)={0x28, 0x0, 0x2711, @hyper}, 0x10) write(r0, &(0x7f0000000180)="1c0000001e005f0014f9f407000904000a0000000100000000000000", 0x1c) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x34f, 0x9, [0x1, 0x3f, 0x2, 0x0, 0x7, 0xffff, 0x1, 0x1, 0x0]}, &(0x7f00000001c0)=0x1a) r3 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x1, 0x2) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="68db6c00"], &(0x7f0000000240)=0x12) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={r2, 0x401, 0x7, 0x20, 0x4, 0x1, 0x4, 0x1, {r4, @in={{0x2, 0x4e22, @remote}}, 0x1800000, 0xfffffffffffffffd, 0x7ff, 0x1, 0x7}}, &(0x7f0000000340)=0xb0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x4b7, 0x1, 0x4}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/autofs\x00', 0xfffffffffffffffc, 0x0) r6 = dup2(r1, r0) fanotify_mark(r5, 0x60, 0x1012, r6, &(0x7f0000000100)='./file0\x00') [ 988.595648][ T2365] binder: 2350:2365 unknown command 536871488 [ 988.622095][ T2365] binder: 2350:2365 ioctl c0306201 20000440 returned -22 00:23:32 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018"]], 0x0, 0x4c00, 0x0}) 00:23:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000000ff000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 988.779529][ T2378] binder: 2376:2378 unknown command 536871488 [ 988.787313][ T2379] binder: BINDER_SET_CONTEXT_MGR already set [ 988.794605][ T2379] binder: 2377:2379 ioctl 40046207 0 returned -16 [ 988.801759][ T2378] binder: 2376:2378 ioctl c0306201 20000440 returned -22 [ 988.811878][ T2379] binder: 2377:2379 unknown command 536871488 [ 988.814345][ T2375] WARNING: CPU: 0 PID: 2375 at drivers/media/common/videobuf2/videobuf2-core.c:733 vb2_core_reqbufs+0x48f/0xd90 [ 988.822079][ T2379] binder: 2377:2379 ioctl c0306201 20000440 returned -22 [ 988.830146][ T2375] Kernel panic - not syncing: panic_on_warn set ... [ 988.830167][ T2375] CPU: 0 PID: 2375 Comm: syz-executor.2 Not tainted 5.2.0-rc7 #65 [ 988.830177][ T2375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 988.830183][ T2375] Call Trace: [ 988.830215][ T2375] dump_stack+0x172/0x1f0 [ 988.830238][ T2375] ? vb2_core_reqbufs+0x450/0xd90 [ 988.843703][ T2381] binder: 2376:2381 unknown command 536871488 [ 988.843842][ T2375] panic+0x2cb/0x744 [ 988.854175][ T2381] binder: 2376:2381 ioctl c0306201 20000440 returned -22 [ 988.861696][ T2375] ? __warn_printk+0xf3/0xf3 [ 988.861724][ T2375] ? vb2_core_reqbufs+0x48f/0xd90 [ 988.861750][ T2375] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 988.869010][ T2379] binder: BINDER_SET_CONTEXT_MGR already set [ 988.869436][ T2375] ? __warn.cold+0x5/0x4d [ 988.869460][ T2375] ? vb2_core_reqbufs+0x48f/0xd90 [ 988.875148][ T2382] binder: 2377:2382 unknown command 536871488 [ 988.880535][ T2375] __warn.cold+0x20/0x4d [ 988.880558][ T2375] ? vb2_core_reqbufs+0x48f/0xd90 [ 988.880579][ T2375] report_bug+0x263/0x2b0 [ 988.880605][ T2375] do_error_trap+0x11b/0x200 [ 988.880625][ T2375] do_invalid_op+0x37/0x50 [ 988.890167][ T2379] binder: 2377:2379 ioctl 40046207 0 returned -16 [ 988.891524][ T2375] ? vb2_core_reqbufs+0x48f/0xd90 [ 988.891547][ T2375] invalid_op+0x14/0x20 [ 988.891563][ T2375] RIP: 0010:vb2_core_reqbufs+0x48f/0xd90 [ 988.891583][ T2375] Code: 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 34 08 00 00 45 8b 3c 9c 31 ff 44 89 fe e8 8b 38 b6 fc 45 85 ff 75 9a e8 01 37 b6 fc <0f> 0b 41 bc ea ff ff ff e8 f4 36 b6 fc 48 b8 00 00 00 00 00 fc ff [ 988.901904][ T2382] binder: 2377:2382 ioctl c0306201 20000440 returned -22 [ 988.907397][ T2375] RSP: 0018:ffff888089907858 EFLAGS: 00010212 [ 988.907411][ T2375] RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc9000a213000 [ 988.907420][ T2375] RDX: 0000000000007802 RSI: ffffffff84ba8c3f RDI: 0000000000000005 [ 988.907430][ T2375] RBP: ffff888089907968 R08: ffff88805a5f8040 R09: ffff888061728530 [ 988.907440][ T2375] R10: ffffed100c2e50ad R11: ffff88806172856f R12: ffff8880899078e0 [ 988.907449][ T2375] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 988.907484][ T2375] ? vb2_core_reqbufs+0x48f/0xd90 [ 988.907504][ T2375] ? vb2_core_reqbufs+0x48f/0xd90 [ 989.055245][ T2375] ? vb2_core_create_bufs+0x830/0x830 [ 989.062116][ T2375] ? __lock_acquire+0x54f/0x5490 [ 989.067062][ T2375] ? __video_do_ioctl+0x398/0xcd0 [ 989.072103][ T2375] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 989.078356][ T2375] ? mutex_trylock+0x1e0/0x1e0 [ 989.083132][ T2375] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 989.089389][ T2375] vb2_reqbufs+0x1cb/0x210 [ 989.093824][ T2375] v4l2_m2m_reqbufs+0x90/0x1d0 [ 989.098775][ T2375] v4l2_m2m_ioctl_reqbufs+0x6b/0x80 [ 989.103983][ T2375] v4l_reqbufs+0xa7/0xd0 [ 989.108233][ T2375] __video_do_ioctl+0x7eb/0xcd0 [ 989.113184][ T2375] ? v4l_s_fmt+0xab0/0xab0 [ 989.117619][ T2375] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 989.123866][ T2375] ? _copy_from_user+0xdd/0x150 [ 989.128829][ T2375] video_usercopy+0x4c2/0x10c0 [ 989.133602][ T2375] ? v4l_s_fmt+0xab0/0xab0 [ 989.138030][ T2375] ? v4l_enumstd+0x70/0x70 [ 989.142715][ T2375] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 989.148968][ T2375] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 989.154794][ T2375] ? video_usercopy+0x10c0/0x10c0 [ 989.159824][ T2375] video_ioctl2+0x2d/0x35 [ 989.164160][ T2375] v4l2_ioctl+0x150/0x1b0 [ 989.168493][ T2375] ? video_devdata+0xa0/0xa0 [ 989.173089][ T2375] do_vfs_ioctl+0xd5f/0x1380 [ 989.177690][ T2375] ? ioctl_preallocate+0x210/0x210 [ 989.182805][ T2375] ? __fget+0x381/0x550 [ 989.186973][ T2375] ? ksys_dup3+0x3e0/0x3e0 [ 989.191395][ T2375] ? nsecs_to_jiffies+0x30/0x30 [ 989.196262][ T2375] ? tomoyo_file_ioctl+0x23/0x30 [ 989.201351][ T2375] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 989.207624][ T2375] ? security_file_ioctl+0x8d/0xc0 [ 989.212910][ T2375] ksys_ioctl+0xab/0xd0 [ 989.217074][ T2375] __x64_sys_ioctl+0x73/0xb0 [ 989.221674][ T2375] do_syscall_64+0xfd/0x680 [ 989.227530][ T2375] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 989.233425][ T2375] RIP: 0033:0x459519 [ 989.237322][ T2375] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 989.256940][ T2375] RSP: 002b:00007fadf5eecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 989.265366][ T2375] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459519 [ 989.273342][ T2375] RDX: 0000000020000040 RSI: 00000000c0145608 RDI: 0000000000000004 [ 989.281318][ T2375] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 989.289295][ T2375] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fadf5eed6d4 [ 989.297276][ T2375] R13: 00000000004c495d R14: 00000000004d8918 R15: 00000000ffffffff [ 989.306825][ T2375] Kernel Offset: disabled [ 989.311345][ T2375] Rebooting in 86400 seconds..