e}], 0x0, 0x0, 0x0}) ioctl$FBIOGET_CON2FBMAP(r4, 0x460f, &(0x7f0000000140)={0x19}) 03:07:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4bfb, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) [ 3299.183617] binder: 29278:29284 ioctl c008561c 20000140 returned -22 [ 3299.187657] binder: 29278:29290 ioctl c0306201 200000c0 returned -22 [ 3299.256808] binder: 29296:29303 ioctl 460f 20000140 returned -22 [ 3299.274385] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 03:07:57 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000100)={0x0, 0x9, 0x3, r3, 0x0, &(0x7f0000000080)={0x980925, 0xffffffff, [], @p_u32=&(0x7f0000000040)=0x6ec5}}) ioctl$EVIOCSABS3F(r4, 0x401845ff, &(0x7f0000000140)={0x9, 0x4, 0x10000, 0x2, 0x2, 0x9d7}) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000180)={0x67, 0xf0b3, 0x8, 0x1}, 0x8) r5 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f00000000c0)={0xf0f042}) [ 3299.306226] binder: 29296:29305 ioctl 460f 20000140 returned -22 03:07:57 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x560f, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000b5402460bb79b12e42708bb08e7c18550be42fed14f2940bc5e5ef6730d297da0e0bf5e073a154a5a5f37f"], 0x0, 0x0, 0x0}) mmap$snddsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000005, 0x1010, r4, 0x4000) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f0000000140), r6, r4}}, 0x18) r7 = dup2(r5, r1) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$PIO_UNISCRNMAP(r7, 0x4b6a, &(0x7f0000000000)="ca4258979251511434a82874e441a0477a7ad08bd873a2ff7db81e937599848fc0810eef1725a6c3d1155106c9d5508008f9aa30fd60bcfa59e116626579420419e52e1752167a4ecee31fc872465317726a688713b4c9f487f01c189581e6ecf5e3f71f1c9b4849cdf2db54b365") r8 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r9 = syz_open_dev$binderN(0x0, 0x0, 0x0) r10 = dup2(r9, r8) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_AGP_ENABLE(r10, 0x40086432, &(0x7f0000000100)=0xff) 03:07:57 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f0000000040)=""/99) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) [ 3299.392403] binder: 29308:29309 ioctl c0205647 20000100 returned -22 [ 3299.418548] binder: 29310:29312 unknown command 1085603840 [ 3299.438553] binder: 29308:29314 ioctl c0205647 20000100 returned -22 [ 3299.444748] binder: 29310:29312 ioctl c0306201 200000c0 returned -22 [ 3299.460822] binder: 29313:29316 ioctl 8018457f 20000040 returned -22 [ 3299.472776] binder: 29310:29312 ioctl 4b6a 20000000 returned -22 [ 3299.488885] binder: 29313:29316 ioctl 4020ae46 7fda76f58510 returned -22 [ 3299.499992] binder: 29310:29312 ioctl 40086432 20000100 returned -22 [ 3299.523605] binder: 29313:29316 ioctl 4020ae46 7fda76f58510 returned -22 03:07:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4bfb, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) [ 3299.548492] binder: 29310:29321 unknown command 1085603840 [ 3299.572866] binder: 29313:29316 ioctl 4020ae46 7fda76f58510 returned -22 [ 3299.582950] binder: 29310:29321 ioctl c0306201 200000c0 returned -22 [ 3299.600468] binder: 29310:29317 ioctl 4b6a 20000000 returned -22 [ 3299.611599] binder: 29310:29312 ioctl 40086432 20000100 returned -22 [ 3299.618513] binder: 29313:29316 ioctl 4020ae46 7fda76f58510 returned -22 03:07:58 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f042, 0x9}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8982, &(0x7f0000000140)={0x7, 'ip_vti0\x00', {0x4}, 0xfffc}) r4 = dup2(r2, r1) ioctl$VIDIOC_OVERLAY(r4, 0x4004560e, &(0x7f0000000080)=0x2) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) r7 = dup2(r6, r5) r8 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000000c0)={0x7c, 0x0, &(0x7f0000000400)=[@register_looper={0x400c630e}, @acquire_done={0x40106309, 0x2}, @increfs_done={0x40106308, 0x3}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x5, 0x1, 0x1}, @fda={0x66646185, 0x3, 0x0, 0x31}, @flat=@binder={0x73622a85, 0x101}}, &(0x7f0000000340)={0x0, 0x20, 0x40}}, 0x40}, @register_looper], 0x0, 0x0, 0x0}) ioctl$VIDIOC_S_SELECTION(r8, 0xc040565f, &(0x7f0000000280)={0x4, 0x2, 0x4, {0xffffffff, 0x582, 0x8000, 0x10001}}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="d42a87aaf0858550334889c436d884c2e551aced2f1ad429d336cfe47adbda3d21549ada91135b"], 0x0, 0x0, 0x0}) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0xf5e) getsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, &(0x7f00000001c0)=0x1, &(0x7f0000000200)=0x4) 03:07:58 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) setitimer(0x0, &(0x7f0000000000)={{0x0, 0x2710}, {0x77359400}}, &(0x7f0000000040)) ioctl$KDSETMODE(r0, 0x560f, 0x0) [ 3299.655549] binder: 29313:29316 ioctl 4020ae46 7fda76f58510 returned -22 [ 3299.703400] binder: 29313:29316 ioctl 4020ae46 7fda76f58510 returned -22 [ 3299.725290] binder: 29327:29328 ioctl 4004560e 20000080 returned -22 [ 3299.728744] binder: 29313:29316 ioctl 4020ae46 7fda76f58510 returned -22 03:07:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4bfb, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) [ 3299.747182] binder: 29313:29316 ioctl 4020ae46 7fda76f58510 returned -22 [ 3299.767320] binder: 29327:29328 unknown command -1433982252 [ 3299.777658] binder: 29313:29316 ioctl 4020ae46 7fda76f58510 returned -22 [ 3299.789448] binder: 29327:29328 ioctl c0306201 200000c0 returned -22 03:07:58 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x560f, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000100), &(0x7f0000000040)=0x89) [ 3299.812407] binder: 29313:29316 ioctl 4020ae46 7fda76f58510 returned -22 [ 3299.848443] binder: 29327:29336 ioctl 4004560e 20000080 returned -22 [ 3299.857116] binder: 29327:29328 unknown command -1433982252 03:07:58 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) [ 3299.865175] binder: 29313:29316 ioctl 4020ae46 7fda76f58510 returned -22 [ 3299.876336] binder: 29327:29328 ioctl c0306201 200000c0 returned -22 [ 3299.900102] binder: 29313:29316 ioctl 4020ae46 7fda76f58510 returned -22 03:07:58 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDSETMODE(r0, 0x560f, 0x0) [ 3299.929395] binder: 29313:29316 ioctl 4020ae46 7fda76f58510 returned -22 [ 3299.959497] binder: 29313:29316 ioctl 4020ae46 7fda76f58510 returned -22 03:07:58 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f042}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f0000000100)) [ 3299.974719] binder: 29313:29316 ioctl 4020ae46 7fda76f58510 returned -22 [ 3299.982804] binder: 29313:29316 ioctl 4020ae46 7fda76f58510 returned -22 [ 3299.991722] binder: 29313:29316 ioctl 4020ae46 7fda76f58510 returned -22 03:07:58 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDSETMODE(r0, 0x560f, 0x0) [ 3300.031443] binder: 29313:29316 ioctl 4020ae46 7fda76f58510 returned -22 [ 3300.050259] binder: 29347:29348 ioctl 81a0ae8c 20000100 returned -22 [ 3300.064178] binder: 29313:29316 ioctl 4020ae46 7fda76f58510 returned -22 03:07:58 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f042}) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000080)='veth1\x00') r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) socket$bt_bnep(0x1f, 0x3, 0x4) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvme-fabrics\x00', 0x170400, 0x0) write$nbd(0xffffffffffffffff, &(0x7f0000000180)={0x67446698, 0x1, 0x1, 0x2, 0x3, "332b7767919421b0d5d3"}, 0x1a) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0}) r5 = accept4$nfc_llcp(r3, &(0x7f0000000100), &(0x7f0000000200)=0x60, 0x80000) fcntl$setlease(r5, 0x400, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x8000, 0x0) [ 3300.078760] binder: 29313:29316 ioctl 4020ae46 7fda76f58510 returned -22 [ 3300.098110] binder: 29313:29316 ioctl 4020ae46 7fda76f58510 returned -22 03:07:58 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) [ 3300.139203] binder: 29313:29316 ioctl 4020ae46 7fda76f58510 returned -22 [ 3300.170581] binder: 29313:29316 ioctl 4020ae46 7fda76f58510 returned -22 [ 3300.193249] binder: 29313:29316 ioctl 4020ae46 7fda76f58510 returned -22 [ 3300.231508] binder: 29313:29316 ioctl 4020ae46 7fda76f58530 returned -22 03:07:58 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 03:07:58 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x560f, 0x0) 03:07:58 executing program 4: openat$mice(0xffffffffffffff9c, 0x0, 0x4140) [ 3300.322096] binder: 29361:29363 ioctl 4020ae46 7fda76f58510 returned -22 [ 3300.339472] binder: 29361:29363 ioctl 4020ae46 7fda76f58510 returned -22 [ 3300.368479] binder: 29361:29363 ioctl 4020ae46 7fda76f58510 returned -22 [ 3300.407228] binder: 29361:29363 ioctl 4020ae46 7fda76f58510 returned -22 03:07:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) r1 = dup(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r3, 0x405, 0x0, 0x0, {0x7e}}, 0x14}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012080900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xfff1}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x20, 0x2, [@TCA_RSVP_CLASSID={0x8}, @TCA_RSVP_DST={0x14, 0x2, @private2}]}}]}, 0x50}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r3, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xb51, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20040080) r9 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f00000000c0)={0xf0f042}) 03:07:58 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000200)={{{@in=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@remote}}, &(0x7f0000000300)=0xe8) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000340)={r6, 0x1, 0x6, @local}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000400)={{0x21, @dev={0xac, 0x14, 0x14, 0x31}, 0x4e20, 0x2, 'nq\x00', 0x2, 0x7fffffff, 0x5d}, {@loopback, 0x4e20, 0x2, 0x2, 0x3, 0x9}}, 0x44) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r9, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000040)={0xb4, 0x6, 0x4, 0x2000000, 0x4, {r7, r8/1000+60000}, {0x2, 0x0, 0x5, 0x6, 0x9, 0x8, "ef56a8c5"}, 0x3, 0x4, @userptr=0x8, 0x81, 0x0, r9}) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f0000000100)={'bridge_slave_0\x00', 0x8, 0x3}) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r10, 0x560f, 0x0) [ 3300.414854] binder: 29361:29363 ioctl 4020ae46 7fda76f58510 returned -22 [ 3300.423046] binder: 29361:29363 ioctl 4020ae46 7fda76f58510 returned -22 [ 3300.430705] binder: 29361:29363 ioctl 4020ae46 7fda76f58510 returned -22 [ 3300.437627] binder: 29361:29363 ioctl 4020ae46 7fda76f58510 returned -22 [ 3300.446127] binder: 29361:29363 ioctl 4020ae46 7fda76f58510 returned -22 [ 3300.453652] binder: 29361:29363 ioctl 4020ae46 7fda76f58510 returned -22 [ 3300.461148] binder: 29361:29363 ioctl 4020ae46 7fda76f58510 returned -22 03:07:58 executing program 4: openat$mice(0xffffffffffffff9c, 0x0, 0x4140) [ 3300.487335] binder: 29361:29363 ioctl 4020ae46 7fda76f58510 returned -22 [ 3300.517649] binder: 29361:29363 ioctl 4020ae46 7fda76f58510 returned -22 [ 3300.528944] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3300.533419] binder: 29373:29376 ioctl c0585609 20000040 returned -22 [ 3300.553602] binder: 29361:29363 ioctl 4020ae46 7fda76f58510 returned -22 03:07:58 executing program 4: openat$mice(0xffffffffffffff9c, 0x0, 0x4140) [ 3300.585862] binder: 29361:29363 ioctl 4020ae46 7fda76f58510 returned -22 [ 3300.603005] binder: 29361:29363 ioctl 4020ae46 7fda76f58510 returned -22 [ 3300.614617] binder: 29373:29381 ioctl c0585609 20000040 returned -22 [ 3300.624038] binder: 29361:29363 ioctl 4020ae46 7fda76f58510 returned -22 03:07:59 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) dup2(r1, r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000140)=[@acquire_done={0x40106309, 0x1}], 0x0, 0x0, 0x0}) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/154) ioctl$BLKPG(r4, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000040)="3e59a361980c0233d724ea5a265326698ad7e85131b06a6f6f93f58464a407f48d71dd6bc0dac11070ea9c84a1d8f754df19d51468620ef731c1d4aa7dad43d5e1", 0x41) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x1, 0x0) r5 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x8, 0x2800) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r7, 0xc0045520, &(0x7f0000000100)=0x1) r8 = syz_open_dev$binderN(0x0, 0x0, 0x0) dup2(r8, r6) [ 3300.639694] binder: 29361:29363 ioctl 4020ae46 7fda76f58510 returned -22 [ 3300.696704] binder: 29361:29363 ioctl 4020ae46 7fda76f58510 returned -22 [ 3300.731093] binder: 29361:29363 ioctl 4020ae46 7fda76f58510 returned -22 03:07:59 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) [ 3300.753607] binder: 29361:29363 ioctl 4020ae46 7fda76f58510 returned -22 [ 3300.783604] binder: 29361:29363 ioctl 4020ae46 7fda76f58510 returned -22 03:07:59 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) dup2(r1, r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000140)=[@acquire_done={0x40106309, 0x1}], 0x0, 0x0, 0x0}) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/154) ioctl$BLKPG(r4, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000040)="3e59a361980c0233d724ea5a265326698ad7e85131b06a6f6f93f58464a407f48d71dd6bc0dac11070ea9c84a1d8f754df19d51468620ef731c1d4aa7dad43d5e1", 0x41) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x1, 0x0) r5 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x8, 0x2800) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r7, 0xc0045520, &(0x7f0000000100)=0x1) r8 = syz_open_dev$binderN(0x0, 0x0, 0x0) dup2(r8, r6) [ 3300.812025] binder: 29361:29363 ioctl 4020ae46 7fda76f58510 returned -22 [ 3300.838853] binder: 29361:29363 ioctl 4020ae46 7fda76f58510 returned -22 [ 3300.862725] binder: 29361:29363 ioctl 4020ae46 7fda76f58530 returned -22 03:07:59 executing program 3: prctl$PR_SET_TIMERSLACK(0x1d, 0x47) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x541d, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x1, 0x17, 0x2, 0x68, &(0x7f0000000000)="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"}) 03:07:59 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) 03:07:59 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$VIDIOC_OVERLAY(r4, 0x4004560e, &(0x7f0000000040)=0x6) r5 = dup2(r1, r0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) [ 3301.096454] binder: 29403:29405 ioctl 4004560e 20000040 returned -22 03:07:59 executing program 3: prctl$PR_SET_TIMERSLACK(0x1d, 0x47) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x541d, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x1, 0x17, 0x2, 0x68, &(0x7f0000000000)="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"}) 03:07:59 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) [ 3301.140692] binder: 29403:29405 ioctl 4020ae46 7fda76f58510 returned -22 [ 3301.153745] binder: 29403:29405 ioctl 4020ae46 7fda76f58510 returned -22 [ 3301.173468] binder: 29403:29405 ioctl 4020ae46 7fda76f58510 returned -22 [ 3301.190201] binder: 29403:29405 ioctl 4020ae46 7fda76f58510 returned -22 [ 3301.206849] binder: 29403:29405 ioctl 4020ae46 7fda76f58510 returned -22 [ 3301.223053] binder: 29403:29405 ioctl 4020ae46 7fda76f58510 returned -22 [ 3301.238097] binder: 29403:29405 ioctl 4020ae46 7fda76f58510 returned -22 03:07:59 executing program 3: prctl$PR_SET_TIMERSLACK(0x1d, 0x47) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x541d, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x1, 0x17, 0x2, 0x68, &(0x7f0000000000)="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"}) [ 3301.268350] binder: 29403:29405 ioctl 4020ae46 7fda76f58510 returned -22 [ 3301.292455] binder: 29403:29405 ioctl 4020ae46 7fda76f58510 returned -22 03:07:59 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f046}) [ 3301.313266] binder: 29403:29405 ioctl 4020ae46 7fda76f58510 returned -22 [ 3301.329746] binder: 29403:29405 ioctl 4020ae46 7fda76f58510 returned -22 [ 3301.344821] binder: 29403:29405 ioctl 4020ae46 7fda76f58510 returned -22 [ 3301.365293] binder: 29403:29405 ioctl 4020ae46 7fda76f58510 returned -22 [ 3301.382720] binder: 29403:29405 ioctl 4020ae46 7fda76f58510 returned -22 [ 3301.397720] binder: 29403:29405 ioctl 4020ae46 7fda76f58510 returned -22 03:07:59 executing program 3: prctl$PR_SET_TIMERSLACK(0x1d, 0x47) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x1, 0x17, 0x2, 0x68, &(0x7f0000000000)="b440e7fd1bd1f6c5c6452b6c2339eb976f66b6c1d4f5292eae818d9c7e7a74a6deaa842aa35f3e893d4ea5868800122d55f66b78f3516beafbdd04888d713502c81e30558debd750a073494216900b50796f7b346ae61c8318ec5bceb9b516e2239e565fe7b7fc1edf8ec2cca08b084c8d22a6829b1bb24bac70029cdd741ec875378c7084fa25f1156d4097f58382b15a56cdbd94657d2aacc7e2a7231c294b34bae1a3713e8c04076371866e6e914394ad1d997deabdb6302be6662a14cd497740294a4519634e4a9e0a5d4ac6d89667b4087b800118fb8cf9c4fedc650c55696bdf2224311671ea4f8f71e8191b521abfdd1e5de98ad464101f7c178c35e7f76516da2d62bb2dc2440387913265ae8375c16d6337824cac794c5e8c99cad411073ed6ba700c69f55d9ad939958cdb7bbc9943904a1f5b56ac76556fd21bb4c58caca520b676ffbc49f200fd993026dbd48ef09cd4fbc012a7df91307ce210b2ea311e36c1a87ed68e782ba4a185a1b635d05d4ac1b34ad015dd022ad61f7feebbd450f5a07ee6f62b03e3bd7e7d50e96ecef6e30bc2a40377e021e459bdbf94f400854f21a2259215241c6bf4a1e436193509e27ac57c6518e42df7eab2a73ffcd785ee14821efeb96e878efd3b88120c7778e9f422c618e0614dd5ea79ea06d5c3e88ba397dd3b96171d77ef143a09d1d93bb44795c845a7271e1f1894c97cbedefcc53cedafe1dc004221dc4b451c09b93676d02cca15d7cd385d8e6bbb0d2b4f86a543d6e21af84760141347508e4da8611936cff6f2c84b2faf53434c55765849fd7858add5de4fea0ec98dc5b527a8677a66b70db0ebeb56bbfeaae567c3d1aac1929ac1053d1403cb1c14517769ac05145ff05700632af7a51848634b3b5f74bd894bf099769c65033c0475765934c7a1618b7ac3fbb39154f381466f1ac45ce2ba5c63184cb9f7b2f0aa372e10286b6c6ca4bb11eee3ded181d7c4838d791dc1df98a40b28e485b8ff373fc9e67f73a0a15f2f8e00554bfcacc5b0bf9f7cfb720ee63733597756d1579bd440d393574d08cd44a51d3d3a39a03b48f4ea754b7a404c9d2bb62e968cb05b297699585be683f21edbc7422a56ee26c3864553ff4fd91f7668203417fe3625d36f16a6d088bd3e62dbdff723c52069b0bc6e70cd9330a8ba46823a3349cba55e0b3394b633874dbdbdf45a677744b1842acc02d6ca35937951b3727d8920ac2e5a283035e144df463a529ca09d96f02659b640677620c8e5b49a3d648c32f3c31fe57eefbfdde5a19d10cb0c381ef1c90222fe557e186047c3b5fbb02a841a5d1afd0a6031dd7b6e0bf7dee97494015d22602f5e2c14ea7b498a1a877f57228dfa54eac4de742a69bae82a0e5bd87f25fb9e3675131f87565a92e312ca7afdaf1f8e95600735b2e9ae147b5bb08f162f"}) 03:07:59 executing program 4 (fault-call:0 fault-nth:0): openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) [ 3301.431762] binder: 29403:29405 ioctl 4020ae46 7fda76f58510 returned -22 [ 3301.452290] binder: 29403:29405 ioctl 4020ae46 7fda76f58510 returned -22 [ 3301.470767] binder: 29403:29405 ioctl 4020ae46 7fda76f58510 returned -22 [ 3301.486925] FAULT_INJECTION: forcing a failure. [ 3301.486925] name failslab, interval 1, probability 0, space 0, times 0 [ 3301.503780] binder: 29403:29405 ioctl 4020ae46 7fda76f58510 returned -22 [ 3301.533640] binder: 29403:29405 ioctl 4020ae46 7fda76f58510 returned -22 [ 3301.535339] CPU: 1 PID: 29423 Comm: syz-executor.4 Not tainted 4.19.124-syzkaller #0 [ 3301.548418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3301.550573] binder: 29403:29405 ioctl 4020ae46 7fda76f58510 returned -22 [ 3301.557939] Call Trace: [ 3301.557967] dump_stack+0x1fc/0x2fe [ 3301.557987] should_fail.cold+0xa/0x14 [ 3301.558004] ? setup_fault_attr+0x200/0x200 [ 3301.579336] __should_failslab+0x115/0x180 [ 3301.581869] binder: 29403:29405 ioctl 4020ae46 7fda76f58510 returned -22 [ 3301.583594] should_failslab+0x5/0xf [ 3301.583609] kmem_cache_alloc+0x278/0x370 [ 3301.583628] getname_flags+0xce/0x590 [ 3301.601633] binder: 29403:29405 ioctl 4020ae46 7fda76f58510 returned -22 [ 3301.602646] do_sys_open+0x294/0x510 [ 3301.613232] ? filp_open+0x70/0x70 [ 3301.616782] ? __se_sys_clock_nanosleep+0x2b0/0x2b0 [ 3301.619538] binder: 29403:29405 ioctl 4020ae46 7fda76f58510 returned -22 [ 3301.621809] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3301.621823] ? trace_hardirqs_off_caller+0x69/0x210 [ 3301.621840] ? do_syscall_64+0x21/0x620 [ 3301.634243] binder: 29403:29405 ioctl 4020ae46 7fda76f58530 returned -22 [ 3301.638698] do_syscall_64+0xf9/0x620 [ 3301.638718] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3301.658492] RIP: 0033:0x45ca29 [ 3301.661722] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:08:00 executing program 3: prctl$PR_SET_TIMERSLACK(0x1d, 0x47) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x0, 0x1, 0x17, 0x2, 0x68, &(0x7f0000000000)="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"}) [ 3301.680635] RSP: 002b:00007fd7337fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3301.688358] RAX: ffffffffffffffda RBX: 00000000004f7a00 RCX: 000000000045ca29 [ 3301.695670] RDX: 0000000000004140 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 3301.702949] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3301.710231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 3301.717512] R13: 00000000000007af R14: 00000000004ca805 R15: 00007fd7337fe6d4 03:08:00 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r4) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0xfc7f8a824fa34d55, 0x0, 0x0}) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000080)={0x9c0000, 0x6, 0x80, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0905, 0xfffff801, [], @value64=0xffff}}) ioctl$MON_IOCH_MFLUSH(r7, 0x9208, 0x81) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 03:08:00 executing program 3: prctl$PR_SET_TIMERSLACK(0x1d, 0x47) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x0, 0x1, 0x17, 0x2, 0x68, &(0x7f0000000000)="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"}) [ 3301.817014] binder: 29428:29429 ioctl 4020ae46 7fda76f58510 returned -22 [ 3301.844953] binder: 29428:29429 ioctl 4020ae46 7fda76f58510 returned -22 [ 3301.866673] binder: 29428:29429 ioctl 4020ae46 7fda76f58510 returned -22 [ 3301.873540] binder: 29428:29432 ioctl c0306201 200000c0 returned -14 [ 3301.884017] binder: 29428:29429 ioctl 4020ae46 7fda76f58510 returned -22 [ 3301.900105] binder: 29428:29429 ioctl 4020ae46 7fda76f58510 returned -22 03:08:00 executing program 3: prctl$PR_SET_TIMERSLACK(0x1d, 0x47) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x0, 0x1, 0x17, 0x2, 0x68, &(0x7f0000000000)="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"}) [ 3301.917347] binder: 29428:29429 ioctl 4020ae46 7fda76f58510 returned -22 [ 3301.917750] binder: 29428:29432 ioctl c0205648 20000080 returned -22 [ 3301.932455] binder: 29428:29429 ioctl 4020ae46 7fda76f58510 returned -22 [ 3301.949149] binder: 29428:29429 ioctl 4020ae46 7fda76f58510 returned -22 03:08:00 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x1, 0x17, 0x2, 0x68, &(0x7f0000000000)="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"}) [ 3301.991931] binder: 29428:29429 ioctl 4020ae46 7fda76f58510 returned -22 [ 3302.023730] binder: 29428:29429 ioctl 4020ae46 7fda76f58510 returned -22 [ 3302.052278] binder: 29428:29429 ioctl 4020ae46 7fda76f58510 returned -22 [ 3302.087039] binder: 29428:29429 ioctl 4020ae46 7fda76f58510 returned -22 03:08:00 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x1, 0x17, 0x2, 0x68, &(0x7f0000000000)="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"}) [ 3302.125152] binder: 29428:29429 ioctl 4020ae46 7fda76f58510 returned -22 03:08:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4bfb, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) flistxattr(r3, &(0x7f0000000300)=""/225, 0xe1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e630c4024359318e4699cfdea8707fd765f9968aee80d3951673522962a8db6fb"], 0x0, 0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000040)={0x0, 0x8, 0x4, 0x4204040, 0x9b9c5a43, {r4, r5/1000+60000}, {0x1, 0x8, 0x7, 0x3f, 0x5, 0x57, 'kd|O'}, 0x9, 0x3, @fd=r8, 0x4, 0x0, 0xffffffffffffffff}) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10], 0x30}}, 0x40c4951) sendmsg$NLBL_MGMT_C_ADDDEF(r9, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r10, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 03:08:00 executing program 4 (fault-call:0 fault-nth:1): openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) [ 3302.173155] binder: 29428:29429 ioctl 4020ae46 7fda76f58510 returned -22 03:08:00 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x0, 0x1, 0x17, 0x2, 0x68, &(0x7f0000000000)="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"}) [ 3302.213587] binder: 29428:29429 ioctl 4020ae46 7fda76f58510 returned -22 [ 3302.236086] binder: 29445:29449 ioctl c058560f 20000040 returned -22 [ 3302.244620] FAULT_INJECTION: forcing a failure. [ 3302.244620] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3302.254586] binder: 29428:29429 ioctl 4020ae46 7fda76f58510 returned -22 [ 3302.256459] CPU: 0 PID: 29450 Comm: syz-executor.4 Not tainted 4.19.124-syzkaller #0 [ 3302.256473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3302.280615] Call Trace: [ 3302.283219] dump_stack+0x1fc/0x2fe [ 3302.286861] should_fail.cold+0xa/0x14 [ 3302.290769] ? setup_fault_attr+0x200/0x200 [ 3302.295103] ? mark_held_locks+0xf0/0xf0 [ 3302.299176] ? lock_downgrade+0x740/0x740 [ 3302.303335] ? lock_acquire+0x170/0x3c0 [ 3302.304627] binder: 29428:29429 ioctl 4020ae46 7fda76f58510 returned -22 [ 3302.307342] __alloc_pages_nodemask+0x22d/0x2620 [ 3302.307362] ? __might_fault+0x192/0x1d0 [ 3302.323153] ? __lock_acquire+0x6b9/0x4380 [ 3302.327409] ? lock_downgrade+0x740/0x740 [ 3302.331573] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3302.336467] ? proc_fail_nth_write+0x95/0x1d0 [ 3302.340982] ? proc_tid_io_accounting+0x20/0x20 [ 3302.345697] cache_grow_begin+0xa4/0x8b0 [ 3302.349773] ? setup_fault_attr+0x200/0x200 [ 3302.354145] cache_alloc_refill+0x28c/0x350 [ 3302.355376] binder: 29428:29429 ioctl 4020ae46 7fda76f58510 returned -22 [ 3302.358486] kmem_cache_alloc+0x347/0x370 [ 3302.358505] getname_flags+0xce/0x590 [ 3302.373595] do_sys_open+0x294/0x510 [ 3302.377326] ? filp_open+0x70/0x70 [ 3302.381000] ? __se_sys_clock_nanosleep+0x2b0/0x2b0 [ 3302.386031] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3302.390797] ? trace_hardirqs_off_caller+0x69/0x210 [ 3302.395828] ? do_syscall_64+0x21/0x620 [ 3302.399846] do_syscall_64+0xf9/0x620 [ 3302.403666] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3302.409047] RIP: 0033:0x45ca29 [ 3302.412256] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3302.420126] binder: 29428:29429 ioctl 4020ae46 7fda76f58510 returned -22 [ 3302.431157] RSP: 002b:00007fd7337fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3302.431173] RAX: ffffffffffffffda RBX: 00000000004f7a00 RCX: 000000000045ca29 [ 3302.431182] RDX: 0000000000004140 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 3302.431189] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3302.431196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 3302.431203] R13: 00000000000007af R14: 00000000004ca805 R15: 00007fd7337fe6d4 03:08:00 executing program 4 (fault-call:0 fault-nth:2): openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) 03:08:00 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x0, 0x1, 0x17, 0x2, 0x68, &(0x7f0000000000)="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"}) [ 3302.514906] binder: 29428:29429 ioctl 4020ae46 7fda76f58510 returned -22 [ 3302.561406] binder: 29445:29457 ioctl c058560f 20000040 returned -22 [ 3302.578712] binder: 29428:29429 ioctl 4020ae46 7fda76f58510 returned -22 03:08:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_PDEATHSIG(0x1, 0x31) ioctl$KDSETMODE(r0, 0x4bfb, 0x0) read(r0, &(0x7f0000000000)=""/146, 0x92) [ 3302.608766] FAULT_INJECTION: forcing a failure. [ 3302.608766] name failslab, interval 1, probability 0, space 0, times 0 [ 3302.652478] CPU: 1 PID: 29460 Comm: syz-executor.4 Not tainted 4.19.124-syzkaller #0 [ 3302.660403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3302.670840] Call Trace: [ 3302.673451] dump_stack+0x1fc/0x2fe [ 3302.677097] should_fail.cold+0xa/0x14 [ 3302.680995] ? setup_fault_attr+0x200/0x200 [ 3302.685339] __should_failslab+0x115/0x180 [ 3302.689583] should_failslab+0x5/0xf [ 3302.693311] kmem_cache_alloc+0x278/0x370 [ 3302.697477] __alloc_file+0x21/0x330 [ 3302.701240] alloc_empty_file+0x6d/0x170 [ 3302.705314] path_openat+0xef/0x2eb0 [ 3302.709076] ? __lock_acquire+0x6b9/0x4380 [ 3302.713322] ? kasan_kmalloc.part.0+0xa6/0xd0 [ 3302.717831] ? kmem_cache_alloc+0x124/0x370 [ 3302.722163] ? getname_flags+0xce/0x590 [ 3302.726143] ? do_sys_open+0x294/0x510 [ 3302.730179] ? path_mountpoint+0xa90/0xa90 [ 3302.734429] ? mark_held_locks+0xf0/0xf0 [ 3302.738522] ? proc_fail_nth_write+0x95/0x1d0 [ 3302.743033] do_filp_open+0x1a1/0x280 [ 3302.746851] ? expand_files+0x433/0x7a0 [ 3302.750839] ? may_open_dev+0xf0/0xf0 [ 3302.754654] ? __alloc_fd+0x43c/0x550 [ 3302.758475] ? lock_downgrade+0x740/0x740 [ 3302.762628] ? lock_acquire+0x170/0x3c0 [ 3302.766752] ? __alloc_fd+0x34/0x550 [ 3302.770518] ? do_raw_spin_unlock+0x171/0x260 [ 3302.775050] ? _raw_spin_unlock+0x29/0x40 [ 3302.779209] ? __alloc_fd+0x43c/0x550 [ 3302.783076] do_sys_open+0x3aa/0x510 [ 3302.786803] ? filp_open+0x70/0x70 [ 3302.790357] ? __se_sys_clock_nanosleep+0x2b0/0x2b0 [ 3302.795387] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3302.800169] ? trace_hardirqs_off_caller+0x69/0x210 [ 3302.805201] ? do_syscall_64+0x21/0x620 [ 3302.809192] do_syscall_64+0xf9/0x620 [ 3302.813274] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3302.818470] RIP: 0033:0x45ca29 [ 3302.821697] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3302.840743] RSP: 002b:00007fd7337fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 03:08:01 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x0, 0x1, 0x17, 0x2, 0x68, &(0x7f0000000000)="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"}) 03:08:01 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x1) r2 = dup2(r1, r0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 03:08:01 executing program 4 (fault-call:0 fault-nth:3): openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) [ 3302.848494] RAX: ffffffffffffffda RBX: 00000000004f7a00 RCX: 000000000045ca29 [ 3302.855809] RDX: 0000000000004140 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 3302.863128] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3302.870492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 3302.878128] R13: 00000000000007af R14: 00000000004ca805 R15: 00007fd7337fe6d4 03:08:01 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) 03:08:01 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x212000, 0x8) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 3302.978388] FAULT_INJECTION: forcing a failure. [ 3302.978388] name failslab, interval 1, probability 0, space 0, times 0 [ 3303.047907] CPU: 0 PID: 29473 Comm: syz-executor.4 Not tainted 4.19.124-syzkaller #0 [ 3303.049154] binder: 29474:29477 ioctl 4020ae46 7fda76f58510 returned -22 [ 3303.055828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3303.055835] Call Trace: [ 3303.055858] dump_stack+0x1fc/0x2fe [ 3303.055879] should_fail.cold+0xa/0x14 [ 3303.055896] ? setup_fault_attr+0x200/0x200 [ 3303.055921] __should_failslab+0x115/0x180 [ 3303.055935] should_failslab+0x5/0xf [ 3303.055952] kmem_cache_alloc+0x278/0x370 [ 3303.055973] selinux_file_alloc_security+0xaf/0x190 [ 3303.055993] security_file_alloc+0x5c/0xa0 [ 3303.086209] binder: 29474:29477 ioctl 4020ae46 7fda76f58510 returned -22 [ 3303.086595] __alloc_file+0xc9/0x330 [ 3303.097547] binder: 29474:29477 ioctl 4020ae46 7fda76f58510 returned -22 [ 3303.098668] alloc_empty_file+0x6d/0x170 [ 3303.098685] path_openat+0xef/0x2eb0 [ 3303.098703] ? __lock_acquire+0x6b9/0x4380 [ 3303.111898] binder: 29474:29477 ioctl 4020ae46 7fda76f58510 returned -22 [ 3303.115211] ? kasan_kmalloc.part.0+0xa6/0xd0 [ 3303.115232] ? kmem_cache_alloc+0x124/0x370 [ 3303.115245] ? getname_flags+0xce/0x590 [ 3303.115267] ? do_sys_open+0x294/0x510 [ 3303.123600] binder: 29474:29477 ioctl 4020ae46 7fda76f58510 returned -22 [ 3303.125833] ? path_mountpoint+0xa90/0xa90 [ 3303.125855] ? mark_held_locks+0xf0/0xf0 [ 3303.125874] ? proc_fail_nth_write+0x95/0x1d0 [ 3303.136956] binder: 29474:29477 ioctl 4020ae46 7fda76f58510 returned -22 [ 3303.137854] do_filp_open+0x1a1/0x280 [ 3303.160946] binder: 29474:29477 ioctl 4020ae46 7fda76f58510 returned -22 [ 3303.162327] ? expand_files+0x433/0x7a0 [ 3303.162347] ? may_open_dev+0xf0/0xf0 [ 3303.162364] ? __alloc_fd+0x43c/0x550 [ 3303.177864] binder: 29474:29477 ioctl 4020ae46 7fda76f58510 returned -22 [ 3303.181358] ? lock_downgrade+0x740/0x740 [ 3303.181372] ? lock_acquire+0x170/0x3c0 [ 3303.181385] ? __alloc_fd+0x34/0x550 [ 3303.181403] ? do_raw_spin_unlock+0x171/0x260 [ 3303.181419] ? _raw_spin_unlock+0x29/0x40 [ 3303.181429] ? __alloc_fd+0x43c/0x550 [ 3303.181452] do_sys_open+0x3aa/0x510 [ 3303.181484] ? filp_open+0x70/0x70 [ 3303.194020] binder: 29474:29477 ioctl 4020ae46 7fda76f58510 returned -22 [ 3303.196631] ? __se_sys_clock_nanosleep+0x2b0/0x2b0 [ 3303.196650] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3303.196663] ? trace_hardirqs_off_caller+0x69/0x210 [ 3303.196681] ? do_syscall_64+0x21/0x620 [ 3303.238863] binder: 29474:29477 ioctl 4020ae46 7fda76f58510 returned -22 [ 3303.239235] do_syscall_64+0xf9/0x620 [ 3303.263263] binder: 29474:29477 ioctl 4020ae46 7fda76f58510 returned -22 [ 3303.266314] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3303.266328] RIP: 0033:0x45ca29 [ 3303.266342] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3303.266353] RSP: 002b:00007fd7337fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3303.296392] binder: 29474:29477 ioctl 4020ae46 7fda76f58510 returned -22 [ 3303.297604] RAX: ffffffffffffffda RBX: 00000000004f7a00 RCX: 000000000045ca29 03:08:01 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) [ 3303.297614] RDX: 0000000000004140 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 3303.297622] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3303.297631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 3303.297639] R13: 00000000000007af R14: 00000000004ca805 R15: 00007fd7337fe6d4 [ 3303.379053] binder: 29474:29477 ioctl 4020ae46 7fda76f58510 returned -22 [ 3303.387043] binder: 29474:29477 ioctl 4020ae46 7fda76f58510 returned -22 03:08:01 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) [ 3303.394984] binder: 29474:29477 ioctl 4020ae46 7fda76f58510 returned -22 [ 3303.408652] binder: 29474:29477 ioctl 4020ae46 7fda76f58510 returned -22 [ 3303.422501] binder: 29474:29477 ioctl 4020ae46 7fda76f58510 returned -22 [ 3303.436802] binder: 29474:29477 ioctl 4020ae46 7fda76f58510 returned -22 [ 3303.458557] binder: 29474:29477 ioctl 4020ae46 7fda76f58510 returned -22 [ 3303.478109] binder: 29474:29477 ioctl 4020ae46 7fda76f58510 returned -22 [ 3303.496679] binder: 29474:29477 ioctl 4020ae46 7fda76f58510 returned -22 03:08:01 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x68, &(0x7f0000000000)="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"}) [ 3303.517425] binder: 29474:29477 ioctl 4020ae46 7fda76f58510 returned -22 [ 3303.543188] binder: 29474:29477 ioctl 4020ae46 7fda76f58510 returned -22 [ 3303.562868] binder: 29474:29477 ioctl 4020ae46 7fda76f58510 returned -22 [ 3303.576781] binder: 29474:29477 ioctl 4020ae46 7fda76f58530 returned -22 03:08:02 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x68, &(0x7f0000000000)="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"}) 03:08:02 executing program 4 (fault-call:0 fault-nth:4): openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) 03:08:02 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r4) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000002c}, 0xc, &(0x7f0000000440)={&(0x7f0000000180)={0x2c0, r7, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x114, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa270}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff0000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fe00000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcea5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x912}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe0e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x84}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x7ff, @mcast2, 0x3}}}}]}, @TIPC_NLA_SOCK={0x8c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffbae}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe4e}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1f6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r8 = syz_open_dev$binderN(0x0, 0x0, 0x0) r9 = dup2(r8, r3) r10 = syz_open_dev$binderN(0x0, 0x0, 0x0) r11 = dup2(r10, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$VIDIOC_G_INPUT(r11, 0x80045626, &(0x7f00000004c0)) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="f0aefd54caad06895fad98032481121529ed5c0fad8e99bf2bf111248ee818a73987f6edffab379db7000400000000000013d2daa7718735b9de53f336f23d6d9e8df7ef4ff85c70b282c0d1f5e4084f"], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0xc0a2) [ 3303.714610] FAULT_INJECTION: forcing a failure. [ 3303.714610] name failslab, interval 1, probability 0, space 0, times 0 [ 3303.768253] CPU: 1 PID: 29494 Comm: syz-executor.4 Not tainted 4.19.124-syzkaller #0 [ 3303.776178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3303.778663] binder: 29499:29500 ioctl 4020ae46 7fda76f58510 returned -22 [ 3303.785542] Call Trace: [ 3303.785571] dump_stack+0x1fc/0x2fe [ 3303.785591] should_fail.cold+0xa/0x14 [ 3303.785606] ? setup_fault_attr+0x200/0x200 [ 3303.785628] __should_failslab+0x115/0x180 [ 3303.807197] binder: 29499:29500 ioctl 4020ae46 7fda76f58510 returned -22 [ 3303.811066] should_failslab+0x5/0xf [ 3303.811084] kmem_cache_alloc_trace+0x2a0/0x3a0 [ 3303.811098] ? lock_downgrade+0x740/0x740 [ 3303.811113] ? mousedev_release+0xb0/0xb0 [ 3303.811122] mousedev_open+0xd3/0x440 [ 3303.811138] ? mousedev_release+0xb0/0xb0 [ 3303.823780] binder: 29499:29500 ioctl 4020ae46 7fda76f58510 returned -22 [ 3303.826472] chrdev_open+0x219/0x5c0 [ 3303.826491] ? lockref_get+0x11/0x50 [ 3303.838761] binder: 29499:29501 unknown command 1425911536 [ 3303.838906] ? cdev_put.part.0+0x50/0x50 [ 3303.844266] binder: 29499:29500 ioctl 4020ae46 7fda76f58510 returned -22 [ 3303.849886] do_dentry_open+0x4a8/0x1160 [ 3303.849905] ? cdev_put.part.0+0x50/0x50 [ 3303.849920] ? security_inode_permission+0xc4/0xf0 [ 3303.849936] ? chown_common+0x550/0x550 [ 3303.857050] binder: 29499:29501 ioctl c0306201 200000c0 returned -22 [ 3303.857364] ? inode_permission+0x10c/0x540 [ 3303.866457] binder: 29499:29500 ioctl 4020ae46 7fda76f58510 returned -22 [ 3303.867034] path_openat+0xe06/0x2eb0 [ 3303.879131] binder: 29499:29501 ioctl 8912 c0a2 returned -22 [ 3303.881962] ? path_mountpoint+0xa90/0xa90 [ 3303.881983] ? mark_held_locks+0xf0/0xf0 [ 3303.882000] ? proc_fail_nth_write+0x95/0x1d0 [ 3303.882019] do_filp_open+0x1a1/0x280 [ 3303.892168] binder: 29499:29500 ioctl 4020ae46 7fda76f58510 returned -22 [ 3303.897376] ? expand_files+0x433/0x7a0 [ 3303.897393] ? may_open_dev+0xf0/0xf0 [ 3303.897416] ? lock_downgrade+0x740/0x740 [ 3303.913042] binder: 29499:29500 ioctl 4020ae46 7fda76f58510 returned -22 [ 3303.918221] ? lock_acquire+0x170/0x3c0 [ 3303.918235] ? __alloc_fd+0x34/0x550 [ 3303.918254] ? do_raw_spin_unlock+0x171/0x260 [ 3303.932709] binder: 29499:29500 ioctl 4020ae46 7fda76f58510 returned -22 [ 3303.934855] ? _raw_spin_unlock+0x29/0x40 [ 3303.934872] ? __alloc_fd+0x43c/0x550 [ 3303.951888] binder: 29499:29500 ioctl 4020ae46 7fda76f58510 returned -22 [ 3303.953604] do_sys_open+0x3aa/0x510 [ 3303.953622] ? filp_open+0x70/0x70 [ 3303.969537] binder: 29499:29500 ioctl 4020ae46 7fda76f58510 returned -22 [ 3303.972765] ? __se_sys_clock_nanosleep+0x2b0/0x2b0 [ 3303.972790] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3303.990903] binder: 29499:29500 ioctl 4020ae46 7fda76f58510 returned -22 [ 3303.994359] ? trace_hardirqs_off_caller+0x69/0x210 [ 3303.994381] ? do_syscall_64+0x21/0x620 [ 3304.002583] binder: 29499:29500 ioctl 4020ae46 7fda76f58510 returned -22 [ 3304.008469] do_syscall_64+0xf9/0x620 [ 3304.008489] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3304.025692] binder: 29499:29500 ioctl 4020ae46 7fda76f58510 returned -22 [ 3304.030055] RIP: 0033:0x45ca29 [ 3304.030071] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3304.030078] RSP: 002b:00007fd7337fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3304.030090] RAX: ffffffffffffffda RBX: 00000000004f7a00 RCX: 000000000045ca29 [ 3304.030099] RDX: 0000000000004140 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 3304.030107] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3304.030118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 3304.038648] binder: 29499:29500 ioctl 4020ae46 7fda76f58510 returned -22 [ 3304.040927] R13: 00000000000007af R14: 00000000004ca805 R15: 00007fd7337fe6d4 [ 3304.152532] binder: 29499:29500 ioctl 4020ae46 7fda76f58510 returned -22 [ 3304.175876] binder: 29499:29500 ioctl 4020ae46 7fda76f58510 returned -22 [ 3304.195148] binder: 29499:29500 ioctl 4020ae46 7fda76f58510 returned -22 [ 3304.205462] binder: 29499:29500 ioctl 4020ae46 7fda76f58510 returned -22 [ 3304.215561] binder: 29499:29500 ioctl 4020ae46 7fda76f58510 returned -22 [ 3304.225671] binder: 29499:29500 ioctl 4020ae46 7fda76f58510 returned -22 [ 3304.235777] binder: 29499:29500 ioctl 4020ae46 7fda76f58510 returned -22 [ 3304.246015] binder: 29499:29500 ioctl 4020ae46 7fda76f58510 returned -22 [ 3304.256201] binder: 29499:29500 ioctl 4020ae46 7fda76f58510 returned -22 [ 3304.266350] binder: 29499:29500 ioctl 4020ae46 7fda76f58510 returned -22 03:08:02 executing program 4 (fault-call:0 fault-nth:5): openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) 03:08:02 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x68, &(0x7f0000000000)="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"}) [ 3304.276729] binder: 29499:29500 ioctl 4020ae46 7fda76f58530 returned -22 [ 3304.295058] binder: 29499:29501 ioctl 4020ae46 7fda76f37510 returned -22 03:08:02 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x210200) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @local, 0x6}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = getpid() sched_setattr(r4, &(0x7f0000000440)={0x30, 0x2, 0x0, 0x4, 0x8, 0x3, 0x800000000000}, 0x0) ptrace$setopts(0x4206, r4, 0xfffffffffffffff8, 0x6) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x66, &(0x7f0000000300)={r3, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x90) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={r3, 0x401, 0x3, [0x8, 0x1, 0x401]}, &(0x7f0000000080)=0xe) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000100)='security.capability\x00', &(0x7f0000000140)=@v1={0x1000000, [{0xfb4, 0xfffffffa}]}, 0xc, 0x3) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000200)) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r8, 0xc2604111, &(0x7f00000003c0)={0x3, [[0x7fff, 0x10001, 0x1ff, 0x9, 0x9, 0x2, 0x3bdb96a2, 0x3], [0x200, 0xfffffff7, 0xc2, 0x679a5caa, 0x2, 0x66fd311, 0x23c, 0x3], [0x2, 0x1, 0x3, 0x4, 0x9, 0x1, 0xca3a, 0x7d]], [], [{0x9, 0x6072, 0x1, 0x1}, {0xfffffff8, 0x53, 0x0, 0x1, 0x0, 0x1}, {0x4, 0x3, 0x1}, {0x80000001, 0x3, 0x0, 0x0, 0x1, 0x1}, {0x80000000, 0x3, 0x0, 0x1, 0x1, 0x1}, {0x4, 0x2, 0x1, 0x0, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x4, 0x80, 0x1, 0x0, 0x1, 0x1}, {0x7ff, 0x7, 0x0, 0x1, 0x1, 0x1}, {0x7, 0x4, 0x0, 0x1}, {0x401, 0x3, 0x0, 0x0, 0x1}, {0x200, 0x1}], [], 0x7fff}) ioctl$KDSETMODE(r5, 0x4bfb, 0x0) [ 3304.320287] binder: 29499:29501 ioctl 4020ae46 7fda76f37510 returned -22 [ 3304.343252] binder: 29499:29509 unknown command 1425911536 [ 3304.357145] binder: 29499:29501 ioctl 4020ae46 7fda76f37510 returned -22 03:08:02 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) [ 3304.371985] binder: 29499:29509 ioctl c0306201 200000c0 returned -22 [ 3304.388850] binder: 29499:29500 ioctl 8912 c0a2 returned -22 03:08:02 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x68, &(0x7f0000000000)="b440e7fd1bd1f6c5c6452b6c2339eb976f66b6c1d4f5292eae818d9c7e7a74a6deaa842aa35f3e893d4ea5868800122d55f66b78f3516beafbdd04888d713502c81e30558debd750a073494216900b50796f7b346ae61c8318ec5bceb9b516e2239e565fe7b7fc1edf8ec2cca08b084c8d22a6829b1bb24bac70029cdd741ec875378c7084fa25f1156d4097f58382b15a56cdbd94657d2aacc7e2a7231c294b34bae1a3713e8c04076371866e6e914394ad1d997deabdb6302be6662a14cd497740294a4519634e4a9e0a5d4ac6d89667b4087b800118fb8cf9c4fedc650c55696bdf2224311671ea4f8f71e8191b521abfdd1e5de98ad464101f7c178c35e7f76516da2d62bb2dc2440387913265ae8375c16d6337824cac794c5e8c99cad411073ed6ba700c69f55d9ad939958cdb7bbc9943904a1f5b56ac76556fd21bb4c58caca520b676ffbc49f200fd993026dbd48ef09cd4fbc012a7df91307ce210b2ea311e36c1a87ed68e782ba4a185a1b635d05d4ac1b34ad015dd022ad61f7feebbd450f5a07ee6f62b03e3bd7e7d50e96ecef6e30bc2a40377e021e459bdbf94f400854f21a2259215241c6bf4a1e436193509e27ac57c6518e42df7eab2a73ffcd785ee14821efeb96e878efd3b88120c7778e9f422c618e0614dd5ea79ea06d5c3e88ba397dd3b96171d77ef143a09d1d93bb44795c845a7271e1f1894c97cbedefcc53cedafe1dc004221dc4b451c09b93676d02cca15d7cd385d8e6bbb0d2b4f86a543d6e21af84760141347508e4da8611936cff6f2c84b2faf53434c55765849fd7858add5de4fea0ec98dc5b527a8677a66b70db0ebeb56bbfeaae567c3d1aac1929ac1053d1403cb1c14517769ac05145ff05700632af7a51848634b3b5f74bd894bf099769c65033c0475765934c7a1618b7ac3fbb39154f381466f1ac45ce2ba5c63184cb9f7b2f0aa372e10286b6c6ca4bb11eee3ded181d7c4838d791dc1df98a40b28e485b8ff373fc9e67f73a0a15f2f8e00554bfcacc5b0bf9f7cfb720ee63733597756d1579bd440d393574d08cd44a51d3d3a39a03b48f4ea754b7a404c9d2bb62e968cb05b297699585be683f21edbc7422a56ee26c3864553ff4fd91f7668203417fe3625d36f16a6d088bd3e62dbdff723c52069b0bc6e70cd9330a8ba46823a3349cba55e0b3394b633874dbdbdf45a677744b1842acc02d6ca35937951b3727d8920ac2e5a283035e144df463a529ca09d96f02659b640677620c8e5b49a3d648c32f3c31fe57eefbfdde5a19d10cb0c381ef1c90222fe557e186047c3b5fbb02a841a5d1afd0a6031dd7b6e0bf7dee97494015d22602f5e2c14ea7b498a1a877f57228dfa54eac4de742a69bae82a0e5bd87f25fb9e3675131f87565a92e312ca7afdaf1f8e95600735b2e9ae147b5bb08f162f"}) [ 3304.442824] binder: 29511:29512 ioctl c2604111 200003c0 returned -22 03:08:02 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x41c0) 03:08:02 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x0, 0x68, &(0x7f0000000000)="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"}) [ 3304.516662] binder: 29511:29520 ioctl c2604111 200003c0 returned -22 03:08:02 executing program 2: sysfs$2(0x2, 0xb3, &(0x7f00000000c0)=""/93) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8, 0x100) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$TIOCNXCL(r4, 0x540d) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000040)=0x72) ioctl$KDSETMODE(r0, 0x4bfb, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000080)=0x5236309e, 0x4) socket$pppl2tp(0x18, 0x1, 0x1) 03:08:03 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x0, 0x68, &(0x7f0000000000)="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"}) [ 3304.648111] binder: 29528:29530 ioctl 540d 0 returned -22 03:08:03 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) r3 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e630c4047c874196d0e0b4022d4384144757e5596b7637a80b1573627667e080fabb37e388e164ff04d8a50564ad4fbb9d04ecffa957e1d6ffe50320f7875dccfdd33c39acf4ab469fbc934992f6ed56321ac"], 0x0, 0x0, 0x0}) ioctl$EVIOCSMASK(r5, 0x40104593, &(0x7f0000000180)={0x0, 0xa6, &(0x7f0000000440)="129e202c898f1e5639f54606eb2d9e831ddf8c8e1ac3e3b1651bd4d40a5bff09310e3f602173285b8f9c02c7624a74573f8d64917ad6e60006b22f093a77d46019918e4b0d34a00b34958ef9a16ee0e1e8ddb8be67d514fd445caa7c13e999d3d57245141bc819da54ca93393b950239ed1bd5a34d32d530d7672c48d0e95bcdec45baf5de3e34efec368439824b5ee7b26f86f6012659cede6091a11625bb0aff5767999235"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0xc, 0x0, &(0x7f0000000400)=[@free_buffer], 0x0, 0x0, 0x0}) r6 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000080)=0xc) keyctl$chown(0x4, r6, r8, 0x0) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r6) setsockopt$inet_dccp_int(r2, 0x21, 0x4, &(0x7f0000000040)=0x3, 0x4) r9 = syz_open_dev$binderN(0x0, 0x0, 0x0) r10 = dup2(r9, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$KDGKBMETA(r10, 0x4b62, &(0x7f0000000300)) [ 3304.696388] binder: 29528:29530 ioctl 540d 0 returned -22 03:08:03 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x3) socketpair(0x26, 0x800, 0x18c, &(0x7f0000002600)={0xffffffffffffffff}) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000002640)=0x1100014, 0x4) pipe2(&(0x7f0000000000), 0x80000) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x48, 0x0, &(0x7f00000001c0)=[@register_looper={0x400c630e}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000100)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/20, 0x14, 0x1, 0x3e}, @fda={0x66646185, 0x3}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0}) ioctl$KDSETMODE(r3, 0x4bfb, 0x0) 03:08:03 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xc0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=0x1, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x3}, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x88, 0xfffffffb, 0x7}, &(0x7f0000000200)=0x1000020, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003b00)={0xffffffffffffffff, 0x10, &(0x7f0000003ac0)={&(0x7f0000003a40)=""/90, 0x5a, r2}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r2, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x10, &(0x7f0000000080)={&(0x7f0000000000)=""/69, 0x45, r2}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) r4 = accept4$inet6(r3, 0x0, &(0x7f0000000140), 0x80800) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @local, 0x6}]}, &(0x7f0000000180)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x66, &(0x7f0000000300)={r7, @in={{0x2, 0x4e21, @empty}}}, &(0x7f00000001c0)=0x90) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000600)=ANY=[@ANYRES32=r7, @ANYBLOB="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"], &(0x7f0000000240)=0xfffffe83) ioctl$KDSETMODE(r0, 0x560f, 0x0) 03:08:03 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x0, 0x68, &(0x7f0000000000)="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"}) [ 3304.783787] binder: 29537:29538 ioctl 40104593 20000180 returned -22 [ 3304.816540] binder: 29537:29540 ioctl 40104593 20000180 returned -22 [ 3304.825245] binder: 29539:29542 unknown command 0 [ 3304.864020] binder: 29539:29542 ioctl c0306201 200000c0 returned -22 [ 3304.891662] binder: 29539:29549 ioctl 4bfb 0 returned -22 03:08:03 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3304.923329] binder: 29539:29550 ioctl 4bfb 0 returned -22 03:08:03 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, 0x0}) 03:08:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4bfb, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000440)={0x4}) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000400)={0xa9, 0x16}) 03:08:03 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, 0x0}) [ 3305.021143] binder: 29555:29558 ioctl c00caee0 20000440 returned -22 [ 3305.061013] binder: 29555:29560 ioctl c00caee0 20000440 returned -22 03:08:03 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, 0x0}) 03:08:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4bfb, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e610c40dd3425bc0b7d805cfba1de"], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000100)) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r4) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e5c0c40"], 0x0, 0x0, 0x0}) r7 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r8 = syz_open_dev$binderN(0x0, 0x0, 0x0) r9 = dup2(r8, r7) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r9, 0x40a85323, &(0x7f00000001c0)={{0x7, 0x4}, 'port1\x00', 0x80, 0x80040, 0xfff, 0x0, 0xfffffc01, 0x200, 0x4}) write$char_usb(r6, &(0x7f0000000000)="6b368a5a49270b9851ce7888705ef613bf9266f8b858aa64a0fa7758c988b4df2aa5afb741c4ef6374dafb02f417da99c9f9173d133a1a4a098305837fe6a0d57f7c2947c9a3a6b9d5db817e489d3165137fc8a61800003cf228f7d29dfaee82d5af31497d746e8ee775c8a54a56ad2ce5a5e57d571e564a66ec3719b1fe52a291d2afed851813d854d6b58561eef84624211b32588033eb3eadb870e7845b18b3096de33ad413ff92a4af363f487706e9", 0xb1) [ 3305.216457] binder: 29569:29570 unknown command 1074553102 [ 3305.227959] binder: 29569:29570 ioctl c0306201 200000c0 returned -22 [ 3305.243281] binder: 29569:29570 ioctl 6431 0 returned -22 [ 3305.259794] binder: 29569:29570 unknown command 1074551822 03:08:03 executing program 3 (fault-call:1 fault-nth:0): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3305.272386] binder: 29569:29570 ioctl c0306201 200000c0 returned -22 [ 3305.289519] binder: 29569:29570 ioctl 40a85323 200001c0 returned -22 [ 3305.312559] binder: 29569:29570 unknown command 1074553102 [ 3305.312617] binder: 29569:29572 ioctl 6431 0 returned -22 [ 3305.320609] binder: 29569:29570 ioctl c0306201 200000c0 returned -22 03:08:03 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3305.367140] binder: 29569:29570 unknown command 1074551822 [ 3305.380615] binder: 29569:29570 ioctl c0306201 200000c0 returned -22 [ 3305.386399] binder: 29569:29574 ioctl 40a85323 200001c0 returned -22 03:08:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800, 0x4) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) ioctl$KDSETMODE(r0, 0x4bfb, 0x0) 03:08:03 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x2, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x560f, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000000)={0x5, 0x9, 0x800}) 03:08:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x64) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0xe, 0x6, 0x301, 0x0, 0x0, {0xc, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_EXPECT_HELP_NAME={0xf, 0x6, 'netbios-ns\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040040}, 0x10) ioctl$KDSETMODE(r0, 0x4bfb, 0x0) 03:08:04 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b2f, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:04 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r4) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_AGP_RELEASE(r6, 0x6431) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="446664f514b66cc4d945b73a9dc486c56de665bb40b81eb855c871e71119b29da9627ab3c9a5ccc3812ea98f6738319296", @ANYRES16=r7, @ANYRES64=r3], 0x3}, 0x1, 0x0, 0x0, 0x44000}, 0x20004811) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0xc045}, 0x4040080) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x10001, 0x0) r9 = socket(0x18, 0x0, 0x0) connect$rxrpc(r9, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000128bd700075bd16a2413a00000000000000abf133ffdbdf25", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9], 0x58}, 0x1, 0x0, 0x0, 0x4000040}, 0x841) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r7, 0x10, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004114}, 0x4008040) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r7, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8173}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x894) 03:08:04 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b30, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3305.797536] binder: 29594:29599 ioctl c01064ab 20000000 returned -22 [ 3305.826193] binder: 29597:29603 ioctl 6431 0 returned -22 [ 3305.872667] binder: 29594:29606 ioctl c01064ab 20000000 returned -22 [ 3305.909321] binder: 29597:29611 ioctl 6431 0 returned -22 03:08:04 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b31, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="b440e7fd1bd1f6c5c6452b6c2339eb976f66b6c1d4f5292eae818d9c7e7a74a6deaa842aa35f3e893d4ea5868800122d55f66b78f3516beafbdd04888d713502c81e30558debd750a073494216900b50796f7b346ae61c8318ec5bceb9b516e2239e565fe7b7fc1edf8ec2cca08b084c8d22a6829b1bb24bac70029cdd741ec875378c7084fa25f1156d4097f58382b15a56cdbd94657d2aacc7e2a7231c294b34bae1a3713e8c04076371866e6e914394ad1d997deabdb6302be6662a14cd497740294a4519634e4a9e0a5d4ac6d89667b4087b800118fb8cf9c4fedc650c55696bdf2224311671ea4f8f71e8191b521abfdd1e5de98ad464101f7c178c35e7f76516da2d62bb2dc2440387913265ae8375c16d6337824cac794c5e8c99cad411073ed6ba700c69f55d9ad939958cdb7bbc9943904a1f5b56ac76556fd21bb4c58caca520b676ffbc49f200fd993026dbd48ef09cd4fbc012a7df91307ce210b2ea311e36c1a87ed68e782ba4a185a1b635d05d4ac1b34ad015dd022ad61f7feebbd450f5a07ee6f62b03e3bd7e7d50e96ecef6e30bc2a40377e021e459bdbf94f400854f21a2259215241c6bf4a1e436193509e27ac57c6518e42df7eab2a73ffcd785ee14821efeb96e878efd3b88120c7778e9f422c618e0614dd5ea79ea06d5c3e88ba397dd3b96171d77ef143a09d1d93bb44795c845a7271e1f1894c97cbedefcc53cedafe1dc004221dc4b451c09b93676d02cca15d7cd385d8e6bbb0d2b4f86a543d6e21af84760141347508e4da8611936cff6f2c84b2faf53434c55765849fd7858add5de4fea0ec98dc5b527a8677a66b70db0ebeb56bbfeaae567c3d1aac1929ac1053d1403cb1c14517769ac05145ff05700632af7a51848634b3b5f74bd894bf099769c65033c0475765934c7a1618b7ac3fbb39154f381466f1ac45ce2ba5c63184cb9f7b2f0aa372e10286b6c6ca4bb11eee3ded181d7c4838d791dc1df98a40b28e485b8ff373fc9e67f73a0a15f2f8e00554bfcacc5b0bf9f7cfb720ee63733597756d1579bd440d393574d08cd44a51d3d3a39a03b48f4ea754b7a404c9d2bb62e968cb05b297699585be683f21edbc7422a56ee26c3864553ff4fd91f7668203417fe3625d36f16a6d088bd3e62dbdff723c52069b0bc6e70cd9330a8ba46823a3349cba55e0b3394b633874dbdbdf45a677744b1842acc02d6ca35937951b3727d8920ac2e5a283035e144df463a529ca09d96f02659b640677620c8e5b49a3d648c32f3c31fe57eefbfdde5a19d10cb0c381ef1c90222fe557e186047c3b5fbb02a841a5d1afd0a6031dd7b6e0bf7dee97494015d22602f5e2c14ea7b498a1a877f57228dfa54eac4de742a69bae82a0e5bd87f25fb9e3675131f87565a92e312ca7afdaf1f8e95600735b2e9ae147b5bb08f162f"}) 03:08:04 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x4140) 03:08:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = getpid() sched_setattr(r1, &(0x7f0000000440)={0x30, 0x2, 0x0, 0x4, 0x8, 0x3, 0x800000000000}, 0x0) sched_getparam(r1, &(0x7f0000000000)) ioctl$KDSETMODE(r0, 0x4bfb, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) 03:08:04 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000440)={0x30, 0x2, 0x0, 0x4, 0x8, 0x3, 0x800000000000}, 0x0) wait4(r0, &(0x7f0000000000), 0x1000008, &(0x7f0000000040)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x560f, 0x0) 03:08:04 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b32, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:04 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) ioctl$USBDEVFS_GET_CAPABILITIES(r0, 0x8004551a, &(0x7f0000000040)) 03:08:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGPTPEER(r0, 0x5441, 0x200) ioctl$KDSETMODE(r0, 0x4bfb, 0xfd) modify_ldt$write2(0x11, &(0x7f0000000000)={0x7ff, 0x3059d0c45e8b35ed, 0x1000, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10) 03:08:04 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b33, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:04 executing program 4: syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x84100) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x99c, 0xc0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x4e20, 0xffff, @dev={0xfe, 0x80, [], 0x44}, 0x10000}, {0xa, 0x4e24, 0xf57, @empty, 0xffe00000}, 0x9, [0x7f, 0xa64c, 0x2, 0x3c40, 0x3, 0x5, 0x8001, 0x3ff]}, 0x5c) 03:08:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) getpeername$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x10) ioctl$KDSETMODE(r0, 0x4bfb, 0x0) 03:08:04 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b34, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="b440e7fd1bd1f6c5c6452b6c2339eb976f66b6c1d4f5292eae818d9c7e7a74a6deaa842aa35f3e893d4ea5868800122d55f66b78f3516beafbdd04888d713502c81e30558debd750a073494216900b50796f7b346ae61c8318ec5bceb9b516e2239e565fe7b7fc1edf8ec2cca08b084c8d22a6829b1bb24bac70029cdd741ec875378c7084fa25f1156d4097f58382b15a56cdbd94657d2aacc7e2a7231c294b34bae1a3713e8c04076371866e6e914394ad1d997deabdb6302be6662a14cd497740294a4519634e4a9e0a5d4ac6d89667b4087b800118fb8cf9c4fedc650c55696bdf2224311671ea4f8f71e8191b521abfdd1e5de98ad464101f7c178c35e7f76516da2d62bb2dc2440387913265ae8375c16d6337824cac794c5e8c99cad411073ed6ba700c69f55d9ad939958cdb7bbc9943904a1f5b56ac76556fd21bb4c58caca520b676ffbc49f200fd993026dbd48ef09cd4fbc012a7df91307ce210b2ea311e36c1a87ed68e782ba4a185a1b635d05d4ac1b34ad015dd022ad61f7feebbd450f5a07ee6f62b03e3bd7e7d50e96ecef6e30bc2a40377e021e459bdbf94f400854f21a2259215241c6bf4a1e436193509e27ac57c6518e42df7eab2a73ffcd785ee14821efeb96e878efd3b88120c7778e9f422c618e0614dd5ea79ea06d5c3e88ba397dd3b96171d77ef143a09d1d93bb44795c845a7271e1f1894c97cbedefcc53cedafe1dc004221dc4b451c09b93676d02cca15d7cd385d8e6bbb0d2b4f86a543d6e21af84760141347508e4da8611936cff6f2c84b2faf53434c55765849fd7858add5de4fea0ec98dc5b527a8677a66b70db0ebeb56bbfeaae567c3d1aac1929ac1053d1403cb1c14517769ac05145ff05700632af7a51848634b3b5f74bd894bf099769c65033c0475765934c7a1618b7ac3fbb39154f381466f1ac45ce2ba5c63184cb9f7b2f0aa372e10286b6c6ca4bb11eee3ded181d7c4838d791dc1df98a40b28e485b8ff373fc9e67f73a0a15f2f8e00554bfcacc5b0bf9f7cfb720ee63733597756d1579bd440d393574d08cd44a51d3d3a39a03b48f4ea754b7a404c9d2bb62e968cb05b297699585be683f21edbc7422a56ee26c3864553ff4fd91f7668203417fe3625d36f16a6d088bd3e62dbdff723c52069b0bc6e70cd9330a8ba46823a3349cba55e0b3394b633874dbdbdf45a677744b1842acc02d6ca35937951b3727d8920ac2e5a283035e144df463a529ca09d96f02659b640677620c8e5b49a3d648c32f3c31fe57eefbfdde5a19d10cb0c381ef1c90222fe557e186047c3b5fbb02a841a5d1afd0a6031dd7b6e0bf7dee97494015d22602f5e2c14ea7b498a1a877f57228dfa54eac4de742a69bae82a0e5bd87f25fb9e3675131f87565a92e312ca7afdaf1f8e95600735b2e9ae147b5bb08f162f"}) 03:08:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x3c, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x0, 'fo\x00', 0x21, 0xfffffffa, 0x46}, 0x2c) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x10, 0x2, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') socket$kcm(0x10, 0x2, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r6, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x4004) dup(r3) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r2) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$TCGETS(r8, 0x5401, &(0x7f0000000000)) ioctl$KDSETMODE(r0, 0x560f, 0x0) [ 3306.366195] IPVS: set_ctl: invalid protocol: 60 172.30.0.6:20003 [ 3306.396702] binder: 29647:29651 unknown command 0 [ 3306.408618] binder: 29647:29651 ioctl c0306201 200000c0 returned -22 03:08:04 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b35, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:04 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$UI_BEGIN_FF_ERASE(r5, 0xc00c55ca, &(0x7f00000000c0)={0x1, 0x6}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}, 0x1, 0x0, 0x0, 0x402e45a6c04af21b}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xfff1}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x20, 0x2, [@TCA_RSVP_CLASSID={0x8}, @TCA_RSVP_DST={0x14, 0x2, @private2}]}}]}, 0x50}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', r8}) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) [ 3306.448051] binder: 29647:29656 ioctl 5401 20000000 returned -22 [ 3306.458032] IPVS: set_ctl: invalid protocol: 60 172.30.0.6:20003 03:08:04 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) ioctl$KDSETMODE(r2, 0x4bfb, 0x0) [ 3306.492126] binder: 29647:29651 unknown command 0 [ 3306.497024] binder: 29647:29651 ioctl c0306201 200000c0 returned -22 [ 3306.505127] binder: 29647:29656 ioctl 5401 20000000 returned -22 03:08:04 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b36, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x560f, 0x0) [ 3306.547873] binder: 29660:29661 ioctl c00c55ca 200000c0 returned -22 [ 3306.558493] binder: 29662:29664 unknown command -217785876 [ 3306.572735] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3306.584168] binder: 29662:29664 ioctl c0306201 200000c0 returned -22 [ 3306.594408] binder: 29662:29664 ioctl 4bfb 0 returned -22 03:08:05 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b37, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:05 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x560f, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) [ 3306.632788] binder: 29662:29674 unknown command -217785876 [ 3306.658912] binder: 29662:29674 ioctl c0306201 200000c0 returned -22 03:08:05 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$UI_BEGIN_FF_ERASE(r5, 0xc00c55ca, &(0x7f00000000c0)={0x1, 0x6}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}, 0x1, 0x0, 0x0, 0x402e45a6c04af21b}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xfff1}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x20, 0x2, [@TCA_RSVP_CLASSID={0x8}, @TCA_RSVP_DST={0x14, 0x2, @private2}]}}]}, 0x50}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', r8}) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) 03:08:05 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4940) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x3a1000, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r4) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000080)={r3, r6}) 03:08:05 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b3a, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3306.739875] binder: 29682:29683 ioctl 641f 0 returned -22 [ 3306.748145] binder: 29682:29684 ioctl 641f 0 returned -22 03:08:05 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x560f, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0xfffffffffffffe03, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, 0x1}], 0x0, 0x0, 0x0}) ioctl$TIOCGSERIAL(r3, 0x541e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/66}) [ 3306.790671] binder: 29685:29686 ioctl c00c55ca 200000c0 returned -22 [ 3306.809496] binder: 29687:29690 ioctl 89e0 20000080 returned -22 [ 3306.828344] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 03:08:05 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b3b, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3306.851886] binder: 29687:29690 unknown command 4 [ 3306.856940] binder: 29687:29693 ioctl 89e0 20000080 returned -22 [ 3306.871459] binder: 29692:29694 ioctl 541e 200000c0 returned -22 [ 3306.878229] binder: 29687:29690 ioctl c0306201 200000c0 returned -22 [ 3306.920313] binder: 29692:29705 ioctl 541e 200000c0 returned -22 03:08:05 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b3c, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:05 executing program 5: r0 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="270e630c0d851817e35fe11ef7710eea78977bf9e3c2397af804fd97edb9cfe7b6"], 0x0, 0x0, 0x0}) ioctl$KDFONTOP_SET_DEF(r4, 0x4b72, &(0x7f0000000400)={0x2, 0x0, 0xb, 0x11, 0x60, &(0x7f0000000000)="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"}) ioctl$KDSETMODE(r1, 0x560f, 0x0) 03:08:05 executing program 2 (fault-call:1 fault-nth:0): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4bfb, 0x744000) 03:08:05 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r7, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x4040080) r8 = syz_open_dev$binderN(0x0, 0x0, 0x0) getgid() r9 = dup2(r8, r2) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r10, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x20, 0x17, {0x3, 0xda, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}}}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x50000) r11 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) sendmsg$IPSET_CMD_ADD(r11, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x104}, 0xc804) 03:08:05 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b3d, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3307.065276] binder: 29709:29710 unknown command 207818279 [ 3307.096399] binder: 29709:29710 ioctl c0306201 200000c0 returned -22 03:08:05 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4bfb, 0x744000) [ 3307.122419] binder: 29709:29718 ioctl 4b72 20000400 returned -22 [ 3307.130362] IPVS: Error connecting to the multicast addr 03:08:05 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b40, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3307.171939] binder: 29709:29718 unknown command 207818279 [ 3307.171964] IPVS: Error connecting to the multicast addr [ 3307.177512] binder: 29709:29718 ioctl c0306201 200000c0 returned -22 [ 3307.190185] binder: 29709:29710 ioctl 4b72 20000400 returned -22 03:08:05 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x2, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x200480dd}, 0x40) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) 03:08:05 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x560f, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r4) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000000040)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) r8 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r9 = syz_open_dev$binderN(0x0, 0x0, 0x0) r10 = dup2(r9, r8) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYRES32=r8, @ANYBLOB="daffa4d35ebdc989eb19d0ad59356334d80ff8ed4d3ff4ef7ad05a7f12fd241ddb66dab96f5ae7e7c878d5288c7f44604653b5bcb36c5b5397c2c03796411d8fcee05c08daebaa4796ae0e613ea5569fbee14e00a24154d5ca55dd2272413fd0ea231591298bf5fb1944af"], 0x0, 0x0, 0x0}) ioctl$TIOCSIG(r3, 0x40045436, 0x37) 03:08:05 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x2, 0x744000) 03:08:05 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b41, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3307.401991] binder: 29734:29738 ioctl 5415 20000040 returned -22 [ 3307.436734] binder: 29734:29738 unknown command 875837489 03:08:05 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b44, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:05 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4940) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) 03:08:05 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b2f, 0x744000) [ 3307.471628] binder: 29734:29738 ioctl c0306201 200000c0 returned -22 [ 3307.486114] binder: 29734:29744 ioctl 40045436 37 returned -22 03:08:05 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b45, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="b440e7fd1bd1f6c5c6452b6c2339eb976f66b6c1d4f5292eae818d9c7e7a74a6deaa842aa35f3e893d4ea5868800122d55f66b78f3516beafbdd04888d713502c81e30558debd750a073494216900b50796f7b346ae61c8318ec5bceb9b516e2239e565fe7b7fc1edf8ec2cca08b084c8d22a6829b1bb24bac70029cdd741ec875378c7084fa25f1156d4097f58382b15a56cdbd94657d2aacc7e2a7231c294b34bae1a3713e8c04076371866e6e914394ad1d997deabdb6302be6662a14cd497740294a4519634e4a9e0a5d4ac6d89667b4087b800118fb8cf9c4fedc650c55696bdf2224311671ea4f8f71e8191b521abfdd1e5de98ad464101f7c178c35e7f76516da2d62bb2dc2440387913265ae8375c16d6337824cac794c5e8c99cad411073ed6ba700c69f55d9ad939958cdb7bbc9943904a1f5b56ac76556fd21bb4c58caca520b676ffbc49f200fd993026dbd48ef09cd4fbc012a7df91307ce210b2ea311e36c1a87ed68e782ba4a185a1b635d05d4ac1b34ad015dd022ad61f7feebbd450f5a07ee6f62b03e3bd7e7d50e96ecef6e30bc2a40377e021e459bdbf94f400854f21a2259215241c6bf4a1e436193509e27ac57c6518e42df7eab2a73ffcd785ee14821efeb96e878efd3b88120c7778e9f422c618e0614dd5ea79ea06d5c3e88ba397dd3b96171d77ef143a09d1d93bb44795c845a7271e1f1894c97cbedefcc53cedafe1dc004221dc4b451c09b93676d02cca15d7cd385d8e6bbb0d2b4f86a543d6e21af84760141347508e4da8611936cff6f2c84b2faf53434c55765849fd7858add5de4fea0ec98dc5b527a8677a66b70db0ebeb56bbfeaae567c3d1aac1929ac1053d1403cb1c14517769ac05145ff05700632af7a51848634b3b5f74bd894bf099769c65033c0475765934c7a1618b7ac3fbb39154f381466f1ac45ce2ba5c63184cb9f7b2f0aa372e10286b6c6ca4bb11eee3ded181d7c4838d791dc1df98a40b28e485b8ff373fc9e67f73a0a15f2f8e00554bfcacc5b0bf9f7cfb720ee63733597756d1579bd440d393574d08cd44a51d3d3a39a03b48f4ea754b7a404c9d2bb62e968cb05b297699585be683f21edbc7422a56ee26c3864553ff4fd91f7668203417fe3625d36f16a6d088bd3e62dbdff723c52069b0bc6e70cd9330a8ba46823a3349cba55e0b3394b633874dbdbdf45a677744b1842acc02d6ca35937951b3727d8920ac2e5a283035e144df463a529ca09d96f02659b640677620c8e5b49a3d648c32f3c31fe57eefbfdde5a19d10cb0c381ef1c90222fe557e186047c3b5fbb02a841a5d1afd0a6031dd7b6e0bf7dee97494015d22602f5e2c14ea7b498a1a877f57228dfa54eac4de742a69bae82a0e5bd87f25fb9e3675131f87565a92e312ca7afdaf1f8e95600735b2e9ae147b5bb08f162f"}) 03:08:05 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) r7 = dup2(r6, r5) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) r8 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000380)=[@free_buffer={0x40086303, r8}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0xcc, 0x0, &(0x7f0000000340)=[@acquire_done={0x40106309, 0x3}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x9, 0x0, 0x2e}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/169, 0xa9, 0x2, 0x20}, @flat=@weak_binder={0x77622a85, 0x0, 0x3}}, &(0x7f0000000040)={0x0, 0x20, 0x48}}, 0x400}, @reply_sg={0x40486312, {0x6, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x3, 0x0, 0x1b}, @flat=@binder={0x73622a85, 0x1001}, @fd}, &(0x7f0000000100)={0x0, 0x20, 0x38}}}, @exit_looper, @free_buffer={0x40086303, r8}, @enter_looper, @dead_binder_done], 0xd, 0x0, &(0x7f0000000440)="86e0c25f6f6dc46e20750c241b"}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) syz_kvm_setup_cpu$x86(r7, r4, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) [ 3307.532572] binder: 29734:29744 ioctl 5415 20000040 returned -22 [ 3307.545463] binder: 29734:29738 unknown command 875837489 [ 3307.551287] binder: 29734:29752 unknown command 875837489 [ 3307.575050] binder: 29734:29738 ioctl c0306201 200000c0 returned -22 [ 3307.599867] binder: 29734:29752 ioctl c0306201 200000c0 returned -22 03:08:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b30, 0x744000) 03:08:06 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b46, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:06 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x560f, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 3307.671972] binder: 29756:29759 ioctl 4020ae46 7fda76f58510 returned -22 [ 3307.697467] binder: 29756:29759 ioctl 4020ae46 7fda76f58510 returned -22 03:08:06 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x103680) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="050014e763abac341b42387d5af3ebcf7c5000001bff2e2e750dca82cb4ec0bc2fbbdfec7ecf84eba88ec394a75ac55f288a4c223a24ee6fd4df76d5e18fae2a69fee85f33f875"], 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c00800000478bf8210100010000000000", @ANYRES16=r4, @ANYBLOB="010300000000000000000400000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="8afabc981ea599fea753a1cd7fffd958bd9da300fda6", @ANYRES32=r9, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xfff1}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x20, 0x2, [@TCA_RSVP_CLASSID={0x8}, @TCA_RSVP_DST={0x14, 0x2, @private2}]}}]}, 0x50}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r4, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xc8b5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r10 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x1f, 0x82000) ioctl$VIDIOC_G_CTRL(r10, 0xc008561b, &(0x7f0000000080)={0x0, 0xfffff800}) 03:08:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b31, 0x744000) [ 3307.724198] binder: 29756:29759 ioctl 4020ae46 7fda76f58510 returned -22 03:08:06 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b47, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3307.783192] binder: 29756:29759 ioctl 4020ae46 7fda76f58510 returned -22 [ 3307.806826] binder: 29756:29759 ioctl 4020ae46 7fda76f58510 returned -22 03:08:06 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x560f, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x20) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000100)={0x0, 'veth1_to_hsr\x00', 0x4}, 0x18) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000000)=0x8, 0x4) 03:08:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b32, 0x744000) [ 3307.839825] binder: 29770:29774 unknown command -418119675 [ 3307.861240] binder: 29756:29759 ioctl 4020ae46 7fda76f58510 returned -22 [ 3307.868084] binder: 29770:29774 ioctl c0306201 200000c0 returned -22 03:08:06 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b48, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3307.894953] binder: 29756:29759 ioctl 4020ae46 7fda76f58510 returned -22 [ 3307.904319] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3307.960113] binder: 29756:29759 ioctl 4020ae46 7fda76f58510 returned -22 [ 3307.989946] binder: 29770:29774 unknown command -418119675 [ 3307.997382] binder: 29770:29774 ioctl c0306201 200000c0 returned -22 03:08:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b33, 0x744000) 03:08:06 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x2, 0x40) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000040)="2c8199d6f0de1c247c2888f037c3ac16dace7509abbd0c13bc4331553e2e43285e07802a0222cd134d8c3129986aeea2e84ea9f5a5df0e729ed2d7d6aab3ad6d2c52e14f59af5930b6c526e8120eabe1ac9a1c3414c966639acd605b30651ec4754b53ff702ce1c95ef486d8997e095c1d3ace272c385b69053e7749580191c73b5ce6d592a36a8a0fe66fd9f5d3fddcdf24af4cc637725c91e7b24ea69564953f2ba51f35ebbbdfa2653c64ccbe52eb325823f89ebaf79a6f062bae9ac3984f8f3d0fcb19ba7d53cfbfde807e45774cc8119d85a3697bd8a42333b5e3e792c9f8a48e", 0xe3}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) fsetxattr$security_evm(r2, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@md5={0x1, "726ca2bee5639957d4cfebeaad9f1214"}, 0x11, 0x1) ioctl$KDSETMODE(r0, 0x560f, 0x0) [ 3307.997990] binder: 29756:29759 ioctl 4020ae46 7fda76f58510 returned -22 [ 3308.048414] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3308.058677] binder: 29756:29759 ioctl 4020ae46 7fda76f58510 returned -22 [ 3308.106780] binder: 29756:29759 ioctl 4020ae46 7fda76f58510 returned -22 [ 3308.159130] binder: 29756:29759 ioctl 4020ae46 7fda76f58510 returned -22 [ 3308.174016] binder: 29756:29759 ioctl 4020ae46 7fda76f58510 returned -22 [ 3308.190106] binder: 29756:29759 ioctl 4020ae46 7fda76f58510 returned -22 [ 3308.205047] binder: 29756:29759 ioctl 4020ae46 7fda76f58510 returned -22 [ 3308.221176] binder: 29756:29759 ioctl 4020ae46 7fda76f58510 returned -22 [ 3308.242154] binder: 29756:29759 ioctl 4020ae46 7fda76f58510 returned -22 [ 3308.281913] binder: 29756:29759 ioctl 4020ae46 7fda76f58510 returned -22 [ 3308.288900] binder: 29756:29759 ioctl 4020ae46 7fda76f58510 returned -22 [ 3308.305598] binder: 29756:29759 ioctl 4020ae46 7fda76f58510 returned -22 [ 3308.314002] binder: 29756:29759 ioctl 4020ae46 7fda76f58510 returned -22 03:08:06 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) r5 = getpid() sched_setattr(r5, &(0x7f0000000440)={0x30, 0x2, 0x0, 0x4, 0x8, 0x3, 0x800000000000}, 0x0) setpgid(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 03:08:06 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b49, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b34, 0x744000) 03:08:06 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) clock_gettime(0x0, &(0x7f0000004900)={0x0, 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000004940)={0x1, 0x8, 0x4, 0x24, 0xfffffffe, {r3, r4/1000+60000}, {0x5, 0x0, 0x3f, 0x9, 0x3, 0x0, "69b53f5e"}, 0x8001, 0x4, @userptr=0x9, 0x1, 0x0, r5}) ioctl$IMGETCOUNT(r6, 0x80044943, &(0x7f00000049c0)) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) 03:08:06 executing program 5: r0 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000080)=0xc) keyctl$chown(0x4, r0, r2, 0x0) r3 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000080)=0xc) keyctl$chown(0x4, r3, r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x1) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r8 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r9 = syz_open_dev$binderN(0x0, 0x0, 0x0) r10 = dup2(r9, r8) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000ffef"], 0x0, 0x0, 0x0}) ioctl$VIDIOC_G_SELECTION(r10, 0xc040565e, &(0x7f0000000000)={0x9, 0x100, 0x2, {0x5, 0xfffffff9, 0x3ff, 0x3}}) setresgid(0x0, 0x0, r7) setfsgid(r7) keyctl$chown(0x4, r0, r5, r7) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r11, 0x560f, 0x0) [ 3308.325637] binder: 29756:29759 ioctl 4020ae46 7fda76f58510 returned -22 [ 3308.333972] binder: 29756:29759 ioctl 4020ae46 7fda76f58510 returned -22 [ 3308.345785] binder: 29756:29759 ioctl 4020ae46 7fda76f58510 returned -22 [ 3308.354191] binder: 29756:29759 ioctl 4020ae46 7fda76f58530 returned -22 [ 3308.368011] binder: 29756:29759 ioctl 8138ae83 7fda76f586f0 returned -22 03:08:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b35, 0x744000) 03:08:06 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b4a, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="b440e7fd1bd1f6c5c6452b6c2339eb976f66b6c1d4f5292eae818d9c7e7a74a6deaa842aa35f3e893d4ea5868800122d55f66b78f3516beafbdd04888d713502c81e30558debd750a073494216900b50796f7b346ae61c8318ec5bceb9b516e2239e565fe7b7fc1edf8ec2cca08b084c8d22a6829b1bb24bac70029cdd741ec875378c7084fa25f1156d4097f58382b15a56cdbd94657d2aacc7e2a7231c294b34bae1a3713e8c04076371866e6e914394ad1d997deabdb6302be6662a14cd497740294a4519634e4a9e0a5d4ac6d89667b4087b800118fb8cf9c4fedc650c55696bdf2224311671ea4f8f71e8191b521abfdd1e5de98ad464101f7c178c35e7f76516da2d62bb2dc2440387913265ae8375c16d6337824cac794c5e8c99cad411073ed6ba700c69f55d9ad939958cdb7bbc9943904a1f5b56ac76556fd21bb4c58caca520b676ffbc49f200fd993026dbd48ef09cd4fbc012a7df91307ce210b2ea311e36c1a87ed68e782ba4a185a1b635d05d4ac1b34ad015dd022ad61f7feebbd450f5a07ee6f62b03e3bd7e7d50e96ecef6e30bc2a40377e021e459bdbf94f400854f21a2259215241c6bf4a1e436193509e27ac57c6518e42df7eab2a73ffcd785ee14821efeb96e878efd3b88120c7778e9f422c618e0614dd5ea79ea06d5c3e88ba397dd3b96171d77ef143a09d1d93bb44795c845a7271e1f1894c97cbedefcc53cedafe1dc004221dc4b451c09b93676d02cca15d7cd385d8e6bbb0d2b4f86a543d6e21af84760141347508e4da8611936cff6f2c84b2faf53434c55765849fd7858add5de4fea0ec98dc5b527a8677a66b70db0ebeb56bbfeaae567c3d1aac1929ac1053d1403cb1c14517769ac05145ff05700632af7a51848634b3b5f74bd894bf099769c65033c0475765934c7a1618b7ac3fbb39154f381466f1ac45ce2ba5c63184cb9f7b2f0aa372e10286b6c6ca4bb11eee3ded181d7c4838d791dc1df98a40b28e485b8ff373fc9e67f73a0a15f2f8e00554bfcacc5b0bf9f7cfb720ee63733597756d1579bd440d393574d08cd44a51d3d3a39a03b48f4ea754b7a404c9d2bb62e968cb05b297699585be683f21edbc7422a56ee26c3864553ff4fd91f7668203417fe3625d36f16a6d088bd3e62dbdff723c52069b0bc6e70cd9330a8ba46823a3349cba55e0b3394b633874dbdbdf45a677744b1842acc02d6ca35937951b3727d8920ac2e5a283035e144df463a529ca09d96f02659b640677620c8e5b49a3d648c32f3c31fe57eefbfdde5a19d10cb0c381ef1c90222fe557e186047c3b5fbb02a841a5d1afd0a6031dd7b6e0bf7dee97494015d22602f5e2c14ea7b498a1a877f57228dfa54eac4de742a69bae82a0e5bd87f25fb9e3675131f87565a92e312ca7afdaf1f8e95600735b2e9ae147b5bb08f162f"}) [ 3308.438649] binder: 29808:29812 ioctl c0585611 20004940 returned -22 [ 3308.456729] binder: 29806:29813 ioctl 4020ae46 7fda76f58510 returned -22 [ 3308.503157] binder: 29806:29813 ioctl 4020ae46 7fda76f58510 returned -22 [ 3308.503718] binder: 29811:29814 unknown command 1 [ 3308.518958] binder: 29808:29812 ioctl c0585611 20004940 returned -22 [ 3308.526453] binder: 29806:29813 ioctl 4020ae46 7fda76f58510 returned -22 [ 3308.528080] binder: 29811:29814 ioctl c0306201 200000c0 returned -22 03:08:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b36, 0x744000) [ 3308.549666] binder: 29811:29820 ioctl c040565e 20000000 returned -22 [ 3308.570109] binder: 29806:29813 ioctl 4020ae46 7fda76f58510 returned -22 03:08:06 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b4b, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:06 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'L-', 0x800}, 0x16, 0x1) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$SNDRV_PCM_IOCTL_START(r3, 0x4142, 0x0) [ 3308.594744] binder: 29806:29813 ioctl 4020ae46 7fda76f58510 returned -22 [ 3308.632566] binder: 29806:29813 ioctl 4020ae46 7fda76f58510 returned -22 [ 3308.655315] binder: 29811:29827 ioctl c040565e 20000000 returned -22 [ 3308.662163] binder: 29811:29814 unknown command 1 [ 3308.667328] binder: 29811:29814 ioctl c0306201 200000c0 returned -22 [ 3308.672069] binder: 29806:29813 ioctl 4020ae46 7fda76f58510 returned -22 03:08:07 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b37, 0x744000) 03:08:07 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b4c, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3308.701710] binder: 29831:29835 ioctl 4142 0 returned -22 [ 3308.718700] binder: 29806:29813 ioctl 4020ae46 7fda76f58510 returned -22 [ 3308.750507] binder: 29806:29813 ioctl 4020ae46 7fda76f58510 returned -22 [ 3308.758363] binder: 29831:29840 ioctl 4142 0 returned -22 [ 3308.773443] binder: 29806:29813 ioctl 4020ae46 7fda76f58510 returned -22 [ 3308.806292] binder: 29806:29813 ioctl 4020ae46 7fda76f58510 returned -22 [ 3308.856643] binder: 29806:29813 ioctl 4020ae46 7fda76f58510 returned -22 [ 3308.894286] binder: 29806:29813 ioctl 4020ae46 7fda76f58510 returned -22 [ 3308.914310] binder: 29806:29813 ioctl 4020ae46 7fda76f58510 returned -22 [ 3308.935658] binder: 29806:29813 ioctl 4020ae46 7fda76f58510 returned -22 [ 3308.968178] binder: 29806:29813 ioctl 4020ae46 7fda76f58510 returned -22 [ 3308.988317] binder: 29806:29813 ioctl 4020ae46 7fda76f58510 returned -22 [ 3309.008061] binder: 29806:29813 ioctl 4020ae46 7fda76f58510 returned -22 [ 3309.031735] binder: 29806:29813 ioctl 4020ae46 7fda76f58510 returned -22 [ 3309.047303] binder: 29806:29813 ioctl 4020ae46 7fda76f58510 returned -22 [ 3309.067054] binder: 29806:29813 ioctl 4020ae46 7fda76f58510 returned -22 [ 3309.087376] binder: 29806:29813 ioctl 4020ae46 7fda76f58510 returned -22 [ 3309.105955] binder: 29806:29813 ioctl 4020ae46 7fda76f58510 returned -22 [ 3309.116978] binder: 29806:29813 ioctl 4020ae46 7fda76f58510 returned -22 [ 3309.126295] binder: 29806:29813 ioctl 4020ae46 7fda76f58530 returned -22 03:08:07 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 03:08:07 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r4) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) r7 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r8 = syz_open_dev$binderN(0x0, 0x0, 0x0) r9 = dup2(r8, r7) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) r10 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r11 = syz_open_dev$binderN(0x0, 0x0, 0x0) r12 = dup2(r11, r10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r12, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) write$P9_RGETLOCK(r3, &(0x7f0000000080)={0x2d, 0x37, 0x1, {0x2, 0xfffffffffffffc01, 0x10000, r13, 0xf, 'wlan1!\\\'-cpuset'}}, 0x2d) ioctl$KDSETMODE(r0, 0x560f, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:08:07 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x744000) 03:08:07 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b4d, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:07 executing program 4: syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 03:08:07 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b4e, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3309.214597] binder: 29850:29854 ioctl c0502100 20000100 returned -22 [ 3309.226494] binder: 29849:29855 ioctl 4020ae46 7fda76f58510 returned -22 [ 3309.252642] binder: 29849:29855 ioctl 4020ae46 7fda76f58510 returned -22 03:08:07 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3b, 0x744000) [ 3309.285931] binder: 29849:29855 ioctl 4020ae46 7fda76f58510 returned -22 03:08:07 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b52, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:07 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000000)=0x3, 0x4) ioctl$KDSETMODE(r0, 0x560f, 0x0) [ 3309.349778] binder: 29849:29855 ioctl 4020ae46 7fda76f58510 returned -22 [ 3309.370431] binder: 29849:29855 ioctl 4020ae46 7fda76f58510 returned -22 03:08:07 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3c, 0x744000) [ 3309.405956] binder: 29849:29855 ioctl 4020ae46 7fda76f58510 returned -22 [ 3309.455808] binder: 29849:29855 ioctl 4020ae46 7fda76f58510 returned -22 03:08:07 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b60, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3309.497338] binder: 29849:29855 ioctl 4020ae46 7fda76f58510 returned -22 03:08:07 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3d, 0x744000) [ 3309.543597] binder: 29849:29855 ioctl 4020ae46 7fda76f58510 returned -22 [ 3309.568828] binder: 29849:29855 ioctl 4020ae46 7fda76f58510 returned -22 [ 3309.590798] binder: 29849:29855 ioctl 4020ae46 7fda76f58510 returned -22 [ 3309.614232] binder: 29849:29855 ioctl 4020ae46 7fda76f58510 returned -22 [ 3309.646658] binder: 29849:29855 ioctl 4020ae46 7fda76f58510 returned -22 [ 3309.665835] binder: 29849:29855 ioctl 4020ae46 7fda76f58510 returned -22 [ 3309.682049] binder: 29849:29855 ioctl 4020ae46 7fda76f58510 returned -22 [ 3309.697463] binder: 29849:29855 ioctl 4020ae46 7fda76f58510 returned -22 [ 3309.712507] binder: 29849:29855 ioctl 4020ae46 7fda76f58510 returned -22 [ 3309.749178] binder: 29849:29855 ioctl 4020ae46 7fda76f58510 returned -22 [ 3309.756096] binder: 29849:29855 ioctl 4020ae46 7fda76f58510 returned -22 [ 3309.779035] binder: 29849:29855 ioctl 4020ae46 7fda76f58510 returned -22 [ 3309.785958] binder: 29849:29855 ioctl 4020ae46 7fda76f58510 returned -22 [ 3309.800059] binder: 29849:29855 ioctl 4020ae46 7fda76f58510 returned -22 [ 3309.806958] binder: 29849:29855 ioctl 4020ae46 7fda76f58510 returned -22 [ 3309.849930] binder: 29849:29855 ioctl 4020ae46 7fda76f58510 returned -22 [ 3309.865514] binder: 29849:29855 ioctl 4020ae46 7fda76f58530 returned -22 03:08:08 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000180)) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r4) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_ADD_CTX(r6, 0xc0086420, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f0000000240)={r7, &(0x7f00000001c0)=""/69}) ioctl$KVM_PPC_GET_PVINFO(r2, 0x4080aea1, &(0x7f0000000040)=""/144) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) 03:08:08 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x560f, 0x4) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x2, 0x3, 0x9, 0x6, 0x1ff}) 03:08:08 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b61, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="b440e7fd1bd1f6c5c6452b6c2339eb976f66b6c1d4f5292eae818d9c7e7a74a6deaa842aa35f3e893d4ea5868800122d55f66b78f3516beafbdd04888d713502c81e30558debd750a073494216900b50796f7b346ae61c8318ec5bceb9b516e2239e565fe7b7fc1edf8ec2cca08b084c8d22a6829b1bb24bac70029cdd741ec875378c7084fa25f1156d4097f58382b15a56cdbd94657d2aacc7e2a7231c294b34bae1a3713e8c04076371866e6e914394ad1d997deabdb6302be6662a14cd497740294a4519634e4a9e0a5d4ac6d89667b4087b800118fb8cf9c4fedc650c55696bdf2224311671ea4f8f71e8191b521abfdd1e5de98ad464101f7c178c35e7f76516da2d62bb2dc2440387913265ae8375c16d6337824cac794c5e8c99cad411073ed6ba700c69f55d9ad939958cdb7bbc9943904a1f5b56ac76556fd21bb4c58caca520b676ffbc49f200fd993026dbd48ef09cd4fbc012a7df91307ce210b2ea311e36c1a87ed68e782ba4a185a1b635d05d4ac1b34ad015dd022ad61f7feebbd450f5a07ee6f62b03e3bd7e7d50e96ecef6e30bc2a40377e021e459bdbf94f400854f21a2259215241c6bf4a1e436193509e27ac57c6518e42df7eab2a73ffcd785ee14821efeb96e878efd3b88120c7778e9f422c618e0614dd5ea79ea06d5c3e88ba397dd3b96171d77ef143a09d1d93bb44795c845a7271e1f1894c97cbedefcc53cedafe1dc004221dc4b451c09b93676d02cca15d7cd385d8e6bbb0d2b4f86a543d6e21af84760141347508e4da8611936cff6f2c84b2faf53434c55765849fd7858add5de4fea0ec98dc5b527a8677a66b70db0ebeb56bbfeaae567c3d1aac1929ac1053d1403cb1c14517769ac05145ff05700632af7a51848634b3b5f74bd894bf099769c65033c0475765934c7a1618b7ac3fbb39154f381466f1ac45ce2ba5c63184cb9f7b2f0aa372e10286b6c6ca4bb11eee3ded181d7c4838d791dc1df98a40b28e485b8ff373fc9e67f73a0a15f2f8e00554bfcacc5b0bf9f7cfb720ee63733597756d1579bd440d393574d08cd44a51d3d3a39a03b48f4ea754b7a404c9d2bb62e968cb05b297699585be683f21edbc7422a56ee26c3864553ff4fd91f7668203417fe3625d36f16a6d088bd3e62dbdff723c52069b0bc6e70cd9330a8ba46823a3349cba55e0b3394b633874dbdbdf45a677744b1842acc02d6ca35937951b3727d8920ac2e5a283035e144df463a529ca09d96f02659b640677620c8e5b49a3d648c32f3c31fe57eefbfdde5a19d10cb0c381ef1c90222fe557e186047c3b5fbb02a841a5d1afd0a6031dd7b6e0bf7dee97494015d22602f5e2c14ea7b498a1a877f57228dfa54eac4de742a69bae82a0e5bd87f25fb9e3675131f87565a92e312ca7afdaf1f8e95600735b2e9ae147b5bb08f162f"}) 03:08:08 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b40, 0x744000) [ 3309.956602] binder: 29888:29889 ioctl c0086420 20000280 returned -22 [ 3309.974564] binder: 29888:29889 ioctl 4080aea1 20000040 returned -22 [ 3309.990548] binder: 29888:29889 ioctl 4020ae46 7fda76f58510 returned -22 [ 3310.006674] binder: 29888:29889 ioctl 4020ae46 7fda76f58510 returned -22 [ 3310.026444] binder: 29888:29889 ioctl 4020ae46 7fda76f58510 returned -22 [ 3310.035166] binder: 29890:29893 ioctl 5381 0 returned -22 03:08:08 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b41, 0x744000) 03:08:08 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b62, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3310.062384] binder: 29890:29898 ioctl 5381 0 returned -22 [ 3310.064362] binder: 29888:29889 ioctl 4020ae46 7fda76f58510 returned -22 [ 3310.089799] binder: 29888:29889 ioctl 4020ae46 7fda76f58510 returned -22 [ 3310.105614] binder: 29888:29889 ioctl 4020ae46 7fda76f58510 returned -22 03:08:08 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x560f, 0x0) [ 3310.146945] binder: 29888:29889 ioctl 4020ae46 7fda76f58510 returned -22 [ 3310.178346] binder: 29888:29889 ioctl 4020ae46 7fda76f58510 returned -22 03:08:08 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b63, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:08 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b44, 0x744000) 03:08:08 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x560f, 0x0) [ 3310.204015] binder: 29888:29889 ioctl 4020ae46 7fda76f58510 returned -22 [ 3310.235618] binder: 29888:29889 ioctl 4020ae46 7fda76f58510 returned -22 [ 3310.277731] binder: 29888:29889 ioctl 4020ae46 7fda76f58510 returned -22 [ 3310.316428] binder: 29888:29889 ioctl 4020ae46 7fda76f58510 returned -22 03:08:08 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b45, 0x744000) 03:08:08 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b64, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3310.340524] binder: 29888:29889 ioctl 4020ae46 7fda76f58510 returned -22 [ 3310.355875] binder: 29888:29889 ioctl 4020ae46 7fda76f58510 returned -22 [ 3310.371216] binder: 29888:29889 ioctl 4020ae46 7fda76f58510 returned -22 [ 3310.401319] binder: 29888:29889 ioctl 4020ae46 7fda76f58510 returned -22 [ 3310.428463] binder: 29888:29889 ioctl 4020ae46 7fda76f58510 returned -22 [ 3310.463831] binder: 29888:29889 ioctl 4020ae46 7fda76f58510 returned -22 [ 3310.481177] binder: 29888:29889 ioctl 4020ae46 7fda76f58510 returned -22 [ 3310.495149] binder: 29888:29889 ioctl 4020ae46 7fda76f58510 returned -22 [ 3310.511306] binder: 29888:29889 ioctl 4020ae46 7fda76f58510 returned -22 [ 3310.526418] binder: 29888:29889 ioctl 4020ae46 7fda76f58510 returned -22 [ 3310.541982] binder: 29888:29889 ioctl 4020ae46 7fda76f58510 returned -22 [ 3310.558112] binder: 29888:29889 ioctl 4020ae46 7fda76f58510 returned -22 [ 3310.572452] binder: 29888:29889 ioctl 4020ae46 7fda76f58530 returned -22 03:08:09 executing program 0: setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000040)=0x5, 0x4) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x2) r2 = dup2(r1, r0) fcntl$setflags(r2, 0x2, 0x1) r3 = dup(r2) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x2000c0, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) connect$rose(r8, &(0x7f0000000180)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x40) 03:08:09 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x101680, 0x0) ioctl$KDSETMODE(r0, 0x560f, 0x0) 03:08:09 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b46, 0x744000) 03:08:09 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b65, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3310.715913] binder: 29925:29926 ioctl 4020ae46 7fda76f58510 returned -22 [ 3310.735975] binder: 29925:29926 ioctl 4020ae46 7fda76f58510 returned -22 [ 3310.753743] binder: 29925:29926 ioctl 4020ae46 7fda76f58510 returned -22 03:08:09 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b66, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="b440e7fd1bd1f6c5c6452b6c2339eb976f66b6c1d4f5292eae818d9c7e7a74a6deaa842aa35f3e893d4ea5868800122d55f66b78f3516beafbdd04888d713502c81e30558debd750a073494216900b50796f7b346ae61c8318ec5bceb9b516e2239e565fe7b7fc1edf8ec2cca08b084c8d22a6829b1bb24bac70029cdd741ec875378c7084fa25f1156d4097f58382b15a56cdbd94657d2aacc7e2a7231c294b34bae1a3713e8c04076371866e6e914394ad1d997deabdb6302be6662a14cd497740294a4519634e4a9e0a5d4ac6d89667b4087b800118fb8cf9c4fedc650c55696bdf2224311671ea4f8f71e8191b521abfdd1e5de98ad464101f7c178c35e7f76516da2d62bb2dc2440387913265ae8375c16d6337824cac794c5e8c99cad411073ed6ba700c69f55d9ad939958cdb7bbc9943904a1f5b56ac76556fd21bb4c58caca520b676ffbc49f200fd993026dbd48ef09cd4fbc012a7df91307ce210b2ea311e36c1a87ed68e782ba4a185a1b635d05d4ac1b34ad015dd022ad61f7feebbd450f5a07ee6f62b03e3bd7e7d50e96ecef6e30bc2a40377e021e459bdbf94f400854f21a2259215241c6bf4a1e436193509e27ac57c6518e42df7eab2a73ffcd785ee14821efeb96e878efd3b88120c7778e9f422c618e0614dd5ea79ea06d5c3e88ba397dd3b96171d77ef143a09d1d93bb44795c845a7271e1f1894c97cbedefcc53cedafe1dc004221dc4b451c09b93676d02cca15d7cd385d8e6bbb0d2b4f86a543d6e21af84760141347508e4da8611936cff6f2c84b2faf53434c55765849fd7858add5de4fea0ec98dc5b527a8677a66b70db0ebeb56bbfeaae567c3d1aac1929ac1053d1403cb1c14517769ac05145ff05700632af7a51848634b3b5f74bd894bf099769c65033c0475765934c7a1618b7ac3fbb39154f381466f1ac45ce2ba5c63184cb9f7b2f0aa372e10286b6c6ca4bb11eee3ded181d7c4838d791dc1df98a40b28e485b8ff373fc9e67f73a0a15f2f8e00554bfcacc5b0bf9f7cfb720ee63733597756d1579bd440d393574d08cd44a51d3d3a39a03b48f4ea754b7a404c9d2bb62e968cb05b297699585be683f21edbc7422a56ee26c3864553ff4fd91f7668203417fe3625d36f16a6d088bd3e62dbdff723c52069b0bc6e70cd9330a8ba46823a3349cba55e0b3394b633874dbdbdf45a677744b1842acc02d6ca35937951b3727d8920ac2e5a283035e144df463a529ca09d96f02659b640677620c8e5b49a3d648c32f3c31fe57eefbfdde5a19d10cb0c381ef1c90222fe557e186047c3b5fbb02a841a5d1afd0a6031dd7b6e0bf7dee97494015d22602f5e2c14ea7b498a1a877f57228dfa54eac4de742a69bae82a0e5bd87f25fb9e3675131f87565a92e312ca7afdaf1f8e95600735b2e9ae147b5bb08f162f"}) [ 3310.781393] binder: 29925:29926 ioctl 4020ae46 7fda76f58510 returned -22 03:08:09 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x560f, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x8000, 0x5, 0x7f, 0x4}}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x4000c0, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000040)={0x18, 0x3, 0x6, 0x40}) 03:08:09 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$USBDEVFS_BULK(r4, 0xc0185502, &(0x7f0000000080)={{{0xc, 0x1}}, 0x13, 0x7fffffff, &(0x7f0000000040)="f84c894e05a0ee9d4857cf1144323c8ff92c07"}) r5 = dup2(r1, r0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x78, 0x453, 0x2, 0x70bd2c, 0x25dfdbff, "30d1df5fe88272ecde46016e6371324cb60a4554454be18253924e6a9003a4cfe3ea5691e2bbe90943f7280d915a73cf9a5fe1c0cf1ed807838e3b69808ac49925895dcfae9eaa20870e7b5c3d85e194d85ce29ee521d64d99bc0fe5cca00cfd1fb63f42aadc", ["", "", "", "", "", "", "", "", ""]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x1) socketpair$unix(0x1, 0xdeddb8285de65ca1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 03:08:09 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b47, 0x744000) 03:08:09 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b67, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:09 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000000)="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") ioctl$KDSETMODE(r0, 0x560f, 0x0) [ 3310.946964] binder: 29941:29945 ioctl c0185502 20000080 returned -22 [ 3310.980060] binder: 29941:29945 ioctl 4020ae46 7fda76f58510 returned -22 03:08:09 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b48, 0x744000) [ 3311.016390] binder: 29941:29945 ioctl 4020ae46 7fda76f58510 returned -22 [ 3311.048140] binder: 29941:29945 ioctl 4020ae46 7fda76f58510 returned -22 03:08:09 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b68, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="b440e7fd1bd1f6c5c6452b6c2339eb976f66b6c1d4f5292eae818d9c7e7a74a6deaa842aa35f3e893d4ea5868800122d55f66b78f3516beafbdd04888d713502c81e30558debd750a073494216900b50796f7b346ae61c8318ec5bceb9b516e2239e565fe7b7fc1edf8ec2cca08b084c8d22a6829b1bb24bac70029cdd741ec875378c7084fa25f1156d4097f58382b15a56cdbd94657d2aacc7e2a7231c294b34bae1a3713e8c04076371866e6e914394ad1d997deabdb6302be6662a14cd497740294a4519634e4a9e0a5d4ac6d89667b4087b800118fb8cf9c4fedc650c55696bdf2224311671ea4f8f71e8191b521abfdd1e5de98ad464101f7c178c35e7f76516da2d62bb2dc2440387913265ae8375c16d6337824cac794c5e8c99cad411073ed6ba700c69f55d9ad939958cdb7bbc9943904a1f5b56ac76556fd21bb4c58caca520b676ffbc49f200fd993026dbd48ef09cd4fbc012a7df91307ce210b2ea311e36c1a87ed68e782ba4a185a1b635d05d4ac1b34ad015dd022ad61f7feebbd450f5a07ee6f62b03e3bd7e7d50e96ecef6e30bc2a40377e021e459bdbf94f400854f21a2259215241c6bf4a1e436193509e27ac57c6518e42df7eab2a73ffcd785ee14821efeb96e878efd3b88120c7778e9f422c618e0614dd5ea79ea06d5c3e88ba397dd3b96171d77ef143a09d1d93bb44795c845a7271e1f1894c97cbedefcc53cedafe1dc004221dc4b451c09b93676d02cca15d7cd385d8e6bbb0d2b4f86a543d6e21af84760141347508e4da8611936cff6f2c84b2faf53434c55765849fd7858add5de4fea0ec98dc5b527a8677a66b70db0ebeb56bbfeaae567c3d1aac1929ac1053d1403cb1c14517769ac05145ff05700632af7a51848634b3b5f74bd894bf099769c65033c0475765934c7a1618b7ac3fbb39154f381466f1ac45ce2ba5c63184cb9f7b2f0aa372e10286b6c6ca4bb11eee3ded181d7c4838d791dc1df98a40b28e485b8ff373fc9e67f73a0a15f2f8e00554bfcacc5b0bf9f7cfb720ee63733597756d1579bd440d393574d08cd44a51d3d3a39a03b48f4ea754b7a404c9d2bb62e968cb05b297699585be683f21edbc7422a56ee26c3864553ff4fd91f7668203417fe3625d36f16a6d088bd3e62dbdff723c52069b0bc6e70cd9330a8ba46823a3349cba55e0b3394b633874dbdbdf45a677744b1842acc02d6ca35937951b3727d8920ac2e5a283035e144df463a529ca09d96f02659b640677620c8e5b49a3d648c32f3c31fe57eefbfdde5a19d10cb0c381ef1c90222fe557e186047c3b5fbb02a841a5d1afd0a6031dd7b6e0bf7dee97494015d22602f5e2c14ea7b498a1a877f57228dfa54eac4de742a69bae82a0e5bd87f25fb9e3675131f87565a92e312ca7afdaf1f8e95600735b2e9ae147b5bb08f162f"}) 03:08:09 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) write$cgroup_int(r3, &(0x7f0000000040)=0x1f, 0x12) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000000)={0xd, 0x4}) ioctl$KDSETMODE(r0, 0x560f, 0x0) [ 3311.076081] binder: 29941:29945 ioctl 4020ae46 7fda76f58510 returned -22 03:08:09 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b49, 0x744000) [ 3311.130265] binder: 29941:29945 ioctl 4020ae46 7fda76f58510 returned -22 [ 3311.154266] binder: 29941:29945 ioctl 4020ae46 7fda76f58510 returned -22 03:08:09 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b69, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:09 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b4a, 0x744000) [ 3311.195173] binder: 29941:29945 ioctl 4020ae46 7fda76f58510 returned -22 03:08:09 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(0xffffffffffffffff, 0x560f, 0x4000000001) [ 3311.265263] binder: 29941:29945 ioctl 4020ae46 7fda76f58510 returned -22 [ 3311.288278] binder: 29941:29945 ioctl 4020ae46 7fda76f58510 returned -22 03:08:09 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b6a, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3311.312819] binder: 29941:29945 ioctl 4020ae46 7fda76f58510 returned -22 03:08:09 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b4b, 0x744000) [ 3311.354124] binder: 29941:29945 ioctl 4020ae46 7fda76f58510 returned -22 [ 3311.385948] binder: 29941:29945 ioctl 4020ae46 7fda76f58510 returned -22 [ 3311.430596] binder: 29941:29945 ioctl 4020ae46 7fda76f58510 returned -22 [ 3311.464397] binder: 29941:29945 ioctl 4020ae46 7fda76f58510 returned -22 [ 3311.487188] binder: 29941:29945 ioctl 4020ae46 7fda76f58510 returned -22 [ 3311.510502] binder: 29941:29945 ioctl 4020ae46 7fda76f58510 returned -22 [ 3311.531788] binder: 29941:29945 ioctl 4020ae46 7fda76f58510 returned -22 [ 3311.563265] binder: 29941:29945 ioctl 4020ae46 7fda76f58510 returned -22 [ 3311.586909] binder: 29941:29945 ioctl 4020ae46 7fda76f58510 returned -22 [ 3311.615966] binder: 29941:29945 ioctl 4020ae46 7fda76f58510 returned -22 [ 3311.644387] binder: 29941:29945 ioctl 4020ae46 7fda76f58510 returned -22 [ 3311.652839] binder: 29941:29945 ioctl 4020ae46 7fda76f58510 returned -22 [ 3311.682648] binder: 29941:29945 ioctl 4020ae46 7fda76f58510 returned -22 [ 3311.703751] binder: 29941:29945 ioctl 4020ae46 7fda76f58510 returned -22 [ 3311.713557] binder: 29941:29945 ioctl 4020ae46 7fda76f58530 returned -22 [ 3311.726416] binder: 29941:29952 unknown command 1074553740 [ 3311.736159] binder: 29941:29987 ioctl c0185502 20000080 returned -22 [ 3311.745153] binder: 29941:29952 ioctl c0306201 20000100 returned -22 [ 3311.755851] binder: 29941:29987 ioctl 4020ae46 7fda76f16510 returned -22 [ 3311.766096] binder: 29941:29987 ioctl 4020ae46 7fda76f16510 returned -22 [ 3311.776485] binder: 29941:29987 ioctl 4020ae46 7fda76f16510 returned -22 [ 3311.786873] binder: 29941:29987 ioctl 4020ae46 7fda76f16510 returned -22 [ 3311.801295] binder: 29941:29987 ioctl 4020ae46 7fda76f16510 returned -22 03:08:10 executing program 0: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00f000cb4681a6321b00"], 0x0, 0x0, 0x0}) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000040)=0x4, 0x4) syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r4, r5) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) 03:08:10 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b6b, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:10 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b4c, 0x744000) 03:08:10 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x1406) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @local, 0x6}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x32db00, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x66, &(0x7f0000000300)={r5, @in6={{0xa, 0x4e24, 0x9a8e, @local, 0x487}}}, &(0x7f00000001c0)=0x90) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000000)={r5, @in6={{0xa, 0x4e24, 0x80, @private0={0xfc, 0x0, [], 0x1}, 0x4}}, 0x7, 0xffff, 0x4, 0x5, 0x3}, &(0x7f00000000c0)=0x98) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r6, 0x560f, 0x0) 03:08:10 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) pipe(&(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) dup2(r1, r2) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4) 03:08:10 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b6c, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:10 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b4d, 0x744000) [ 3311.914070] binder: 29993:29996 unknown command -889131008 [ 3311.938286] binder: 29993:29996 ioctl c0306201 200000c0 returned -22 03:08:10 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) syncfs(r0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4000) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000140)={0x0, 0xc20, 0x80000000, r2, 0x0, &(0x7f0000000100)={0x980924, 0x10001, [], @p_u16=&(0x7f00000000c0)=0x9}}) 03:08:10 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b6d, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="b440e7fd1bd1f6c5c6452b6c2339eb976f66b6c1d4f5292eae818d9c7e7a74a6deaa842aa35f3e893d4ea5868800122d55f66b78f3516beafbdd04888d713502c81e30558debd750a073494216900b50796f7b346ae61c8318ec5bceb9b516e2239e565fe7b7fc1edf8ec2cca08b084c8d22a6829b1bb24bac70029cdd741ec875378c7084fa25f1156d4097f58382b15a56cdbd94657d2aacc7e2a7231c294b34bae1a3713e8c04076371866e6e914394ad1d997deabdb6302be6662a14cd497740294a4519634e4a9e0a5d4ac6d89667b4087b800118fb8cf9c4fedc650c55696bdf2224311671ea4f8f71e8191b521abfdd1e5de98ad464101f7c178c35e7f76516da2d62bb2dc2440387913265ae8375c16d6337824cac794c5e8c99cad411073ed6ba700c69f55d9ad939958cdb7bbc9943904a1f5b56ac76556fd21bb4c58caca520b676ffbc49f200fd993026dbd48ef09cd4fbc012a7df91307ce210b2ea311e36c1a87ed68e782ba4a185a1b635d05d4ac1b34ad015dd022ad61f7feebbd450f5a07ee6f62b03e3bd7e7d50e96ecef6e30bc2a40377e021e459bdbf94f400854f21a2259215241c6bf4a1e436193509e27ac57c6518e42df7eab2a73ffcd785ee14821efeb96e878efd3b88120c7778e9f422c618e0614dd5ea79ea06d5c3e88ba397dd3b96171d77ef143a09d1d93bb44795c845a7271e1f1894c97cbedefcc53cedafe1dc004221dc4b451c09b93676d02cca15d7cd385d8e6bbb0d2b4f86a543d6e21af84760141347508e4da8611936cff6f2c84b2faf53434c55765849fd7858add5de4fea0ec98dc5b527a8677a66b70db0ebeb56bbfeaae567c3d1aac1929ac1053d1403cb1c14517769ac05145ff05700632af7a51848634b3b5f74bd894bf099769c65033c0475765934c7a1618b7ac3fbb39154f381466f1ac45ce2ba5c63184cb9f7b2f0aa372e10286b6c6ca4bb11eee3ded181d7c4838d791dc1df98a40b28e485b8ff373fc9e67f73a0a15f2f8e00554bfcacc5b0bf9f7cfb720ee63733597756d1579bd440d393574d08cd44a51d3d3a39a03b48f4ea754b7a404c9d2bb62e968cb05b297699585be683f21edbc7422a56ee26c3864553ff4fd91f7668203417fe3625d36f16a6d088bd3e62dbdff723c52069b0bc6e70cd9330a8ba46823a3349cba55e0b3394b633874dbdbdf45a677744b1842acc02d6ca35937951b3727d8920ac2e5a283035e144df463a529ca09d96f02659b640677620c8e5b49a3d648c32f3c31fe57eefbfdde5a19d10cb0c381ef1c90222fe557e186047c3b5fbb02a841a5d1afd0a6031dd7b6e0bf7dee97494015d22602f5e2c14ea7b498a1a877f57228dfa54eac4de742a69bae82a0e5bd87f25fb9e3675131f87565a92e312ca7afdaf1f8e95600735b2e9ae147b5bb08f162f"}) 03:08:10 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x5c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback={0x2}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}]}, 0x5c}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r2, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffff4d56}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004000}, 0xc800) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x560f, 0x0) 03:08:10 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b70, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:10 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x604040) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000000)=0x7, 0x4) 03:08:10 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b4e, 0x744000) 03:08:10 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b71, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:10 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x560f, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x5) 03:08:10 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b52, 0x744000) 03:08:10 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000040)=0x7, &(0x7f0000000080)=0x2) 03:08:10 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4bfa, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:10 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b60, 0x744000) 03:08:10 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x82, 0x0) ioctl$KDSETMODE(r0, 0x560f, 0x1) 03:08:10 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000440)={0x30, 0x2, 0x0, 0x4, 0x8, 0x3, 0x800000000000}, 0x0) sched_setparam(r0, &(0x7f0000000040)=0xfffffffa) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) 03:08:10 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4bfb, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="b440e7fd1bd1f6c5c6452b6c2339eb976f66b6c1d4f5292eae818d9c7e7a74a6deaa842aa35f3e893d4ea5868800122d55f66b78f3516beafbdd04888d713502c81e30558debd750a073494216900b50796f7b346ae61c8318ec5bceb9b516e2239e565fe7b7fc1edf8ec2cca08b084c8d22a6829b1bb24bac70029cdd741ec875378c7084fa25f1156d4097f58382b15a56cdbd94657d2aacc7e2a7231c294b34bae1a3713e8c04076371866e6e914394ad1d997deabdb6302be6662a14cd497740294a4519634e4a9e0a5d4ac6d89667b4087b800118fb8cf9c4fedc650c55696bdf2224311671ea4f8f71e8191b521abfdd1e5de98ad464101f7c178c35e7f76516da2d62bb2dc2440387913265ae8375c16d6337824cac794c5e8c99cad411073ed6ba700c69f55d9ad939958cdb7bbc9943904a1f5b56ac76556fd21bb4c58caca520b676ffbc49f200fd993026dbd48ef09cd4fbc012a7df91307ce210b2ea311e36c1a87ed68e782ba4a185a1b635d05d4ac1b34ad015dd022ad61f7feebbd450f5a07ee6f62b03e3bd7e7d50e96ecef6e30bc2a40377e021e459bdbf94f400854f21a2259215241c6bf4a1e436193509e27ac57c6518e42df7eab2a73ffcd785ee14821efeb96e878efd3b88120c7778e9f422c618e0614dd5ea79ea06d5c3e88ba397dd3b96171d77ef143a09d1d93bb44795c845a7271e1f1894c97cbedefcc53cedafe1dc004221dc4b451c09b93676d02cca15d7cd385d8e6bbb0d2b4f86a543d6e21af84760141347508e4da8611936cff6f2c84b2faf53434c55765849fd7858add5de4fea0ec98dc5b527a8677a66b70db0ebeb56bbfeaae567c3d1aac1929ac1053d1403cb1c14517769ac05145ff05700632af7a51848634b3b5f74bd894bf099769c65033c0475765934c7a1618b7ac3fbb39154f381466f1ac45ce2ba5c63184cb9f7b2f0aa372e10286b6c6ca4bb11eee3ded181d7c4838d791dc1df98a40b28e485b8ff373fc9e67f73a0a15f2f8e00554bfcacc5b0bf9f7cfb720ee63733597756d1579bd440d393574d08cd44a51d3d3a39a03b48f4ea754b7a404c9d2bb62e968cb05b297699585be683f21edbc7422a56ee26c3864553ff4fd91f7668203417fe3625d36f16a6d088bd3e62dbdff723c52069b0bc6e70cd9330a8ba46823a3349cba55e0b3394b633874dbdbdf45a677744b1842acc02d6ca35937951b3727d8920ac2e5a283035e144df463a529ca09d96f02659b640677620c8e5b49a3d648c32f3c31fe57eefbfdde5a19d10cb0c381ef1c90222fe557e186047c3b5fbb02a841a5d1afd0a6031dd7b6e0bf7dee97494015d22602f5e2c14ea7b498a1a877f57228dfa54eac4de742a69bae82a0e5bd87f25fb9e3675131f87565a92e312ca7afdaf1f8e95600735b2e9ae147b5bb08f162f"}) 03:08:10 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b61, 0x744000) 03:08:10 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x560f, 0xfffffffffffffffe) 03:08:10 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x5409, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:10 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000040)={0x0, 0x42475251, 0x4, 0xfffffffa, 0xaa2516ecaf5cdaa6, @stepwise={{0x4, 0x8}, {0x800, 0xc92c}, {0x7ff, 0x7}}}) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) 03:08:11 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b62, 0x744000) 03:08:11 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x540b, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:11 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) r7 = dup2(r6, r5) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) getsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, &(0x7f0000000040)=0x1, &(0x7f0000000100)=0x4) r8 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) fanotify_mark(r2, 0x68, 0x8001002, r8, &(0x7f0000000000)='./file0\x00') r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r9, 0x560f, 0x0) 03:08:11 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b63, 0x744000) [ 3312.677276] binder: 30061:30064 ioctl c034564b 20000040 returned -22 [ 3312.716978] binder: 30061:30066 ioctl c034564b 20000040 returned -22 03:08:11 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x540c, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="b440e7fd1bd1f6c5c6452b6c2339eb976f66b6c1d4f5292eae818d9c7e7a74a6deaa842aa35f3e893d4ea5868800122d55f66b78f3516beafbdd04888d713502c81e30558debd750a073494216900b50796f7b346ae61c8318ec5bceb9b516e2239e565fe7b7fc1edf8ec2cca08b084c8d22a6829b1bb24bac70029cdd741ec875378c7084fa25f1156d4097f58382b15a56cdbd94657d2aacc7e2a7231c294b34bae1a3713e8c04076371866e6e914394ad1d997deabdb6302be6662a14cd497740294a4519634e4a9e0a5d4ac6d89667b4087b800118fb8cf9c4fedc650c55696bdf2224311671ea4f8f71e8191b521abfdd1e5de98ad464101f7c178c35e7f76516da2d62bb2dc2440387913265ae8375c16d6337824cac794c5e8c99cad411073ed6ba700c69f55d9ad939958cdb7bbc9943904a1f5b56ac76556fd21bb4c58caca520b676ffbc49f200fd993026dbd48ef09cd4fbc012a7df91307ce210b2ea311e36c1a87ed68e782ba4a185a1b635d05d4ac1b34ad015dd022ad61f7feebbd450f5a07ee6f62b03e3bd7e7d50e96ecef6e30bc2a40377e021e459bdbf94f400854f21a2259215241c6bf4a1e436193509e27ac57c6518e42df7eab2a73ffcd785ee14821efeb96e878efd3b88120c7778e9f422c618e0614dd5ea79ea06d5c3e88ba397dd3b96171d77ef143a09d1d93bb44795c845a7271e1f1894c97cbedefcc53cedafe1dc004221dc4b451c09b93676d02cca15d7cd385d8e6bbb0d2b4f86a543d6e21af84760141347508e4da8611936cff6f2c84b2faf53434c55765849fd7858add5de4fea0ec98dc5b527a8677a66b70db0ebeb56bbfeaae567c3d1aac1929ac1053d1403cb1c14517769ac05145ff05700632af7a51848634b3b5f74bd894bf099769c65033c0475765934c7a1618b7ac3fbb39154f381466f1ac45ce2ba5c63184cb9f7b2f0aa372e10286b6c6ca4bb11eee3ded181d7c4838d791dc1df98a40b28e485b8ff373fc9e67f73a0a15f2f8e00554bfcacc5b0bf9f7cfb720ee63733597756d1579bd440d393574d08cd44a51d3d3a39a03b48f4ea754b7a404c9d2bb62e968cb05b297699585be683f21edbc7422a56ee26c3864553ff4fd91f7668203417fe3625d36f16a6d088bd3e62dbdff723c52069b0bc6e70cd9330a8ba46823a3349cba55e0b3394b633874dbdbdf45a677744b1842acc02d6ca35937951b3727d8920ac2e5a283035e144df463a529ca09d96f02659b640677620c8e5b49a3d648c32f3c31fe57eefbfdde5a19d10cb0c381ef1c90222fe557e186047c3b5fbb02a841a5d1afd0a6031dd7b6e0bf7dee97494015d22602f5e2c14ea7b498a1a877f57228dfa54eac4de742a69bae82a0e5bd87f25fb9e3675131f87565a92e312ca7afdaf1f8e95600735b2e9ae147b5bb08f162f"}) 03:08:11 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000040)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000009c0000006e2655f56f82dcb03e5c9f74190477798399350c2f24a144a065a73c7ba7a314438330a6e1e0f3e2184cf4eda729426e72b2f7aae5ed55f8f874ba492a5890a8140313189de0ed61a76ca7bf16e8969738a76a21b90ca86857c0b01d2f8fec9961d0537d588f97914006fbd492743668b1c3a088f8e4edf40915d365ef436b7a4a83f3a5fd08d29a19168ede6f9f5bbb6c0541bdf5298b9f88becec0"], &(0x7f0000000100)=0xc0) 03:08:11 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f0000000400)={0x2, 0x1, 0x13, 0x20, 0x15d, &(0x7f0000000000)="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"}) ioctl$KDSETMODE(r0, 0x560f, 0x0) 03:08:11 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b64, 0x744000) 03:08:11 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x540d, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:11 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) [ 3312.948282] binder: 30082:30084 ioctl 4b72 20000400 returned -22 03:08:11 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b65, 0x744000) 03:08:11 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x540e, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3312.997991] binder: 30082:30089 ioctl 4b72 20000400 returned -22 03:08:11 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f0000000100)={0x2, 0x6}) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x2, 0xb1, 0x8000}) ioctl$KDSETMODE(r0, 0x560f, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$KVM_ENABLE_CAP_CPU(r8, 0x4068aea3, &(0x7f0000000140)={0x7b, 0x0, [0x2, 0x6, 0x4, 0x1]}) r9 = dup2(r5, r4) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BLKRAGET(r9, 0x1263, &(0x7f0000000040)) 03:08:11 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b66, 0x744000) [ 3313.056838] binder: 30090:30095 ioctl 4140 0 returned -22 [ 3313.093118] binder: 30090:30099 ioctl 4140 0 returned -22 03:08:11 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x540f, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:11 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b67, 0x744000) [ 3313.177263] binder: 30101:30105 ioctl 40086408 20000100 returned -22 [ 3313.203484] binder: 30101:30105 ioctl 4068aea3 20000140 returned -22 03:08:11 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) r2 = openat(r1, &(0x7f0000000100)='./file0\x00', 0x501402, 0xa1) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/654], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r6, 0xc0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r7}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r5, 0x0, 0xd, &(0x7f0000000140)='/dev/binder#\x00', r7}, 0x30) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001780)={&(0x7f00000001c0)={0x1584, 0x0, 0x1, 0x401, 0x70bd2d, 0x25dfdbfd, {0x3, 0x0, 0xa}, [@nested={0x29, 0x68, 0x0, 0x1, [@generic="4922b687950c956172ecef6f4ecbff26153168c78bbf2ac1c5af2885c3d5bef983539ef487"]}, @nested={0x104c, 0x94, 0x0, 0x1, [@typed={0x8, 0x2e, 0x0, 0x0, @fd=r2}, @typed={0x3b, 0x76, 0x0, 0x0, @binary="e912c77a8aa88c4d9434eefe02857963ef231d372292171d87214a74a8ef0347c567f6caf22b58f9f2c8058d3a4f1611c668215ea9f6aa"}, @typed={0x1004, 0x3f, 0x0, 0x0, @binary="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"}]}, @generic="1a242cebfa396466ea089356b21e66b5f1f36316b65ddaa16abe37b4418bfdc2c0b68838f513c38b42a9977fbd76ce4b6449e0bc89a1fb7173f8388a2f307f6707030e3115ad44b6dece319cabc3494170bafd4c5d768872fd8dcd7af35fbf74f40463b7b9aec043095fe517322648865690d3f2bf375c3404a44239", @nested={0x34, 0x7, 0x0, 0x1, [@typed={0x14, 0x1f, 0x0, 0x0, @ipv6=@remote}, @typed={0x8, 0x90, 0x0, 0x0, @pid=r8}, @typed={0x14, 0x43, 0x0, 0x0, @ipv6=@mcast1}]}, @generic="b52ba6df1971e2ee9471a39c82d74b22fa0f90de2962c09d88c8155615812566e8d14316e58a626636024b78382092593cfbe7b533959fd215f03cf8102f0e62710a59cf49390dc5eff56c8a3366cc504eae30f8ae530476ff73f63732e5f548ef39fb271cf50aff5e4fa4b8483e55fb605003ba10838f998c796aaf36c510af47476ba9541dfebebdc137934d382ee35f8a2c5a54115f2887451791622aa2fdb1504ac114f81ca8d8cf92e2c790a52889f5726b9c59b4af4f9a4447fc7263a9a213ebc18c801395bbf5", @nested={0x37b, 0x2e, 0x0, 0x1, [@generic="7278cea4ab519bd66b7d0140ecbe7c286a0a1f165ddd0a40fbb329547ae7e8f7b819344e9ac8a111d342cb654e00173c611918bd0eb749df93a43c8dce33f08492ef231b8d66d3c6d934577d7a9a7176f110e2d2414689e797fd7f665dfd8b8ae4a74db7ea185c27b94dac929cad77ae97e18b98fa7434c148448d611e7ed6bd3d532e8b23163e18fc49b6413806c76ad3ee2f0ac65f3890cd38f432f3f9877aaa19609b798a5cc9633ccdc5da89d5e324058dff14a6d581ffd26e3885eff3e661222f573ea9ba5f6a2d2ea0c026565539f3d0fe281a0908eaebc53ad4a63f80de7cc14adf2c3619ea58ba352c2ab95d262334", @generic="37233670db307d60cfd5963be572ce93d64dcd1a6fb0c3f06db8822c490fd756ff39c7cfbc3cbdc8fefe8a3107e31ec0e096009fcc68174845df189233679f3d", @generic="6e6126d7cb6b070722ad2f3c8c3e9ed207f90157e2804b1559611ac4bd7ced55334205bfbeb5f99a6462f016f393e66bb8152479dc2c6d75257e8cc59c3a65e763b3d029220d32bf54fbbaebfa37fe7673eb6d7b9060c552aef7ca0dfa6161120bda956a9bc664f29c04862047849f789e7b0b177d5ceeb0ad65d8d3991cb5065e2383f87029a7f81541861044b437f30a2b3e82bffdb8", @generic="b98ba5760aad195d274e132bcc54adea07310d1051f823e7ec56c9b13fde2e2179931d82317a3a5c7546b0b953ea9f8de3b24750e76a7edc84859b5f8d92577379c006c1b9ad5847ca04d44f9640c744db7101f8fdeb17197e51b5e5a6d759c4eaabaf65091ff611370470fcf42fb2d77a6311a0805faa5a22b358df01c3fcb85d4404571e8899edd0012bd6f2c4e3", @generic="6093e86b57732fc43be61f03b97bc0ce21338e9a950d8f0b61d3e487a973185467ad0ea8b3c902d0405f6e4cd8110a7135dacaa3b301b9a16b14f2b575ca8430e0c13b956a885530dc11b875d56e45cda92e1c9df704d909a2084095fe6550f02fc1d602b3f1c030701ec089", @generic="fa4405fd7c816c4abc597c3a0b04e2b2d0c9bd7254645a962d157efebb84b8b0666a9ddd8aec56dae6dd445c593ec99b03efe7e56e47ff36ff1b93", @generic="9fa28987c950b9d8b761747881c1b0c1afb2237b662ce7dbf808f05b2a898a10c66cf57b09e2e8b051ed259035c32398a4a317e1c84f61da2c3e62bece2318632e59ba9b34d6f13bdbd783822d753da86f87f01a512439f849b1c16fe4581f0ef2d5636c995bb7289330f8c23a71510b9d9a80afb7342e"]}]}, 0x1584}, 0x1, 0x0, 0x0, 0x4000000}, 0x14000800) r9 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r10 = syz_open_dev$binderN(0x0, 0x0, 0x0) r11 = dup2(r10, r9) syz_kvm_setup_cpu$x86(r11, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r12, 0x2020}], 0x1, 0x3) 03:08:11 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x5410, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3313.237436] binder: 30101:30105 ioctl 1263 20000040 returned -22 03:08:11 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x1c1040) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x8008551d, &(0x7f0000000080)={0x5b03, 0x12, [{0x4, 0x1}, {0x7, 0x1}, {0xa}, {0x6}, {0x4, 0x1}, {}, {0x4}, {0x9}, {0x2, 0x1}, {0x1}, {0x9, 0x1}, {0xe}, {0x0, 0x1}, {0x4}, {0xf}, {0x1, 0x1}, {0x8}, {0x6, 0x1}]}) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$SO_COOKIE(r6, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="8ed058060065b40900cf4afc5a"], 0x0, 0x0, 0x0}) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000000)={0x1ff, 0xfff, 0x35c, 0x2, 0x12, "5f054a7367e85ef9"}) 03:08:11 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b68, 0x744000) [ 3313.283099] binder: 30101:30111 ioctl 40086408 20000100 returned -22 [ 3313.322485] binder: 30101:30116 ioctl 4068aea3 20000140 returned -22 [ 3313.351047] binder: 30117:30119 ioctl 8008551d 20000080 returned -22 [ 3313.365187] binder: 30117:30119 unknown command 106483854 03:08:11 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x5412, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3313.395067] binder: 30117:30119 ioctl c0306201 200000c0 returned -22 [ 3313.406531] binder: 30110:30123 ioctl 4020ae46 7fda76f37510 returned -22 03:08:11 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x3f}, 0x8) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$KVM_S390_INTERRUPT_CPU(r3, 0x4010ae94, &(0x7f0000000000)={0x4, 0x3f}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r4, 0x560f, 0x0) [ 3313.435936] binder: 30117:30125 ioctl 5408 20000000 returned -22 [ 3313.472610] binder: 30110:30123 ioctl 4020ae46 7fda76f37510 returned -22 03:08:11 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b69, 0x744000) [ 3313.496915] binder: 30117:30119 unknown command 23299 [ 3313.502619] binder: 30117:30125 ioctl 8008551d 20000080 returned -22 [ 3313.513752] binder: 30117:30119 ioctl c0306201 200000c0 returned -22 [ 3313.527051] binder: 30127:30130 ioctl 4010ae94 20000000 returned -22 [ 3313.543344] binder: 30117:30125 ioctl 5408 20000000 returned -22 [ 3313.551123] binder: 30117:30119 unknown command 106483854 [ 3313.557241] binder: 30110:30123 ioctl 4020ae46 7fda76f37510 returned -22 [ 3313.565926] binder: 30127:30130 ioctl 4010ae94 20000000 returned -22 [ 3313.575275] binder: 30117:30119 ioctl c0306201 200000c0 returned -22 03:08:11 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x5413, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="b440e7fd1bd1f6c5c6452b6c2339eb976f66b6c1d4f5292eae818d9c7e7a74a6deaa842aa35f3e893d4ea5868800122d55f66b78f3516beafbdd04888d713502c81e30558debd750a073494216900b50796f7b346ae61c8318ec5bceb9b516e2239e565fe7b7fc1edf8ec2cca08b084c8d22a6829b1bb24bac70029cdd741ec875378c7084fa25f1156d4097f58382b15a56cdbd94657d2aacc7e2a7231c294b34bae1a3713e8c04076371866e6e914394ad1d997deabdb6302be6662a14cd497740294a4519634e4a9e0a5d4ac6d89667b4087b800118fb8cf9c4fedc650c55696bdf2224311671ea4f8f71e8191b521abfdd1e5de98ad464101f7c178c35e7f76516da2d62bb2dc2440387913265ae8375c16d6337824cac794c5e8c99cad411073ed6ba700c69f55d9ad939958cdb7bbc9943904a1f5b56ac76556fd21bb4c58caca520b676ffbc49f200fd993026dbd48ef09cd4fbc012a7df91307ce210b2ea311e36c1a87ed68e782ba4a185a1b635d05d4ac1b34ad015dd022ad61f7feebbd450f5a07ee6f62b03e3bd7e7d50e96ecef6e30bc2a40377e021e459bdbf94f400854f21a2259215241c6bf4a1e436193509e27ac57c6518e42df7eab2a73ffcd785ee14821efeb96e878efd3b88120c7778e9f422c618e0614dd5ea79ea06d5c3e88ba397dd3b96171d77ef143a09d1d93bb44795c845a7271e1f1894c97cbedefcc53cedafe1dc004221dc4b451c09b93676d02cca15d7cd385d8e6bbb0d2b4f86a543d6e21af84760141347508e4da8611936cff6f2c84b2faf53434c55765849fd7858add5de4fea0ec98dc5b527a8677a66b70db0ebeb56bbfeaae567c3d1aac1929ac1053d1403cb1c14517769ac05145ff05700632af7a51848634b3b5f74bd894bf099769c65033c0475765934c7a1618b7ac3fbb39154f381466f1ac45ce2ba5c63184cb9f7b2f0aa372e10286b6c6ca4bb11eee3ded181d7c4838d791dc1df98a40b28e485b8ff373fc9e67f73a0a15f2f8e00554bfcacc5b0bf9f7cfb720ee63733597756d1579bd440d393574d08cd44a51d3d3a39a03b48f4ea754b7a404c9d2bb62e968cb05b297699585be683f21edbc7422a56ee26c3864553ff4fd91f7668203417fe3625d36f16a6d088bd3e62dbdff723c52069b0bc6e70cd9330a8ba46823a3349cba55e0b3394b633874dbdbdf45a677744b1842acc02d6ca35937951b3727d8920ac2e5a283035e144df463a529ca09d96f02659b640677620c8e5b49a3d648c32f3c31fe57eefbfdde5a19d10cb0c381ef1c90222fe557e186047c3b5fbb02a841a5d1afd0a6031dd7b6e0bf7dee97494015d22602f5e2c14ea7b498a1a877f57228dfa54eac4de742a69bae82a0e5bd87f25fb9e3675131f87565a92e312ca7afdaf1f8e95600735b2e9ae147b5bb08f162f"}) [ 3313.593864] binder: 30110:30123 ioctl 4020ae46 7fda76f37510 returned -22 03:08:12 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x560f, 0x0) 03:08:12 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000ff0df7585529082562abe6aa80ee89b32e382af4285c3a5773dbc47cea9f9723bb78841b325cc8897c68667ecaf7e570cb7ae492cf067b46c87d3d9be389da8d2573f066c28079d9dced30b74185ce0c496f9d3136fb53f9e8a5beafec17e9bb61ddd01e969f43831d787262b91400f9acf3702fa89ccc934cd45537e2fa2c3e3fbc330919c08a488e46223dd029ef4d175b93b53a53d45ef71d0d2571b58fd4a68c60ab0308690b70b81c59f753a16bd186d66dc874b87b45057030717be5"], 0x0, 0x0, 0x0}) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000000)) 03:08:12 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b6a, 0x744000) [ 3313.621617] binder: 30110:30123 ioctl 4020ae46 7fda76f37510 returned -22 [ 3313.652168] binder: 30110:30123 ioctl 4020ae46 7fda76f37510 returned -22 03:08:12 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x5414, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="b440e7fd1bd1f6c5c6452b6c2339eb976f66b6c1d4f5292eae818d9c7e7a74a6deaa842aa35f3e893d4ea5868800122d55f66b78f3516beafbdd04888d713502c81e30558debd750a073494216900b50796f7b346ae61c8318ec5bceb9b516e2239e565fe7b7fc1edf8ec2cca08b084c8d22a6829b1bb24bac70029cdd741ec875378c7084fa25f1156d4097f58382b15a56cdbd94657d2aacc7e2a7231c294b34bae1a3713e8c04076371866e6e914394ad1d997deabdb6302be6662a14cd497740294a4519634e4a9e0a5d4ac6d89667b4087b800118fb8cf9c4fedc650c55696bdf2224311671ea4f8f71e8191b521abfdd1e5de98ad464101f7c178c35e7f76516da2d62bb2dc2440387913265ae8375c16d6337824cac794c5e8c99cad411073ed6ba700c69f55d9ad939958cdb7bbc9943904a1f5b56ac76556fd21bb4c58caca520b676ffbc49f200fd993026dbd48ef09cd4fbc012a7df91307ce210b2ea311e36c1a87ed68e782ba4a185a1b635d05d4ac1b34ad015dd022ad61f7feebbd450f5a07ee6f62b03e3bd7e7d50e96ecef6e30bc2a40377e021e459bdbf94f400854f21a2259215241c6bf4a1e436193509e27ac57c6518e42df7eab2a73ffcd785ee14821efeb96e878efd3b88120c7778e9f422c618e0614dd5ea79ea06d5c3e88ba397dd3b96171d77ef143a09d1d93bb44795c845a7271e1f1894c97cbedefcc53cedafe1dc004221dc4b451c09b93676d02cca15d7cd385d8e6bbb0d2b4f86a543d6e21af84760141347508e4da8611936cff6f2c84b2faf53434c55765849fd7858add5de4fea0ec98dc5b527a8677a66b70db0ebeb56bbfeaae567c3d1aac1929ac1053d1403cb1c14517769ac05145ff05700632af7a51848634b3b5f74bd894bf099769c65033c0475765934c7a1618b7ac3fbb39154f381466f1ac45ce2ba5c63184cb9f7b2f0aa372e10286b6c6ca4bb11eee3ded181d7c4838d791dc1df98a40b28e485b8ff373fc9e67f73a0a15f2f8e00554bfcacc5b0bf9f7cfb720ee63733597756d1579bd440d393574d08cd44a51d3d3a39a03b48f4ea754b7a404c9d2bb62e968cb05b297699585be683f21edbc7422a56ee26c3864553ff4fd91f7668203417fe3625d36f16a6d088bd3e62dbdff723c52069b0bc6e70cd9330a8ba46823a3349cba55e0b3394b633874dbdbdf45a677744b1842acc02d6ca35937951b3727d8920ac2e5a283035e144df463a529ca09d96f02659b640677620c8e5b49a3d648c32f3c31fe57eefbfdde5a19d10cb0c381ef1c90222fe557e186047c3b5fbb02a841a5d1afd0a6031dd7b6e0bf7dee97494015d22602f5e2c14ea7b498a1a877f57228dfa54eac4de742a69bae82a0e5bd87f25fb9e3675131f87565a92e312ca7afdaf1f8e95600735b2e9ae147b5bb08f162f"}) [ 3313.704807] binder: 30110:30123 ioctl 4020ae46 7fda76f37510 returned -22 [ 3313.743068] binder: 30110:30123 ioctl 4020ae46 7fda76f37510 returned -22 [ 3313.744444] binder: 30141:30145 unknown command 0 [ 3313.776667] binder: 30110:30123 ioctl 4020ae46 7fda76f37510 returned -22 [ 3313.792142] binder: 30141:30145 ioctl c0306201 200000c0 returned -22 [ 3313.805940] binder: 30141:30149 ioctl 5600 20000000 returned -22 [ 3313.816803] binder: 30141:30145 unknown command 0 [ 3313.822895] binder: 30110:30123 ioctl 4020ae46 7fda76f37510 returned -22 [ 3313.825437] binder: 30141:30149 ioctl 5600 20000000 returned -22 [ 3313.842488] binder: 30141:30145 ioctl c0306201 200000c0 returned -22 [ 3313.855992] binder: 30110:30123 ioctl 4020ae46 7fda76f37510 returned -22 [ 3313.882421] binder: 30110:30123 ioctl 4020ae46 7fda76f37510 returned -22 [ 3313.892034] binder: 30110:30123 ioctl 4020ae46 7fda76f37510 returned -22 [ 3313.908035] binder: 30110:30123 ioctl 4020ae46 7fda76f37510 returned -22 [ 3313.918024] binder: 30110:30123 ioctl 4020ae46 7fda76f37510 returned -22 [ 3313.928556] binder: 30110:30123 ioctl 4020ae46 7fda76f37510 returned -22 [ 3313.937536] binder: 30110:30123 ioctl 4020ae46 7fda76f37510 returned -22 [ 3313.956263] binder: 30110:30123 ioctl 4020ae46 7fda76f37510 returned -22 [ 3313.976469] binder: 30110:30123 ioctl 4020ae46 7fda76f37510 returned -22 [ 3313.996676] binder: 30110:30123 ioctl 4020ae46 7fda76f37510 returned -22 [ 3314.016876] binder: 30110:30123 ioctl 4020ae46 7fda76f37510 returned -22 [ 3314.048938] binder: 30110:30123 ioctl 4020ae46 7fda76f37510 returned -22 [ 3314.065911] binder: 30110:30123 ioctl 4020ae46 7fda76f37510 returned -22 [ 3314.082454] binder: 30110:30123 ioctl 4020ae46 7fda76f37510 returned -22 [ 3314.090653] binder: 30110:30123 ioctl 4020ae46 7fda76f37530 returned -22 03:08:12 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x560f, 0x4000000000000007) 03:08:12 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000040)) 03:08:12 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b6b, 0x744000) 03:08:12 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x5415, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:12 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x802) r2 = dup2(r1, r0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpid() sched_setattr(r4, &(0x7f0000000440)={0x30, 0x2, 0x0, 0x4, 0x8, 0x3, 0x800000000000}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000440)={0x30, 0x2, 0x0, 0x4, 0x8, 0x3, 0x800000000000}, 0x0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r7 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r3, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) write$binfmt_aout(r7, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0, @ANYRESHEX=r6, @ANYRES64=r2, @ANYRESDEC, @ANYRES64=r6, @ANYRES64=r6], 0x7e8) r9 = fcntl$getown(r3, 0x9) kcmp$KCMP_EPOLL_TFD(r4, r9, 0x7, r0, &(0x7f0000000040)={r8, 0xffffffffffffffff, 0xd97}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 3314.227489] binder: 30156:30161 ioctl 5413 20000040 returned -22 03:08:12 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b6c, 0x744000) 03:08:12 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x5416, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:12 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x560f, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r4) ioctl$DRM_IOCTL_AGP_ACQUIRE(r6, 0x6430) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x88, r7, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x72, 0xac, "ceec9399c9d075d06b24c792df0717b5f5d35ebaab92165d68827d68f90a225eb7fbd8e7e539e61bf85a66fc769c095ffaa0fa2cc53f1742e8eb0e68295f3766256a7ed8f3dce6e2e1d9f9ea8379862f72df4cf82164790e810b4dc343e34aceb50f4fc181719da3956a8192c679"}]}, 0x88}, 0x1, 0x0, 0x0, 0x84}, 0x10) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000000)) [ 3314.295902] binder: 30162:30165 ioctl 4020ae46 7fda76f58510 returned -22 [ 3314.350133] binder: 30162:30165 ioctl 4020ae46 7fda76f58510 returned -22 [ 3314.370108] binder: 30169:30172 ioctl 6430 0 returned -22 [ 3314.385930] binder: 30162:30165 ioctl 4020ae46 7fda76f58510 returned -22 03:08:12 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x5418, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3314.403687] binder: 30169:30172 ioctl 5600 20000000 returned -22 [ 3314.421272] binder: 30162:30165 ioctl 4020ae46 7fda76f58510 returned -22 [ 3314.428388] binder: 30169:30172 ioctl 6430 0 returned -22 03:08:12 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b6d, 0x744000) [ 3314.448441] binder: 30162:30165 ioctl 4020ae46 7fda76f58510 returned -22 03:08:12 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f0000000100)=""/227, &(0x7f0000000200)=0xe3) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) r5 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000080)=0xc) keyctl$chown(0x4, r5, r7, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='fuse\x00', 0x840001, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x3}}, {@max_read={'max_read', 0x3d, 0x49}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1200}}, {@blksize={'blksize'}}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}], [{@smackfsfloor={'smackfsfloor', 0x3d, '&('}}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x62, 0x66, 0x31, 0x39, 0x61, 0x38, 0x57], 0x2d, [0x39, 0x37, 0x35, 0x37], 0x2d, [0x65, 0x31, 0x36, 0x63], 0x2d, [0x34, 0x37, 0x34, 0x64], 0x2d, [0x64, 0x35, 0x38, 0x37, 0x63, 0x61, 0x35, 0x36]}}}, {@uid_eq={'uid', 0x3d, r4}}, {@smackfshat={'smackfshat', 0x3d, '^nodev$em1'}}, {@euid_eq={'euid', 0x3d, r7}}]}}) r8 = syz_open_dev$binderN(0x0, 0x0, 0x0) r9 = dup2(r8, r1) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BLKGETSIZE64(r9, 0x80081272, &(0x7f0000000040)) [ 3314.490003] binder: 30162:30165 ioctl 4020ae46 7fda76f58510 returned -22 [ 3314.518517] binder: 30162:30165 ioctl 4020ae46 7fda76f58510 returned -22 03:08:12 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x541b, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:12 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b70, 0x744000) 03:08:12 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x560f, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r4) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f0000000340)=[@clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r7}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/128, 0x80, 0x1, 0x24}, @ptr={0x70742a85, 0x1, &(0x7f00000001c0)=""/189, 0xbd, 0x0, 0x29}}, &(0x7f0000000300)={0x0, 0x18, 0x40}}, 0x440}, @increfs={0x40046304, 0x3}], 0xbc, 0x0, &(0x7f00000003c0)="d1b79f0008c2c9f96d7c3e4990f47721783c685444c04f7da420446120eacacac9d26356d390aaeff6ea6675f24e9bf288a2094d6b8b102e485f44ad8f1f11ca652efdc25ed14a8aba4014d11faa2fecc252acd5076ad64b438d675916f45f34e0dc8b4e1f1eb6e4a73a16956bd9b50160ca9181ba9f7f815e0d85b8394df9f7c1b972666e97f26141d0c9a14ab1b284d46e9a19d0b5034e846aa1d5018f479f37397caebf5105b047be1166f12ee83c487e31703d639f523fa4e502"}) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000080)=0x7d4c) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r9 = open(&(0x7f0000000100)='./file0\x00', 0x440100, 0x10) ioctl$KDMKTONE(r9, 0x4b30, 0x6768) setsockopt$inet6_tcp_TLS_RX(r8, 0x6, 0x2, &(0x7f0000000040)=@ccm_128={{0x304}, "5bbadf253a106bc2", "d4644026f4a8454111c595809b5db0d2", "b1d39ef9", "46a72923018820a9"}, 0x28) [ 3314.554201] binder: 30162:30165 ioctl 4020ae46 7fda76f58510 returned -22 [ 3314.589722] binder: 30162:30165 ioctl 4020ae46 7fda76f58510 returned -22 [ 3314.633405] binder: 30162:30165 ioctl 4020ae46 7fda76f58510 returned -22 03:08:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000040)=""/114, &(0x7f00000000c0)=0x72) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) 03:08:13 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x541c, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3314.673834] binder: 30162:30165 ioctl 4020ae46 7fda76f58510 returned -22 [ 3314.683179] binder: 30188:30193 ioctl 400445a0 20000080 returned -22 [ 3314.713003] binder: 30162:30165 ioctl 4020ae46 7fda76f58510 returned -22 [ 3314.744055] binder: 30188:30193 ioctl 400445a0 20000080 returned -22 [ 3314.758100] binder: 30162:30165 ioctl 4020ae46 7fda76f58510 returned -22 [ 3314.804843] binder: 30162:30165 ioctl 4020ae46 7fda76f58510 returned -22 [ 3314.844078] binder: 30162:30165 ioctl 4020ae46 7fda76f58510 returned -22 [ 3314.868799] binder: 30162:30165 ioctl 4020ae46 7fda76f58510 returned -22 [ 3314.892451] binder: 30162:30165 ioctl 4020ae46 7fda76f58510 returned -22 [ 3314.914473] binder: 30162:30165 ioctl 4020ae46 7fda76f58510 returned -22 [ 3314.937334] binder: 30162:30165 ioctl 4020ae46 7fda76f58510 returned -22 [ 3314.960315] binder: 30162:30165 ioctl 4020ae46 7fda76f58510 returned -22 [ 3314.979508] binder: 30162:30165 ioctl 4020ae46 7fda76f58510 returned -22 [ 3314.993262] binder: 30162:30165 ioctl 4020ae46 7fda76f58510 returned -22 [ 3315.008198] binder: 30162:30165 ioctl 4020ae46 7fda76f58510 returned -22 [ 3315.024232] binder: 30162:30165 ioctl 4020ae46 7fda76f58510 returned -22 [ 3315.038014] binder: 30162:30165 ioctl 4020ae46 7fda76f58530 returned -22 03:08:13 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) sync_file_range(r0, 0x7ff, 0x1, 0x2) 03:08:13 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b71, 0x744000) 03:08:13 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x541d, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:13 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x804) r2 = dup2(r1, r0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f0000000300)=0x1c) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0xc, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="106308493578aa50e2746200"/25], 0x0, 0x0, 0x0}) ioctl$sock_inet_tcp_SIOCATMARK(r5, 0x8905, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self\x00', 0x84100, 0x0) ioctl$KDDELIO(r2, 0x4b35, 0x400) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x30400, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r7, 0x891c, &(0x7f0000000100)={'macvlan1\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r8 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1000, 0x2}) fcntl$lock(r4, 0x25, &(0x7f0000000240)={0x0, 0x0, 0x2eb, 0x9f}) 03:08:13 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e630c408f8e2216c890ad54384c4a763b26af45346b9a738d89cab1354905ab766421b86985a337091373130a28c26b1b1693911910b53924ee4d5820745c1a62654d7ef5cc3312e577e7d6b1d21b5b2e6ecdf55851c1b917e4756d453f53919c1fe1ad78a865a8a8e8c7b9b1730c319af91996cef7347d81e5179f4cee"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000340)={0x1, 0x3, 0x1000, 0xc8, &(0x7f0000000200)="bd2aa8d790c570340b418cb1c60683d37d79cb097e9860f391b5714356853b14b45966f8a2cccad35c8cbc0ca62ee8ae82aa90d3a6e3a93d631b09fb777d0fad5b3384b2773c833ea39e53ccec2de2dc04f43f7f2e994cc04c809d100f6c7756cbfcc98a12b1cffb12c14ffe193e7bc82c89f7c4c15db2f2ee7fdb8fd38afcf932fb03bc7a8a2ceb148856ce5ac3263056a59fc47fbeafa75e3af46605c0a9e053f15173a68112699b30610f59d375199f195cbe926be734007575285663f62e8c451cb867b00ead", 0x38, 0x0, &(0x7f0000000300)="e30100c54de4d0041f8d6450f71bcb1d433af2f383c94f12e6727ea3f331b8c356cc48d1f97504a0e307627fc155af9a1f748df271d56bb0"}) pipe(&(0x7f00000003c0)) statx(r2, &(0x7f0000000040)='./file0\x00', 0x6000, 0x4, &(0x7f0000000080)) 03:08:13 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b72, 0x744000) [ 3315.161325] binder: 30207:30211 ioctl 8905 20000200 returned -22 03:08:13 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$KDSETMODE(r2, 0x560f, 0x0) [ 3315.225824] binder: 30207:30215 ioctl 4020ae46 7fda76f37510 returned -22 [ 3315.254338] binder: 30207:30211 ioctl 4b35 400 returned -22 [ 3315.269222] binder: 30207:30211 ioctl 4c80 0 returned -22 03:08:13 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x541e, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3315.272192] binder: 30207:30215 ioctl 4020ae46 7fda76f37510 returned -22 [ 3315.292561] binder: 30207:30211 ioctl 4018620d 20000080 returned -22 [ 3315.305586] binder: 30218:30222 ioctl 560f 0 returned -22 03:08:13 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4bfa, 0x744000) 03:08:13 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x5421, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3315.331639] binder: 30207:30215 ioctl 4020ae46 7fda76f37510 returned -22 [ 3315.371260] binder: 30207:30215 ioctl 4020ae46 7fda76f37510 returned -22 03:08:13 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b66, 0x744000) 03:08:13 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x5409, 0x744000) 03:08:13 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0717000000000000000016"], 0x28}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1c8, r4, 0x800, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2bc5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb239}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc7c}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb4b}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @private=0xa010102}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010102}}}}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x8000080}, 0x88017) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) r7 = dup2(r6, r5) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) sendmsg$nl_generic(r7, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x48, 0x30, 0x100, 0x70bd2c, 0x25dfdbfc, {0xc}, [@typed={0x33, 0x3, 0x0, 0x0, @binary="c9b9c294c23db0fc6fd67ec31cae0d48039b2ae820a37ba7b003f64e139d596c80806321ae2232c68601fc6ed8d220"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x28044890) 03:08:13 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x5422, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3315.426311] binder: 30207:30215 ioctl 4020ae46 7fda76f37510 returned -22 [ 3315.454851] binder: 30207:30215 ioctl 4020ae46 7fda76f37510 returned -22 [ 3315.504105] binder: 30207:30215 ioctl 4020ae46 7fda76f37510 returned -22 03:08:13 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b66, 0x744000) [ 3315.545099] binder: 30207:30215 ioctl 4020ae46 7fda76f37510 returned -22 [ 3315.563365] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3315.587650] binder: 30207:30215 ioctl 4020ae46 7fda76f37510 returned -22 [ 3315.627259] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3315.628247] binder: 30207:30215 ioctl 4020ae46 7fda76f37510 returned -22 [ 3315.677062] binder: 30207:30215 ioctl 4020ae46 7fda76f37510 returned -22 [ 3315.697243] binder: 30207:30215 ioctl 4020ae46 7fda76f37510 returned -22 [ 3315.717807] binder: 30207:30215 ioctl 4020ae46 7fda76f37510 returned -22 [ 3315.738031] binder: 30207:30215 ioctl 4020ae46 7fda76f37510 returned -22 [ 3315.758557] binder: 30207:30215 ioctl 4020ae46 7fda76f37510 returned -22 [ 3315.778468] binder: 30207:30215 ioctl 4020ae46 7fda76f37510 returned -22 [ 3315.794037] binder: 30207:30215 ioctl 4020ae46 7fda76f37510 returned -22 [ 3315.810409] binder: 30207:30215 ioctl 4020ae46 7fda76f37510 returned -22 [ 3315.826342] binder: 30207:30215 ioctl 4020ae46 7fda76f37510 returned -22 [ 3315.841338] binder: 30207:30215 ioctl 4020ae46 7fda76f37510 returned -22 [ 3315.858417] binder: 30207:30215 ioctl 4020ae46 7fda76f37510 returned -22 [ 3315.880654] binder: 30207:30215 ioctl 4020ae46 7fda76f37510 returned -22 [ 3315.891908] binder: 30207:30215 ioctl 4020ae46 7fda76f37510 returned -22 [ 3315.921144] binder: 30207:30215 ioctl 4020ae46 7fda76f37510 returned -22 [ 3315.938321] binder: 30207:30215 ioctl 4020ae46 7fda76f37530 returned -22 03:08:14 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x97c97b2d08f30bda) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r8 = dup2(r7, r6) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000000040)) 03:08:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x540b, 0x744000) 03:08:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x5423, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b66, 0x744000) 03:08:14 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x252002) 03:08:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x540c, 0x744000) [ 3316.026249] binder_alloc: 30253: binder_alloc_buf failed to map page at 20ffd000 in userspace 03:08:14 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0xcc, 0x9}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0xfffffffe, 0x0, r1}, 0x40) fsync(r0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$KDADDIO(r4, 0x4b34, 0x80000000) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) r7 = dup2(r6, r5) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x80001, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$KVM_SET_BOOT_CPU_ID(r7, 0xae78, &(0x7f0000000180)=0x1) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, 0x453, 0x8, 0x70bd29, 0x25dfdbfc, "f92a772f643997fc87a32726091f0509811fae8cb105a20f66d17b59c0be35489360dd5c595dc2450d450159c73bd3053888a52574c485383f75283f4edd225f2026ae4818d8ca87c88b1b37933a5e0deb594c7e42908700f1c4463d078f7cbed1dc535b5b8ee9065337da5da5cc36", ["", ""]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 03:08:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x5424, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:14 executing program 5: ioctl$KDSETMODE(0xffffffffffffffff, 0x4b66, 0x744000) [ 3316.099625] binder: 30253:30259 ioctl b704 20000040 returned -22 [ 3316.134399] binder: BINDER_SET_CONTEXT_MGR already set 03:08:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x540d, 0x744000) [ 3316.153470] binder: 30253:30259 ioctl 40046207 0 returned -16 [ 3316.169623] binder: 30265:30271 ioctl 4b34 80000000 returned -22 03:08:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x5425, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:14 executing program 5: ioctl$KDSETMODE(0xffffffffffffffff, 0x4b66, 0x744000) [ 3316.210631] binder: 30265:30271 ioctl ae78 20000180 returned -22 03:08:14 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x2) r1 = dup2(0xffffffffffffffff, r0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000180)='cgroup.subtree_control\x00', 0x2, 0x0) lseek(r2, 0x20, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) name_to_handle_at(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="6400000002000000a681972e874beb9783ae787fab92523d82cff0a6643b5f72b69f97ce9ee71388355ffb7722c05ca5f41b542d77c5f82213b3a35ab88fb272a262b52024582aa400f28aedd1628c2fbbd60762df56b88a88bb00"/100], &(0x7f0000000100), 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x2c, &(0x7f0000000200)=0x4, 0x2) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8982, &(0x7f0000000000)={0x6, 'ip6tnl0\x00', {0x6}, 0x7}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 3316.255038] binder: 30265:30279 ioctl 4b34 80000000 returned -22 [ 3316.278351] binder: 30265:30279 ioctl ae78 20000180 returned -22 03:08:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x540e, 0x744000) 03:08:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x5427, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:14 executing program 5: ioctl$KDSETMODE(0xffffffffffffffff, 0x4b66, 0x744000) 03:08:14 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x1800) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000180)={0x7, &(0x7f0000000040)=[{0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @broadcast}]}) 03:08:14 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) 03:08:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x5428, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b66, 0x744000) 03:08:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x540f, 0x744000) [ 3316.451921] binder: 30295:30298 ioctl 4020ae46 7fda76f58510 returned -22 03:08:14 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x9, 0x10000) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000080)={0x7ff, 0x5}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1000, 0x3}) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r4) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$EVIOCREVOKE(r6, 0x40044591, &(0x7f0000000380)) r7 = dup2(r3, r2) open(&(0x7f00000001c0)='./file0\x00', 0x200080, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/286], 0x0, 0x0, 0x0}) r8 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r9 = syz_open_dev$binderN(0x0, 0x0, 0x0) r10 = dup2(r9, r8) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00'], 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r11, 0xcb7, 0x2}, &(0x7f0000000180)=0xc) [ 3316.497434] binder: 30295:30298 ioctl 4020ae46 7fda76f58510 returned -22 [ 3316.511913] binder: 30295:30303 ioctl 800442d2 20000180 returned -22 [ 3316.554252] binder: 30295:30298 ioctl 4020ae46 7fda76f58510 returned -22 [ 3316.583776] binder: 30295:30298 ioctl 4020ae46 7fda76f58510 returned -22 03:08:14 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b66, 0x744000) 03:08:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x5410, 0x744000) 03:08:15 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x5429, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3316.602537] binder: 30309:30312 ioctl 40044591 20000380 returned -22 [ 3316.620146] binder: 30295:30298 ioctl 4020ae46 7fda76f58510 returned -22 03:08:15 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b66, 0x744000) [ 3316.647139] binder: 30295:30298 ioctl 4020ae46 7fda76f58510 returned -22 [ 3316.668832] binder: 30309:30312 unknown command 32 [ 3316.673848] binder: 30309:30312 ioctl c0306201 200000c0 returned -22 [ 3316.677739] binder: 30295:30298 ioctl 4020ae46 7fda76f58510 returned -22 03:08:15 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x5412, 0x744000) 03:08:15 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000100)={0x712, 0x7fffffff, 0x1, 0x1}) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$USBDEVFS_BULK(r5, 0xc0185502, &(0x7f0000000040)={{{0xa}}, 0xffffffffffffffc3, 0xc9, &(0x7f0000000300)="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"}) [ 3316.737801] binder: 30295:30298 ioctl 4020ae46 7fda76f58510 returned -22 [ 3316.767573] binder: 30295:30298 ioctl 4020ae46 7fda76f58510 returned -22 [ 3316.813483] binder: 30295:30298 ioctl 4020ae46 7fda76f58510 returned -22 [ 3316.836587] binder: 30295:30298 ioctl 4020ae46 7fda76f58510 returned -22 [ 3316.887160] binder: 30295:30298 ioctl 4020ae46 7fda76f58510 returned -22 [ 3316.896578] binder: 30327:30331 ioctl c0106407 20000100 returned -22 [ 3316.908633] binder: 30295:30298 ioctl 4020ae46 7fda76f58510 returned -22 [ 3316.915757] binder: 30295:30298 ioctl 4020ae46 7fda76f58510 returned -22 [ 3316.943472] binder: 30295:30298 ioctl 4020ae46 7fda76f58510 returned -22 [ 3316.950602] binder: 30327:30331 ioctl c0185502 20000040 returned -22 [ 3316.959534] binder: 30295:30298 ioctl 4020ae46 7fda76f58510 returned -22 [ 3316.968177] binder: 30327:30334 ioctl c0106407 20000100 returned -22 [ 3316.977920] binder: 30327:30334 ioctl c0185502 20000040 returned -22 [ 3316.978616] binder: 30295:30298 ioctl 4020ae46 7fda76f58510 returned -22 [ 3316.998650] binder: 30295:30298 ioctl 4020ae46 7fda76f58510 returned -22 [ 3317.005623] binder: 30295:30298 ioctl 4020ae46 7fda76f58510 returned -22 [ 3317.028609] binder: 30295:30298 ioctl 4020ae46 7fda76f58510 returned -22 [ 3317.035511] binder: 30295:30298 ioctl 4020ae46 7fda76f58510 returned -22 [ 3317.058605] binder: 30295:30298 ioctl 4020ae46 7fda76f58510 returned -22 [ 3317.065503] binder: 30295:30298 ioctl 4020ae46 7fda76f58510 returned -22 [ 3317.088125] binder: 30295:30298 ioctl 4020ae46 7fda76f58510 returned -22 [ 3317.095808] binder: 30295:30298 ioctl 4020ae46 7fda76f58530 returned -22 03:08:15 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = semget(0x2, 0x0, 0x0) semop(r2, &(0x7f0000000400)=[{}], 0x1) semtimedop(r2, &(0x7f0000000000)=[{}], 0x1, 0x0) semctl$SETVAL(r2, 0x6, 0x10, &(0x7f0000000100)=0x1) dup2(r1, r0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x1800) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r8 = syz_open_dev$binderN(0x0, 0x0, 0x0) r9 = dup2(r8, r7) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$PPPIOCGFLAGS(r9, 0x8004745a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 03:08:15 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x5437, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:15 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b66, 0x744000) 03:08:15 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x5413, 0x744000) [ 3317.170403] binder: 30335:30337 ioctl 4020ae46 7fda76f58510 returned -22 [ 3317.193236] binder: 30335:30337 ioctl 4020ae46 7fda76f58510 returned -22 03:08:15 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b66, 0x0) 03:08:15 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x5441, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:15 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x5414, 0x744000) 03:08:15 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x4, 0x44000) 03:08:15 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b66, 0x0) [ 3317.231776] binder: 30335:30337 ioctl 4020ae46 7fda76f58510 returned -22 [ 3317.231795] binder: 30335:30337 ioctl 4020ae46 7fda76f58510 returned -22 03:08:15 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x5450, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:15 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x1802) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0}) write$vhci(r5, &(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, "8a292516d111f22c958f9a6fcff378ac0c14d6d245f523ec7f495a5e1082f988eac67f90e0626f95b79407bdd30ede55cfdc3f6ea0032099b5c00acc42e87b34bedbf49fab709c3f6eb1"}, 0x4b) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) [ 3317.231812] binder: 30335:30337 ioctl 4020ae46 7fda76f58510 returned -22 [ 3317.231829] binder: 30335:30337 ioctl 4020ae46 7fda76f58510 returned -22 03:08:15 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x5451, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3317.231846] binder: 30335:30337 ioctl 4020ae46 7fda76f58510 returned -22 [ 3317.231863] binder: 30335:30337 ioctl 4020ae46 7fda76f58510 returned -22 [ 3317.231880] binder: 30335:30337 ioctl 4020ae46 7fda76f58510 returned -22 [ 3317.231897] binder: 30335:30337 ioctl 4020ae46 7fda76f58510 returned -22 [ 3317.231914] binder: 30335:30337 ioctl 4020ae46 7fda76f58510 returned -22 [ 3317.231931] binder: 30335:30337 ioctl 4020ae46 7fda76f58510 returned -22 [ 3317.231947] binder: 30335:30337 ioctl 4020ae46 7fda76f58510 returned -22 [ 3317.231964] binder: 30335:30337 ioctl 4020ae46 7fda76f58510 returned -22 [ 3317.231981] binder: 30335:30337 ioctl 4020ae46 7fda76f58510 returned -22 03:08:15 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b66, 0x0) [ 3317.231997] binder: 30335:30337 ioctl 4020ae46 7fda76f58510 returned -22 [ 3317.232018] binder: 30335:30337 ioctl 4020ae46 7fda76f58510 returned -22 [ 3317.232034] binder: 30335:30337 ioctl 4020ae46 7fda76f58510 returned -22 [ 3317.232050] binder: 30335:30337 ioctl 4020ae46 7fda76f58510 returned -22 [ 3317.232065] binder: 30335:30337 ioctl 4020ae46 7fda76f58510 returned -22 [ 3317.232081] binder: 30335:30337 ioctl 4020ae46 7fda76f58510 returned -22 [ 3317.232097] binder: 30335:30337 ioctl 4020ae46 7fda76f58510 returned -22 [ 3317.232113] binder: 30335:30337 ioctl 4020ae46 7fda76f58510 returned -22 [ 3317.232128] binder: 30335:30337 ioctl 4020ae46 7fda76f58510 returned -22 [ 3317.232145] binder: 30335:30337 ioctl 4020ae46 7fda76f58530 returned -22 [ 3317.236900] binder: 30335:30337 unknown command 0 [ 3317.236916] binder: 30335:30337 ioctl c0306201 200000c0 returned -22 [ 3317.236995] binder: 30335:30337 ioctl 8004745a 20000040 returned -22 [ 3317.546217] binder: 30364:30367 ioctl 4020ae46 7fda76f58510 returned -22 03:08:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x5415, 0x744000) 03:08:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x5452, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3317.714724] binder: 30364:30371 unknown command 0 [ 3317.728802] binder: 30364:30371 ioctl c0306201 20000100 returned -22 03:08:16 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x97c97b2d08f30bda) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r8 = dup2(r7, r6) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000000040)) 03:08:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x5416, 0x744000) 03:08:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x545d, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:16 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4bfa, 0x744000) 03:08:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x5418, 0x744000) [ 3317.902047] binder_alloc: 30381: binder_alloc_buf failed to map page at 20ffd000 in userspace [ 3317.903708] binder: 30381:30384 ioctl b704 20000040 returned -22 03:08:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x5460, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x541b, 0x744000) [ 3318.190519] binder: 30364:30367 ioctl 4020ae46 7fda76f58510 returned -22 [ 3318.205854] binder: 30364:30367 ioctl 4020ae46 7fda76f58510 returned -22 [ 3318.224388] binder: 30364:30367 ioctl 4020ae46 7fda76f58510 returned -22 [ 3318.232313] binder: 30364:30367 ioctl 4020ae46 7fda76f58510 returned -22 [ 3318.246040] binder: 30364:30367 ioctl 4020ae46 7fda76f58510 returned -22 [ 3318.256773] binder: 30364:30367 ioctl 4020ae46 7fda76f58510 returned -22 [ 3318.265911] binder: 30364:30367 ioctl 4020ae46 7fda76f58510 returned -22 [ 3318.276866] binder: 30364:30367 ioctl 4020ae46 7fda76f58510 returned -22 [ 3318.286181] binder: 30364:30367 ioctl 4020ae46 7fda76f58510 returned -22 03:08:16 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = dup2(r1, r0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 3318.311762] binder: 30364:30367 ioctl 4020ae46 7fda76f58510 returned -22 03:08:16 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4bfa, 0x744000) 03:08:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x541c, 0x744000) 03:08:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x5600, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3318.386026] binder: 30403:30404 ioctl 4020ae46 7fda76f58510 returned -22 [ 3318.396404] binder: 30403:30404 ioctl 4020ae46 7fda76f58510 returned -22 [ 3318.416683] binder: 30403:30404 ioctl 4020ae46 7fda76f58510 returned -22 03:08:16 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4bfa, 0x744000) [ 3318.438923] binder: 30403:30404 ioctl 4020ae46 7fda76f58510 returned -22 [ 3318.477472] binder: 30403:30404 ioctl 4020ae46 7fda76f58510 returned -22 03:08:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x5601, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x541d, 0x744000) [ 3318.524752] binder: 30403:30404 ioctl 4020ae46 7fda76f58510 returned -22 [ 3318.567669] binder: 30403:30404 ioctl 4020ae46 7fda76f58510 returned -22 [ 3318.598302] binder: 30403:30404 ioctl 4020ae46 7fda76f58510 returned -22 03:08:16 executing program 5: ioctl$KDSETMODE(0xffffffffffffffff, 0x4bfa, 0x744000) 03:08:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x541e, 0x744000) 03:08:17 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x5602, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:17 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x20fa20eb48d8e677) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f00000000c0)={0xa00000, 0x3ff, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xf589318d77367890, 0x7, [], @value=0x6}}) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty, 0x80000fff}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) signalfd4(r0, &(0x7f0000000000), 0x8, 0x80400) [ 3318.627716] binder: 30403:30404 ioctl 4020ae46 7fda76f58510 returned -22 [ 3318.658310] binder: 30403:30404 ioctl 4020ae46 7fda76f58510 returned -22 03:08:17 executing program 5: ioctl$KDSETMODE(0xffffffffffffffff, 0x4bfa, 0x744000) [ 3318.696454] binder: 30403:30404 ioctl 4020ae46 7fda76f58510 returned -22 [ 3318.731604] binder: 30403:30404 ioctl 4020ae46 7fda76f58510 returned -22 [ 3318.772592] binder: 30429:30433 unknown command 0 [ 3318.775330] binder: 30403:30404 ioctl 4020ae46 7fda76f58510 returned -22 [ 3318.804470] binder: 30429:30433 ioctl c0306201 200000c0 returned -22 [ 3318.817051] binder: 30403:30404 ioctl 4020ae46 7fda76f58510 returned -22 [ 3318.838727] binder: 30429:30433 ioctl c0205647 200000c0 returned -22 [ 3318.841560] binder: 30403:30404 ioctl 4020ae46 7fda76f58510 returned -22 [ 3318.877720] binder: 30429:30437 unknown command 2000058512 [ 3318.883613] binder: 30429:30437 ioctl c0306201 200000c0 returned -22 [ 3318.898561] binder: 30403:30404 ioctl 4020ae46 7fda76f58510 returned -22 [ 3318.914199] binder: 30429:30433 ioctl c0205647 200000c0 returned -22 [ 3318.924244] binder: 30403:30404 ioctl 4020ae46 7fda76f58510 returned -22 [ 3318.949344] binder: 30403:30404 ioctl 4020ae46 7fda76f58510 returned -22 [ 3318.979495] binder: 30403:30404 ioctl 4020ae46 7fda76f58510 returned -22 [ 3318.999327] binder: 30403:30404 ioctl 4020ae46 7fda76f58510 returned -22 [ 3319.020296] binder: 30403:30404 ioctl 4020ae46 7fda76f58510 returned -22 [ 3319.060414] binder: 30403:30404 ioctl 4020ae46 7fda76f58510 returned -22 [ 3319.067365] binder: 30403:30404 ioctl 4020ae46 7fda76f58510 returned -22 [ 3319.080021] binder: 30403:30404 ioctl 4020ae46 7fda76f58510 returned -22 [ 3319.086970] binder: 30403:30404 ioctl 4020ae46 7fda76f58530 returned -22 03:08:17 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$VIDIOC_LOG_STATUS(r5, 0x5646, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 03:08:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x5421, 0x744000) 03:08:17 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x5603, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:17 executing program 5: ioctl$KDSETMODE(0xffffffffffffffff, 0x4bfa, 0x744000) 03:08:17 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x200) 03:08:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x5422, 0x744000) 03:08:17 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x5605, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3319.225185] binder: 30445:30450 ioctl 5646 0 returned -22 [ 3319.253235] binder: 30445:30450 ioctl 4020ae46 7fda76f58510 returned -22 03:08:17 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4bfa, 0x744000) [ 3319.310825] binder: 30445:30450 ioctl 4020ae46 7fda76f58510 returned -22 [ 3319.335769] binder: 30445:30450 ioctl 4020ae46 7fda76f58510 returned -22 03:08:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x5423, 0x744000) 03:08:17 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x5606, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:17 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(0xffffffffffffffff, 0x4bfa, 0x744000) [ 3319.374538] binder: 30445:30450 ioctl 4020ae46 7fda76f58510 returned -22 [ 3319.403958] binder: 30445:30450 ioctl 4020ae46 7fda76f58510 returned -22 [ 3319.444373] binder: 30445:30450 ioctl 4020ae46 7fda76f58510 returned -22 [ 3319.482209] binder: 30445:30450 ioctl 4020ae46 7fda76f58510 returned -22 03:08:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x5424, 0x744000) [ 3319.516558] binder: 30445:30450 ioctl 4020ae46 7fda76f58510 returned -22 [ 3319.542020] binder: 30445:30450 ioctl 4020ae46 7fda76f58510 returned -22 [ 3319.592717] binder: 30445:30450 ioctl 4020ae46 7fda76f58510 returned -22 [ 3319.624758] binder: 30445:30450 ioctl 4020ae46 7fda76f58510 returned -22 [ 3319.652318] binder: 30445:30450 ioctl 4020ae46 7fda76f58510 returned -22 [ 3319.691351] binder: 30445:30450 ioctl 4020ae46 7fda76f58510 returned -22 [ 3319.706187] binder: 30445:30450 ioctl 4020ae46 7fda76f58510 returned -22 [ 3319.721095] binder: 30445:30450 ioctl 4020ae46 7fda76f58510 returned -22 [ 3319.742784] binder: 30445:30450 ioctl 4020ae46 7fda76f58510 returned -22 [ 3319.758096] binder: 30445:30450 ioctl 4020ae46 7fda76f58510 returned -22 [ 3319.774346] binder: 30445:30450 ioctl 4020ae46 7fda76f58510 returned -22 [ 3319.791144] binder: 30445:30450 ioctl 4020ae46 7fda76f58510 returned -22 [ 3319.824448] binder: 30445:30450 ioctl 4020ae46 7fda76f58510 returned -22 [ 3319.839426] binder: 30445:30450 ioctl 4020ae46 7fda76f58510 returned -22 [ 3319.854439] binder: 30445:30450 ioctl 4020ae46 7fda76f58510 returned -22 03:08:18 executing program 0: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x2) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x400080, 0x0) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000240)={0x8000, 0x8b, 0x100}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffebb) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000180)={0x1000, 0x9, 0x4, 0x40000000, 0xc6c, {0x77359400}, {0x4, 0x2, 0x5, 0x6, 0x1, 0x5, "d56e0789"}, 0xffffffff, 0x2, @offset=0x1000, 0x401, 0x0, r4}) r5 = perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x8e, 0x3, 0x5, 0x60, 0x0, 0xfffffffffffffffd, 0x10000, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffff7, 0x4, @perf_bp={&(0x7f0000000040), 0x1}, 0x400, 0xffffff7f, 0x7f, 0x2, 0x6, 0x0, 0x8}, 0x0, 0xd, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x4) 03:08:18 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(0xffffffffffffffff, 0x4bfa, 0x744000) [ 3319.869386] binder: 30445:30450 ioctl 4020ae46 7fda76f58510 returned -22 [ 3319.884239] binder: 30445:30450 ioctl 4020ae46 7fda76f58510 returned -22 [ 3319.899115] binder: 30445:30450 ioctl 4020ae46 7fda76f58530 returned -22 03:08:18 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x5607, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:18 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x17, 0xa2a, 0x2002, 0x9, 0xa, 0x2, 0x3, 0x2}}) 03:08:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x5425, 0x744000) [ 3320.008179] binder: 30480:30485 ioctl c0585609 20000180 returned -22 [ 3320.037019] binder: 30480:30490 ioctl c0585609 20000180 returned -22 03:08:18 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x5608, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="b440e7fd1bd1f6c5c6452b6c2339eb976f66b6c1d4f5292eae818d9c7e7a74a6deaa842aa35f3e893d4ea5868800122d55f66b78f3516beafbdd04888d713502c81e30558debd750a073494216900b50796f7b346ae61c8318ec5bceb9b516e2239e565fe7b7fc1edf8ec2cca08b084c8d22a6829b1bb24bac70029cdd741ec875378c7084fa25f1156d4097f58382b15a56cdbd94657d2aacc7e2a7231c294b34bae1a3713e8c04076371866e6e914394ad1d997deabdb6302be6662a14cd497740294a4519634e4a9e0a5d4ac6d89667b4087b800118fb8cf9c4fedc650c55696bdf2224311671ea4f8f71e8191b521abfdd1e5de98ad464101f7c178c35e7f76516da2d62bb2dc2440387913265ae8375c16d6337824cac794c5e8c99cad411073ed6ba700c69f55d9ad939958cdb7bbc9943904a1f5b56ac76556fd21bb4c58caca520b676ffbc49f200fd993026dbd48ef09cd4fbc012a7df91307ce210b2ea311e36c1a87ed68e782ba4a185a1b635d05d4ac1b34ad015dd022ad61f7feebbd450f5a07ee6f62b03e3bd7e7d50e96ecef6e30bc2a40377e021e459bdbf94f400854f21a2259215241c6bf4a1e436193509e27ac57c6518e42df7eab2a73ffcd785ee14821efeb96e878efd3b88120c7778e9f422c618e0614dd5ea79ea06d5c3e88ba397dd3b96171d77ef143a09d1d93bb44795c845a7271e1f1894c97cbedefcc53cedafe1dc004221dc4b451c09b93676d02cca15d7cd385d8e6bbb0d2b4f86a543d6e21af84760141347508e4da8611936cff6f2c84b2faf53434c55765849fd7858add5de4fea0ec98dc5b527a8677a66b70db0ebeb56bbfeaae567c3d1aac1929ac1053d1403cb1c14517769ac05145ff05700632af7a51848634b3b5f74bd894bf099769c65033c0475765934c7a1618b7ac3fbb39154f381466f1ac45ce2ba5c63184cb9f7b2f0aa372e10286b6c6ca4bb11eee3ded181d7c4838d791dc1df98a40b28e485b8ff373fc9e67f73a0a15f2f8e00554bfcacc5b0bf9f7cfb720ee63733597756d1579bd440d393574d08cd44a51d3d3a39a03b48f4ea754b7a404c9d2bb62e968cb05b297699585be683f21edbc7422a56ee26c3864553ff4fd91f7668203417fe3625d36f16a6d088bd3e62dbdff723c52069b0bc6e70cd9330a8ba46823a3349cba55e0b3394b633874dbdbdf45a677744b1842acc02d6ca35937951b3727d8920ac2e5a283035e144df463a529ca09d96f02659b640677620c8e5b49a3d648c32f3c31fe57eefbfdde5a19d10cb0c381ef1c90222fe557e186047c3b5fbb02a841a5d1afd0a6031dd7b6e0bf7dee97494015d22602f5e2c14ea7b498a1a877f57228dfa54eac4de742a69bae82a0e5bd87f25fb9e3675131f87565a92e312ca7afdaf1f8e95600735b2e9ae147b5bb08f162f"}) 03:08:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x5427, 0x744000) 03:08:18 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(0xffffffffffffffff, 0x4bfa, 0x744000) [ 3320.065558] binder: 30483:30491 ioctl c0585605 20000040 returned -22 03:08:18 executing program 0: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = dup2(r0, r1) r3 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000180), &(0x7f00000001c0)=0xc) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r5, &(0x7f0000000040)="4a6087089d7e7b1e454a600ca3cc297858d150a4efc4b1a3e0d517b2d018334650dc623f40a4caa76eb19964db04c8963ca4fdb3206b97249d856aa3b434e32d52926f4b3eefa6603d88e89d71ad4ab889399a893e0216fcea1aea66fd2c9401", &(0x7f00000000c0)=""/61, 0x4}, 0x20) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) mmap(&(0x7f0000ff0000/0x3000)=nil, 0x3000, 0x2000001, 0x8010, r7, 0xb8bcc000) r8 = getpid() sched_setattr(r8, &(0x7f0000000200)={0x38, 0x2, 0x1, 0x8, 0x1, 0x7, 0x2, 0x3, 0xfffffffe, 0x6}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 03:08:18 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x5609, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="b440e7fd1bd1f6c5c6452b6c2339eb976f66b6c1d4f5292eae818d9c7e7a74a6deaa842aa35f3e893d4ea5868800122d55f66b78f3516beafbdd04888d713502c81e30558debd750a073494216900b50796f7b346ae61c8318ec5bceb9b516e2239e565fe7b7fc1edf8ec2cca08b084c8d22a6829b1bb24bac70029cdd741ec875378c7084fa25f1156d4097f58382b15a56cdbd94657d2aacc7e2a7231c294b34bae1a3713e8c04076371866e6e914394ad1d997deabdb6302be6662a14cd497740294a4519634e4a9e0a5d4ac6d89667b4087b800118fb8cf9c4fedc650c55696bdf2224311671ea4f8f71e8191b521abfdd1e5de98ad464101f7c178c35e7f76516da2d62bb2dc2440387913265ae8375c16d6337824cac794c5e8c99cad411073ed6ba700c69f55d9ad939958cdb7bbc9943904a1f5b56ac76556fd21bb4c58caca520b676ffbc49f200fd993026dbd48ef09cd4fbc012a7df91307ce210b2ea311e36c1a87ed68e782ba4a185a1b635d05d4ac1b34ad015dd022ad61f7feebbd450f5a07ee6f62b03e3bd7e7d50e96ecef6e30bc2a40377e021e459bdbf94f400854f21a2259215241c6bf4a1e436193509e27ac57c6518e42df7eab2a73ffcd785ee14821efeb96e878efd3b88120c7778e9f422c618e0614dd5ea79ea06d5c3e88ba397dd3b96171d77ef143a09d1d93bb44795c845a7271e1f1894c97cbedefcc53cedafe1dc004221dc4b451c09b93676d02cca15d7cd385d8e6bbb0d2b4f86a543d6e21af84760141347508e4da8611936cff6f2c84b2faf53434c55765849fd7858add5de4fea0ec98dc5b527a8677a66b70db0ebeb56bbfeaae567c3d1aac1929ac1053d1403cb1c14517769ac05145ff05700632af7a51848634b3b5f74bd894bf099769c65033c0475765934c7a1618b7ac3fbb39154f381466f1ac45ce2ba5c63184cb9f7b2f0aa372e10286b6c6ca4bb11eee3ded181d7c4838d791dc1df98a40b28e485b8ff373fc9e67f73a0a15f2f8e00554bfcacc5b0bf9f7cfb720ee63733597756d1579bd440d393574d08cd44a51d3d3a39a03b48f4ea754b7a404c9d2bb62e968cb05b297699585be683f21edbc7422a56ee26c3864553ff4fd91f7668203417fe3625d36f16a6d088bd3e62dbdff723c52069b0bc6e70cd9330a8ba46823a3349cba55e0b3394b633874dbdbdf45a677744b1842acc02d6ca35937951b3727d8920ac2e5a283035e144df463a529ca09d96f02659b640677620c8e5b49a3d648c32f3c31fe57eefbfdde5a19d10cb0c381ef1c90222fe557e186047c3b5fbb02a841a5d1afd0a6031dd7b6e0bf7dee97494015d22602f5e2c14ea7b498a1a877f57228dfa54eac4de742a69bae82a0e5bd87f25fb9e3675131f87565a92e312ca7afdaf1f8e95600735b2e9ae147b5bb08f162f"}) 03:08:18 executing program 4: init_module(&(0x7f0000000000)='}&bdev\x00', 0x7, &(0x7f0000000040)='bdevuser(\x00') 03:08:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x5428, 0x744000) 03:08:18 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4bfa, 0x0) 03:08:18 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x560a, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3320.254649] binder: 30498:30502 ioctl 4020ae46 7fda76f58510 returned -22 [ 3320.311583] binder: 30498:30502 ioctl 4020ae46 7fda76f58510 returned -22 [ 3320.341707] binder: 30498:30502 ioctl 4020ae46 7fda76f58510 returned -22 03:08:18 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cgroups\x00', 0x0, 0x0) futimesat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0x77359400}, {0x0, 0x2710}}) [ 3320.365879] binder: 30498:30502 ioctl 4020ae46 7fda76f58510 returned -22 03:08:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x5429, 0x744000) 03:08:18 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x560b, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:18 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4bfa, 0x0) [ 3320.415956] binder: 30498:30502 ioctl 4020ae46 7fda76f58510 returned -22 [ 3320.456760] binder: 30498:30502 ioctl 4020ae46 7fda76f58510 returned -22 [ 3320.474459] binder: 30498:30502 ioctl 4020ae46 7fda76f58510 returned -22 03:08:18 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x301143) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xf72, 0x3, 0x0, 0x3, 0x12, 0x11, "402d22604464de45a12ce92fb8f9e5430df7facd5ee5c9ea4453baa8f40bee36944c9fe486557ebf98ccb54e8ee857856b5adcdeba47b85b5db3af8dee441b3d", "d0de8b235ada83fa6a4e3879296c203c129bf0ea552e7235a6e42b8669124c25f47a652af794a92fe918bccc9b70034428d11cd21ff8eee8d2cec39cb96be6b0", "f6ed5b1366568251a523e618e10e2ccbbd60156294115b9705d4c8ff13c08db8", [0x52, 0x3ff]}) 03:08:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x5437, 0x744000) [ 3320.518016] binder: 30498:30502 ioctl 4020ae46 7fda76f58510 returned -22 [ 3320.555943] binder: 30498:30502 ioctl 4020ae46 7fda76f58510 returned -22 [ 3320.599202] binder: 30498:30502 ioctl 4020ae46 7fda76f58510 returned -22 [ 3320.634573] binder: 30498:30502 ioctl 4020ae46 7fda76f58510 returned -22 03:08:19 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x5441, 0x744000) 03:08:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x560c, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4bfa, 0x0) [ 3320.659046] binder: 30498:30502 ioctl 4020ae46 7fda76f58510 returned -22 [ 3320.659065] binder: 30498:30502 ioctl 4020ae46 7fda76f58510 returned -22 [ 3320.659082] binder: 30498:30502 ioctl 4020ae46 7fda76f58510 returned -22 03:08:19 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x5450, 0x744000) 03:08:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x560d, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3320.659102] binder: 30498:30502 ioctl 4020ae46 7fda76f58510 returned -22 [ 3320.659237] binder: 30498:30502 ioctl 4020ae46 7fda76f58510 returned -22 03:08:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b6c, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3320.659253] binder: 30498:30502 ioctl 4020ae46 7fda76f58510 returned -22 [ 3320.659269] binder: 30498:30502 ioctl 4020ae46 7fda76f58510 returned -22 03:08:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x560e, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3320.659285] binder: 30498:30502 ioctl 4020ae46 7fda76f58510 returned -22 03:08:19 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x5451, 0x744000) [ 3320.659300] binder: 30498:30502 ioctl 4020ae46 7fda76f58510 returned -22 03:08:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b6c, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:19 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x5452, 0x744000) [ 3320.659316] binder: 30498:30502 ioctl 4020ae46 7fda76f58510 returned -22 [ 3320.659332] binder: 30498:30502 ioctl 4020ae46 7fda76f58510 returned -22 [ 3320.659348] binder: 30498:30502 ioctl 4020ae46 7fda76f58510 returned -22 03:08:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b6c, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="b440e7fd1bd1f6c5c6452b6c2339eb976f66b6c1d4f5292eae818d9c7e7a74a6deaa842aa35f3e893d4ea5868800122d55f66b78f3516beafbdd04888d713502c81e30558debd750a073494216900b50796f7b346ae61c8318ec5bceb9b516e2239e565fe7b7fc1edf8ec2cca08b084c8d22a6829b1bb24bac70029cdd741ec875378c7084fa25f1156d4097f58382b15a56cdbd94657d2aacc7e2a7231c294b34bae1a3713e8c04076371866e6e914394ad1d997deabdb6302be6662a14cd497740294a4519634e4a9e0a5d4ac6d89667b4087b800118fb8cf9c4fedc650c55696bdf2224311671ea4f8f71e8191b521abfdd1e5de98ad464101f7c178c35e7f76516da2d62bb2dc2440387913265ae8375c16d6337824cac794c5e8c99cad411073ed6ba700c69f55d9ad939958cdb7bbc9943904a1f5b56ac76556fd21bb4c58caca520b676ffbc49f200fd993026dbd48ef09cd4fbc012a7df91307ce210b2ea311e36c1a87ed68e782ba4a185a1b635d05d4ac1b34ad015dd022ad61f7feebbd450f5a07ee6f62b03e3bd7e7d50e96ecef6e30bc2a40377e021e459bdbf94f400854f21a2259215241c6bf4a1e436193509e27ac57c6518e42df7eab2a73ffcd785ee14821efeb96e878efd3b88120c7778e9f422c618e0614dd5ea79ea06d5c3e88ba397dd3b96171d77ef143a09d1d93bb44795c845a7271e1f1894c97cbedefcc53cedafe1dc004221dc4b451c09b93676d02cca15d7cd385d8e6bbb0d2b4f86a543d6e21af84760141347508e4da8611936cff6f2c84b2faf53434c55765849fd7858add5de4fea0ec98dc5b527a8677a66b70db0ebeb56bbfeaae567c3d1aac1929ac1053d1403cb1c14517769ac05145ff05700632af7a51848634b3b5f74bd894bf099769c65033c0475765934c7a1618b7ac3fbb39154f381466f1ac45ce2ba5c63184cb9f7b2f0aa372e10286b6c6ca4bb11eee3ded181d7c4838d791dc1df98a40b28e485b8ff373fc9e67f73a0a15f2f8e00554bfcacc5b0bf9f7cfb720ee63733597756d1579bd440d393574d08cd44a51d3d3a39a03b48f4ea754b7a404c9d2bb62e968cb05b297699585be683f21edbc7422a56ee26c3864553ff4fd91f7668203417fe3625d36f16a6d088bd3e62dbdff723c52069b0bc6e70cd9330a8ba46823a3349cba55e0b3394b633874dbdbdf45a677744b1842acc02d6ca35937951b3727d8920ac2e5a283035e144df463a529ca09d96f02659b640677620c8e5b49a3d648c32f3c31fe57eefbfdde5a19d10cb0c381ef1c90222fe557e186047c3b5fbb02a841a5d1afd0a6031dd7b6e0bf7dee97494015d22602f5e2c14ea7b498a1a877f57228dfa54eac4de742a69bae82a0e5bd87f25fb9e3675131f87565a92e312ca7afdaf1f8e95600735b2e9ae147b5bb08f162f"}) [ 3320.659363] binder: 30498:30502 ioctl 4020ae46 7fda76f58510 returned -22 [ 3320.659380] binder: 30498:30502 ioctl 4020ae46 7fda76f58530 returned -22 03:08:19 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x545d, 0x744000) 03:08:19 executing program 5: ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b6c, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:19 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x5460, 0x744000) 03:08:19 executing program 5: ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b6c, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="b440e7fd1bd1f6c5c6452b6c2339eb976f66b6c1d4f5292eae818d9c7e7a74a6deaa842aa35f3e893d4ea5868800122d55f66b78f3516beafbdd04888d713502c81e30558debd750a073494216900b50796f7b346ae61c8318ec5bceb9b516e2239e565fe7b7fc1edf8ec2cca08b084c8d22a6829b1bb24bac70029cdd741ec875378c7084fa25f1156d4097f58382b15a56cdbd94657d2aacc7e2a7231c294b34bae1a3713e8c04076371866e6e914394ad1d997deabdb6302be6662a14cd497740294a4519634e4a9e0a5d4ac6d89667b4087b800118fb8cf9c4fedc650c55696bdf2224311671ea4f8f71e8191b521abfdd1e5de98ad464101f7c178c35e7f76516da2d62bb2dc2440387913265ae8375c16d6337824cac794c5e8c99cad411073ed6ba700c69f55d9ad939958cdb7bbc9943904a1f5b56ac76556fd21bb4c58caca520b676ffbc49f200fd993026dbd48ef09cd4fbc012a7df91307ce210b2ea311e36c1a87ed68e782ba4a185a1b635d05d4ac1b34ad015dd022ad61f7feebbd450f5a07ee6f62b03e3bd7e7d50e96ecef6e30bc2a40377e021e459bdbf94f400854f21a2259215241c6bf4a1e436193509e27ac57c6518e42df7eab2a73ffcd785ee14821efeb96e878efd3b88120c7778e9f422c618e0614dd5ea79ea06d5c3e88ba397dd3b96171d77ef143a09d1d93bb44795c845a7271e1f1894c97cbedefcc53cedafe1dc004221dc4b451c09b93676d02cca15d7cd385d8e6bbb0d2b4f86a543d6e21af84760141347508e4da8611936cff6f2c84b2faf53434c55765849fd7858add5de4fea0ec98dc5b527a8677a66b70db0ebeb56bbfeaae567c3d1aac1929ac1053d1403cb1c14517769ac05145ff05700632af7a51848634b3b5f74bd894bf099769c65033c0475765934c7a1618b7ac3fbb39154f381466f1ac45ce2ba5c63184cb9f7b2f0aa372e10286b6c6ca4bb11eee3ded181d7c4838d791dc1df98a40b28e485b8ff373fc9e67f73a0a15f2f8e00554bfcacc5b0bf9f7cfb720ee63733597756d1579bd440d393574d08cd44a51d3d3a39a03b48f4ea754b7a404c9d2bb62e968cb05b297699585be683f21edbc7422a56ee26c3864553ff4fd91f7668203417fe3625d36f16a6d088bd3e62dbdff723c52069b0bc6e70cd9330a8ba46823a3349cba55e0b3394b633874dbdbdf45a677744b1842acc02d6ca35937951b3727d8920ac2e5a283035e144df463a529ca09d96f02659b640677620c8e5b49a3d648c32f3c31fe57eefbfdde5a19d10cb0c381ef1c90222fe557e186047c3b5fbb02a841a5d1afd0a6031dd7b6e0bf7dee97494015d22602f5e2c14ea7b498a1a877f57228dfa54eac4de742a69bae82a0e5bd87f25fb9e3675131f87565a92e312ca7afdaf1f8e95600735b2e9ae147b5bb08f162f"}) 03:08:19 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x5600, 0x744000) 03:08:19 executing program 5: ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b6c, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:20 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x5601, 0x744000) 03:08:20 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x560f, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="b440e7fd1bd1f6c5c6452b6c2339eb976f66b6c1d4f5292eae818d9c7e7a74a6deaa842aa35f3e893d4ea5868800122d55f66b78f3516beafbdd04888d713502c81e30558debd750a073494216900b50796f7b346ae61c8318ec5bceb9b516e2239e565fe7b7fc1edf8ec2cca08b084c8d22a6829b1bb24bac70029cdd741ec875378c7084fa25f1156d4097f58382b15a56cdbd94657d2aacc7e2a7231c294b34bae1a3713e8c04076371866e6e914394ad1d997deabdb6302be6662a14cd497740294a4519634e4a9e0a5d4ac6d89667b4087b800118fb8cf9c4fedc650c55696bdf2224311671ea4f8f71e8191b521abfdd1e5de98ad464101f7c178c35e7f76516da2d62bb2dc2440387913265ae8375c16d6337824cac794c5e8c99cad411073ed6ba700c69f55d9ad939958cdb7bbc9943904a1f5b56ac76556fd21bb4c58caca520b676ffbc49f200fd993026dbd48ef09cd4fbc012a7df91307ce210b2ea311e36c1a87ed68e782ba4a185a1b635d05d4ac1b34ad015dd022ad61f7feebbd450f5a07ee6f62b03e3bd7e7d50e96ecef6e30bc2a40377e021e459bdbf94f400854f21a2259215241c6bf4a1e436193509e27ac57c6518e42df7eab2a73ffcd785ee14821efeb96e878efd3b88120c7778e9f422c618e0614dd5ea79ea06d5c3e88ba397dd3b96171d77ef143a09d1d93bb44795c845a7271e1f1894c97cbedefcc53cedafe1dc004221dc4b451c09b93676d02cca15d7cd385d8e6bbb0d2b4f86a543d6e21af84760141347508e4da8611936cff6f2c84b2faf53434c55765849fd7858add5de4fea0ec98dc5b527a8677a66b70db0ebeb56bbfeaae567c3d1aac1929ac1053d1403cb1c14517769ac05145ff05700632af7a51848634b3b5f74bd894bf099769c65033c0475765934c7a1618b7ac3fbb39154f381466f1ac45ce2ba5c63184cb9f7b2f0aa372e10286b6c6ca4bb11eee3ded181d7c4838d791dc1df98a40b28e485b8ff373fc9e67f73a0a15f2f8e00554bfcacc5b0bf9f7cfb720ee63733597756d1579bd440d393574d08cd44a51d3d3a39a03b48f4ea754b7a404c9d2bb62e968cb05b297699585be683f21edbc7422a56ee26c3864553ff4fd91f7668203417fe3625d36f16a6d088bd3e62dbdff723c52069b0bc6e70cd9330a8ba46823a3349cba55e0b3394b633874dbdbdf45a677744b1842acc02d6ca35937951b3727d8920ac2e5a283035e144df463a529ca09d96f02659b640677620c8e5b49a3d648c32f3c31fe57eefbfdde5a19d10cb0c381ef1c90222fe557e186047c3b5fbb02a841a5d1afd0a6031dd7b6e0bf7dee97494015d22602f5e2c14ea7b498a1a877f57228dfa54eac4de742a69bae82a0e5bd87f25fb9e3675131f87565a92e312ca7afdaf1f8e95600735b2e9ae147b5bb08f162f"}) 03:08:20 executing program 4: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) setrlimit(0x1, &(0x7f0000000180)={0x3, 0xfffffffffffffff8}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01010000"], 0x0, 0x0, 0x0}) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) r2 = socket(0x25, 0x1, 0x3) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYBLOB="3802000005008f8bed03251db7b96cc8feb46c2ce8032a3cdf1a17e231a21317c63a2d3d3be3d91996767c3ce1e7218aca0b087c9dbf810727022629cbbe2897b57ff9172c99c0b9879d188f13dbb018fd5bb6f599a15f03963c882ac3d42adea90ed0d2e597c65b7b3a56734c9e46ccd076ff334ef91338fdfc6939f7902a615c4e692e890592b7342436ad7217bb6801a10df8b41aaf04649832"]) r3 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x80, 0x101000) ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) dup(r0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x0}, {0x0}]}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f00000001c0)={r4, 0x2}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000340)={0x0, 0x10}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000040)={r5, 0x20}) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) 03:08:20 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b6c, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:20 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x5602, 0x744000) 03:08:20 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) dup2(r5, r4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x0) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000040)={0x0, 0x10}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000380)={0x0, &(0x7f0000000280)=""/244}) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x68, 0x0, &(0x7f0000000180)=[@dead_binder_done, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/19, 0x13, 0x2, 0x32}, @fd={0x66642a85, 0x0, r6}, @fd={0x66642a85, 0x0, r7}}, &(0x7f0000000100)={0x0, 0x28, 0x40}}}, @clear_death, @acquire={0x40046305, 0x1}], 0x36, 0x0, &(0x7f0000000200)="04278f8ea738384a2d76e4860fee05bd67ddbf67ff222e390a242a390e5818a5cee8f5c0571c5ea66ec9b6c3abf5930a45b38baa60d0"}) 03:08:20 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b6c, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="b440e7fd1bd1f6c5c6452b6c2339eb976f66b6c1d4f5292eae818d9c7e7a74a6deaa842aa35f3e893d4ea5868800122d55f66b78f3516beafbdd04888d713502c81e30558debd750a073494216900b50796f7b346ae61c8318ec5bceb9b516e2239e565fe7b7fc1edf8ec2cca08b084c8d22a6829b1bb24bac70029cdd741ec875378c7084fa25f1156d4097f58382b15a56cdbd94657d2aacc7e2a7231c294b34bae1a3713e8c04076371866e6e914394ad1d997deabdb6302be6662a14cd497740294a4519634e4a9e0a5d4ac6d89667b4087b800118fb8cf9c4fedc650c55696bdf2224311671ea4f8f71e8191b521abfdd1e5de98ad464101f7c178c35e7f76516da2d62bb2dc2440387913265ae8375c16d6337824cac794c5e8c99cad411073ed6ba700c69f55d9ad939958cdb7bbc9943904a1f5b56ac76556fd21bb4c58caca520b676ffbc49f200fd993026dbd48ef09cd4fbc012a7df91307ce210b2ea311e36c1a87ed68e782ba4a185a1b635d05d4ac1b34ad015dd022ad61f7feebbd450f5a07ee6f62b03e3bd7e7d50e96ecef6e30bc2a40377e021e459bdbf94f400854f21a2259215241c6bf4a1e436193509e27ac57c6518e42df7eab2a73ffcd785ee14821efeb96e878efd3b88120c7778e9f422c618e0614dd5ea79ea06d5c3e88ba397dd3b96171d77ef143a09d1d93bb44795c845a7271e1f1894c97cbedefcc53cedafe1dc004221dc4b451c09b93676d02cca15d7cd385d8e6bbb0d2b4f86a543d6e21af84760141347508e4da8611936cff6f2c84b2faf53434c55765849fd7858add5de4fea0ec98dc5b527a8677a66b70db0ebeb56bbfeaae567c3d1aac1929ac1053d1403cb1c14517769ac05145ff05700632af7a51848634b3b5f74bd894bf099769c65033c0475765934c7a1618b7ac3fbb39154f381466f1ac45ce2ba5c63184cb9f7b2f0aa372e10286b6c6ca4bb11eee3ded181d7c4838d791dc1df98a40b28e485b8ff373fc9e67f73a0a15f2f8e00554bfcacc5b0bf9f7cfb720ee63733597756d1579bd440d393574d08cd44a51d3d3a39a03b48f4ea754b7a404c9d2bb62e968cb05b297699585be683f21edbc7422a56ee26c3864553ff4fd91f7668203417fe3625d36f16a6d088bd3e62dbdff723c52069b0bc6e70cd9330a8ba46823a3349cba55e0b3394b633874dbdbdf45a677744b1842acc02d6ca35937951b3727d8920ac2e5a283035e144df463a529ca09d96f02659b640677620c8e5b49a3d648c32f3c31fe57eefbfdde5a19d10cb0c381ef1c90222fe557e186047c3b5fbb02a841a5d1afd0a6031dd7b6e0bf7dee97494015d22602f5e2c14ea7b498a1a877f57228dfa54eac4de742a69bae82a0e5bd87f25fb9e3675131f87565a92e312ca7afdaf1f8e95600735b2e9ae147b5bb08f162f"}) 03:08:20 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x5603, 0x744000) [ 3321.955493] binder: 30596:30600 ioctl 4020ae46 7fda76f58510 returned -22 [ 3321.988023] binder: 30596:30600 ioctl 4020ae46 7fda76f58510 returned -22 03:08:20 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x5605, 0x744000) 03:08:20 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x40049409, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:20 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="000200000000000028001200090001007665746857258dcbf7adef350992c60b5772152476b59282e87920f1d8e1618f1fbd851c13b7817857bd39738d17c7d1bc6e168879dec185079894b4ea8e1e09e363d7ee3e2ead05a580e388c9ee60bdedd42af61661282a3ad78e87fdae0313751339202e6a4b0700a3d3f142787a7095c2d5bdec762e5976764e467513a458b3bab4c2ef"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xfff1}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x20, 0x2, [@TCA_RSVP_CLASSID={0x8}, @TCA_RSVP_DST={0x14, 0x2, @private2}]}}]}, 0x50}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff1}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x20, 0x2, [@TCA_RSVP_CLASSID={0x8}, @TCA_RSVP_DST={0x14, 0x2, @private2}]}}]}, 0x50}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000016c0)={'vxcan1\x00', r7}) sendmsg$nl_route_sched(r0, &(0x7f0000004fc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000004f80)={&(0x7f0000001700)=@delchain={0x3880, 0x65, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0x4, 0x5}, {0xa, 0xfff2}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x375c, 0x2, [@TCA_CGROUP_ACT={0x1738, 0x1, [@m_skbmod={0x104, 0x17, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x101}]}, {0xe5, 0x6, "78065ea058b2cae02c3150fc4d48037133c36ce99332d72d21a3816a665e62769eb08619cbd1b45957b609e73caa7f98a020cf1393610f4dd9d537f2798a50f1bc652682b4b2ba0cb7947ccaad20387eaff1cb5fcf42c6adf976d1904e18353a5c6e7c8b35cf66bdc2e7ef0f01e313e173cbd558f7993ec797e89c4d8bc89fa502d0c230da79f8ce9d2ad939708823b4e56eec0594816e397a41631869fd35f11e9569295553833d124368fc08a51965e3a821893891764921fe6b2329358406973094aa8e9fefe6a15dd7577d3bc1c90e5c68a921241249a4663fcb0f11a4ef23"}}}, @m_mirred={0xec, 0x1c, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xff, 0x1, 0xffffffffdffffff8, 0x7ffa, 0xfff}, 0x2}}]}, {0xb5, 0x6, "fb361745113b7372cd9183900775315d65bd89527e10c2e44cc9f8eab813dc461329e598789292acdefb92afdd6252381d46c11244e6833942b8813f53313454672bbae30119311cf6c982f1befb6d75a58a4c56ef3f7e8d95999623ae56efa96e31d4cf2c095b230c1d29135cdb7241abece5a53549636fb0e31cf92a6c412931bcb8b75a67ec3b503f30a55a5b9aeedf818f7a48aff0c2b9b25669ef1eb99404ceb54dd6e547d32a62050606785fc3ca"}}}, @m_nat={0x1dc, 0xd, 0x0, 0x0, {{0x8, 0x1, 'nat\x00'}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xffffb9db, 0x1, 0x1, 0x14, 0x10000}, @multicast2, @empty, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x10001, 0x4, 0xe6b, 0x2e97}, @local, @multicast2, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4000000, 0xe95, 0x6, 0x0, 0x200}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x8, 0x2, 0x8, 0x800}, @remote, @remote, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x3, 0x0, 0x5c, 0x8001}, @broadcast, @multicast2, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x3f, 0xffffffffffffffff, 0xfffffe67, 0xf4b4}, @rand_addr=0x64010102, @multicast2, 0xff000000}}]}, {0xda, 0x6, "68bc6a3d1e097b7e2f0d9d58dd724a63fff758a95b6897e66fa576c6d53528518bce4780df704773d5aea3a2791515f27bd7bb47f643c8439cb3849859639ba6d0e67cf5ac99cc7c1a2ad39352e342659c2941f67b93ac94f06f169db417ad608ed36ea3d2da56dbd584590fa2f4e088d40da5e09c624e1d00418e5f34c84ecd2e9ca2fa2860912eecfb7ef2e647ad15de373baab33265d8f8a87872b4f87f0d339aed0a8a45b0b35d5c7fbfc313807628f2b09ba6168a1eb320f4d6b824c27c0ee7c996faaa064af6bba43103bda1b8817957ff8595"}}}, @m_mirred={0x14c, 0xd, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xf23, 0x8000, 0x8, 0x3, 0x2}, 0x1, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x0, 0x20000000, 0x1, 0x101}, 0x2, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0xffff, 0x1, 0x4, 0x6}, 0x2ffe28548081bf59}}]}, {0xd5, 0x6, "efbc142e2fb7062d2a2125c241755a98bd3bf87259a83ac955beca2ef6c449aa57ebbc29107f9ae6f7c8583c00f5af148d6df89aa71083db6a32c94a2de4c803eeadd8203786bfbddf0db99ca18821de45c9ccd69372b53d9501e5400f6e18b645258268aed3d85fdb64b37021cd9f824d5b0e0955fca7b339d8a99c401975ad8503ab0189075d4f7e0f87cc84f4f4acdbf1bb6abc6f28cd16c07bf40cc11becffadd56e8ffcbfb7e0fd0dab9f6d12e36ed8ed259cacd25353ad8c36bfb218f2f471e38f50f0a3fd0a84dcf0ff7be05a08"}}}, @m_gact={0x1060, 0x1d, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x432, 0x20000000, 0x0, 0xfffffc00}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb151, 0x1f, 0x0, 0x0, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xafd, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x4db, 0x10000000}}]}, {0x1004, 0x6, "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"}}}, @m_nat={0x1bc, 0xc, 0x0, 0x0, {{0x8, 0x1, 'nat\x00'}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x81, 0x7, 0x23, 0xffffffff}, @dev={0xac, 0x14, 0x14, 0x11}, @dev={0xac, 0x14, 0x14, 0x24}, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7fff, 0x11d, 0x7, 0x7ff, 0x9}, @rand_addr=0x64010101, @broadcast, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xe37, 0x1, 0x1, 0x6, 0x800}, @multicast2, @multicast1, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x200, 0x1000, 0x6, 0x8, 0x20}, @local, @multicast2, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x96, 0x2, 0x20000000, 0x8, 0x9}, @multicast1, @multicast2}}]}, {0xe4, 0x6, "a3bbaa871a2486f7b434e20508a55d0fc2d35ac1c07ae0a3f587b66b402236a430e89aa9a6c19ea1893a3e068dfdd8f4893de09e5c8f081bd1545d5d86e2d7da0d839abaca74ec531e0667f378888e760713a14d89dfca05d4b183ee5bba862038968a1f34844ba6691bda1458e2314eda18a8eeda762bed7dee82c5c7fd9b985556ee35092449a61966429dd761a9260679e1b489da3644662814f3ae09ddf03e0fc6d93261d1100ecc8b6a9540f2027b5e22e372c758f776677d2c103d06b48862e883933d788e296e9174ffd0d3f3920cd079601988500b49cd0579e6c768"}}}]}, @TCA_CGROUP_ACT={0x124c, 0x1, [@m_connmark={0xc4, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x0, 0x0, 0x100, 0x9}, 0x5}}]}, {0x90, 0x6, "b478dd4866c826ab6765b89baaee6c49203310d8a084f2c58946deac95fb17a3c164a4163a10953f29c8fa4206260045c93b61b59546784deaf9a518cf11da17725e0c9b079254d755b81ddca7fa8551073fdd91f6f4891a1490a77c7907e32df23d272d29f23ff30ea97f4f1e7f2794cd268e87039e44ad2be632ad76bf526c17e7e230355a1ea99e1d4cb2"}}}, @m_simple={0x88, 0x20, 0x0, 0x0, {{0xb, 0x1, 'simple\x00'}, {0x44, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x29, 0x3, 'md5sumselfvboxnet0procself%!trusted/\x00'}, @TCA_DEF_DATA={0x14, 0x3, '/dev/input/mice\x00'}]}, {0x33, 0x6, "e1b28c006fbcb972bfe9cb9fd4299a50668730128133ce4195404881bc2dcabdbd668dd9ba3b5a21d77bd583760c33"}}}, @m_sample={0x5c, 0x13, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2e}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xaaf3}]}, {0x20, 0x6, "089581bf3c55088e4c5464144065a216abaf79dd57879e7bd9bdab1e"}}}, @m_connmark={0x101c, 0x11, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x4}, {0x1004, 0x6, "269af9e92b831469db795231c5a1fd21621270727eda5bb9c3d026bd406ad591266a16efa4d402e14525315e909f4c83beb9b901ea5cadd2f54c5fe7d98405921c1ce9b474eb3a811594c41d506a9811801088958e0dd374e29cbd1127b8fc35aaa80f58f6a53a0a4cacf78286c3fd00a539a81df1f2c55373354a9fb824bb48142541243b939e16c0efe384bfff69c0ee9b5c57a71236000ca9c3cf527a7e74f4bd78048ba0f107821e631f2237da0590643b33c2b219f905edc1f26bdce2874a750b90261de7ef8de94b530c121236d1cdc0339f96452ca80d818faa7ba9b03ce2bd06299ccadd6710097b644b24ccc4d0beaee9964ba3a6f222ffe15bcf4955bb69d10b467fc5c04110912a324d01df6c64344ae0195be228644cd7de710efb7985ce7f1ae2ee0d9b25deda1c12d017787255cc36cbf76a5f39c2050d185366ebabf7281785a012e85b096629a285bab1ea1042fcefd9c5c3bfab50fde05764ec277077be422e928b3ada5ed9146177e8caf5ff1d643f0314b2789a853610508b49f072e2b6c2d84267e0cad414e9b5da176897be0d9a8588521813ac35d3301de7cc54ba4babb7a5efc842adeee21d249e2a918b0fadc0f5de4debc10b03a0e1cbc364d4334cc74683013bec9910520733721effd8224aaec1c72990881f6abae45f69cfcffb5d6b8f82ad05e8161df8a0587e4a5780a9365e64ca4790164b71b33fd29cbd792a395a4c8d8371e6ae9648bd356a05348f7bf3f4ac20aa14fd1b8cd1151be39582fe31f9cd971ac6168ac5d933945a47902347d558b873996f92512f00ebe9f8902362e8fb534b30fcd352dc3cdd428787dc184a504208c920b39a15945766cb5218f5854d4d1f436ad45ea54ad27706feb9487b45346b3bcc8dd86ec902feaa6435734317e708f4c90a8d334c20b5ab0f382a4064d06631069e8e8b54d140232f4aa6a282abbeb5e3b9b275d9282e2d4774b616803fe3998a2d7c94d0cb955b5ab8776411e8c1b13d49febdb52928a78211e63b25f635ad35942b6e06bd1699122d3281c7925076bac7128c729fcfdca4213be1fd2c7adcd496fc2bf86f52da9f0d56809ca54d217b86a475f1eb95c267ec2bc629700abb5cba276fdb1c5a921ddaceff06bf577be2be4e2c675a488ba3038ddb75774857a9d491ef76fd71c2589a9fac207d84386a2e413bc54c8e90eab3234444ca9da1eb65a45e23bba203c9986e437d9e44e73584e8e5f5adb248f4b665cc63be5c1bbcefa3dec02dc185a224972397570583b33fe3a5a594f968099ef77950303b6fdf7501b64bd2c0c8936a419169075520e3f0afd18844aa05e6eef6f7a0630222a20b292a331c56c1b9824e15f095a15b8154227cb2340a99700d3012e947f9113d873a71a06bec00eae9f2b00f3adfea874cfdc32d13589c226446462dfd668194a1936647bd4b868194e97e8feb0e980172c18db7071c13cf7d5a4141a8a8ed024649094a25385d09eaed66b2c2805dc2902c466fb33fa440dfa2f78f8edec136c71eb8fb3755a6f732853be15d8e654f492c0f39ce7d1bf9b6fe6af4b093d0a91d6d13d783c5b9c94500b0c7b5b14c373423dac928ef327fbc8d1b6427b34102c255fe00d943344625af32647e8573a582c9d6721b7551a8eaf9f0db0bf07516056ee3908e8c8a8c6c87f2cd9c61374232513e938e5a48a5acb591d371d176d47d054328ee0ffd1edb744345c0a66cf701b174fdab23547a01fd94495cd06ee85ac3eb7eb0df6fcee45048f9f23bc31ccbbb86915616fb38152a5781766ce68916d851946d3787e7c807c8f1ecb34a3a46166d8e76ea92fb38ab6abe738499c57e0791594d6376cb47e16b2a0359e6360103ff3272ccbb6fef26135ce870b5f1eeff3203864d52d27360698ae005988849539057cb13fac7331482675b3a62fc4c74247e8ca81d2850379b0f41d10f574e925fff6c462ca5f50b2920d2700e065ea4fef723ba0d0d4ebc93dabba3960051efbd584964e637d40125aaacd52e4736713fd4e3ddcdeb4896196d60445ba35740342f1f1e773dafb0cbbd6b3d4c9de79174f9369223e113f03230175907fabd62faf0db3703b383a8d802a1db635c9bdf71a1be30c578122595eb4fdf84adcbff687f7818e80ec55da07935611b381d810759521eaa6679a6945ed7964fd638e760963f731d76ddbfa82cf40f555564714a8ae438a314494d9cff5fce06eee8fab9c664e6d484fc59cab22315976d7072a36a1f73b7a461a0354e3cd3f802eeb12d465c226fb718b98e67f161993a1caf9b4ea252958eb1b2a36e76f33bd5bdda2c2c9b9f789a82917843b82fd455a157dd8437c94f17925bbeeca12f339f32a513b237c8fbecaf454c22b87dda5d1f09ebf4adef5c18bd10e282391225777446ab0e52fed784eab28aca0130ed78116a17b8f5d8e8bd3d6077806fb77581c1c25a9ce96811e06e2e5459e4595cc950bb63d4340f7d2963b60c56881481e62572518c1610d9af710300a1dcc4f5891caf8ff70c02a45595b82a3cda6da34d8a5c1596b39ac3571b0b79062f4d6bcddb7c0f4fa53d92f9ea210468d360075606d86ef6ad39b2a512dd97f8d0cdb660b1d3796aa5d4b5b8d44553bceee7316229f704f9801babcccfb821abba225c0eda40469a7de30937bee1ab7a1a3b9ce0518a3e1139354dce3a1c7016f30fb9b9dd4e347990126bbf7beebc7c9d9e66d559a08a5050f3383f3da6b8a75c5721219e65a899ff899a6f4c19d02d28510523b1b061b608a7b78f2c40783ebc9b0e71ec99c438b76f2627bb85c1cc9b10883b0b716983ff217dddc967804af17ebed425bfba7e57f6755f9d020810fd7a5aadb90d14ad381a47522a8860b82cb65bb8586547356ae4fb21468b7160e537684cc950deae16843f54056076957a270b8bdefe564c28d77bd7484d3c905f37482930d66deb86a9f115a1c223a64336bda336787a2c2772b2c5caa7c9e6d7547a825f1a53f1828ee27a1575be881e0a1f4fe3305156182b8125726317f9420af995f63bd6860e9b5ae7f7670d9f8a709100519c152349dc4a971bd71bcfe5f9fda1b3961598606496671946a1e091340cd748fd0aa9c307989adf73f5f57a55590fd3cbab05bc6e40b229db80c28fc18c22d24cfe03099e366842d0aeee32f771cb4c18c660d72f09a9b834c979fb70662992e9f5a14d4f39103988532279241df1793972f14653e325a5ea24c08dd7d779b6a402c19c953205630d0b99ca522ed0fe037399334169e6d4d0557291d2b07ab7e009d486fe417db47de1e54defa8cc4d399b3fb43ab8ea059ca720eabb0099e593aaa1fb04d354ccae19abbac41ce2168704903d012224c9cb49a5abcdde9631ef1260f427e3773340b199f6c157a9abf9c604f1dc839c31eb694747aed7d511068a7cc3a1944508fccfe10091c698d9c093c25cfc825c74b3cfec9d9b5aaf752d00ba6c151c6aad6c038fc7c29735cf4cf78bc46fd36752011fb018d763344f196629e9c6a6ff94d4569afe2ba2ddad115d3739566c7185b2e7a1fdebb14e1a8092567242ef859775b066186145bfc91d394694858e76b6f22faf799a46bb5622d3727be0c2303e76174c1293fa8829175b0a6953255f45db4cc735d9c41b69c33b2a085a68246c959df183190ebbeb206408f604dc0ae435c7d3640bc3ce8c08b7f3362a9956ec0daca49a4468baa6f941e3bb4256fddd2d674562157c74475dbc6e75392368b03a2b2edd131aa7e7109e28e4347be9d8aad62cc1014d36a80145eedc6db3cbe96e7cc97e8fd807ab7ef11126b4b736082ca21317bd35fc1053edba350fc24d043e99a741181dbacac81e83494f8f31df6cf52199e7127b6620a310b7459546cb69fa62ba116c5a6f269f75c443ad9e67a273e00a8f2cf47ac234a71483ed8748a182cc9bfb8c65e42f18f2ba08aa08cc3855419b25388dbdd4c6fc4e2d206deaabe8a904d2aa1987022790e0bc93ec0bbe38a60e9eb5cdd4271b64a8a0bc672ff3ca7ebfa6a510332f23135a11042159350f9861e943a1a4e1c2b1572f141593375741f781fc3c07fefafd461a4f3f4011ce3a7b72bd1f5fa9bbdd78ed48ba0be9c7319891e67b78bbf6f0b0de1ff73906acbd018d8dd188f1e4252726b13066ba8f231b69ce9b6f4441fa289457b968918e67847f28bd9b561fec15f90983e422d85cd8349f4b8415e42abb57348b184de445741faf4fa9dc2913ab2cc7c3719105ebe3f190bd742c2594ed3ae1c63235b1411092e67e60faa263165989b69b36837472d12705b50d8491a396e0623a188d1f68f5aa0192e5ea8507d6735875cfc81d04325b07dab4608a6b2294726f095b00806807fa33ed2b105687bc28c0615936d2b17c63de325f55bb141241191795c76970f4bf90c58595564a979c96099c28faa7a90dbedd275637e6a6ca08c2e7d0dc3e3d535edb7175de094a8eb5585ee1cd76fae737bab325309e4c8d9557b1fc0b5cac4f3eb4e6fe4b18038b8dd6f830d70f4879f1ecf9da29033196652e8df42fdf385aa327377724c2ea44c6153629abed39cfb7dc3adb2f6cf7e7b04b673a7255a9e7a841835963debfe4c5447bc1588ec7975f48050d472715a06d47bdc6ed302839bfb91b0102a005cb34affe2fd1e89992fd520bc917cd8f91e23d4a9b31a7ce3858a2c7b9a066e3e4a0d4bfce3886b075cab16933d5970752c46af1620416adc1287ec517d000685fdc696b1612edc37620d262f053042623ca344263c6fea6f62513da73d8a89c5ae29ce330c3f5d6d9efa9b83f9d015363d5ec4b374e333567e284da768457549076f06beca38758c455866b513272f5564deeff6d7f8244cf0f521f5cc5ed057c815fd670a3b06ce07f61c740104f3a5cc09c6f5a191ab1ed5ab49d51093d19c4cdbc7085752b1b40599d257e9274012b56954fb19b690d987872bab3c8772603d0777d00cb58d022a29e31343883d5f8ea72017d4ee65f4f88436e2c33f8577c5afd6bd930bbcc987d00b3439659596d5dc31683aef9a635e91c3e20c2215074b3bb9a22cfd1f2524d3ccd8311d5f1fc31841a33eee7d55a51f3c415609c5a79e4ca56d55495d422ee4d13b251b2c79b948dab7ca8f96b2470c3357949dcbbc15a4da9b435ed045b04aaa47e0ab90bd7726fbc4b266ef768bfda2fbf151059c8339e09506aaa3b101c420f459818c9c39ad2f1ec55aa818bb18096c2d9ee9ab6b8a624d11efce622026ea7da71d82e1f9317273fe19770fda604f61e8aa7ecd0665dc56901c3286fcb820bd537b0082186b58d4cc4b27e7a1bca130388dd03b783b4761c28965144532c98eb511505bc5b8274885c78a80ed6889d7d4d3c0e63cfe2a2d98c975f513b811e9730658fbcaae8f19ab869166fbfb478d806819e208293edc270e8c95d1223f86e8cba0901bf1bf50d7779b99a93d1963062d1b9b740ad4672c2b57e34a256000b3c753cc8c0a29044067cce93db094e1553577efc4a93bc7c65428c68767c8d4d46d96e9efea4e8da5b03265cfdcc6445e4ee9dacac323ef4d1d6e3c119290e04561d631d3324010e66186b638ee159e0460178a62c06e903d91821a25d1470eac6ff1165ebfa0aead0c4f30c35dce280830e3211bc7748eb35b7715fa65e44941fdd0ac1bdb294149c372a0af4a5f88f2c8b407f11f2a130d41c77d300871c45767e3350a58222f69f6c66609772895ed85792871b31f21739c85827709ec9aecd8799cfff3e3cbcf33e84"}}}, @m_sample={0x84, 0x18, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x54, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x35b, 0x1, 0x4, 0x3f, 0xc1}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1000}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x71}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x7f, 0x8, 0x3f}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x8}]}, {0x1e, 0x6, "d6eacf31c6662cdca73034b4dd3e6ea1b09648e78afa55a33b3a"}}}]}, @TCA_CGROUP_EMATCHES={0x9bc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x124, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x3, 0x8, 0x6}, {0x4, 0x3, 0x3}}}, @TCF_EM_CONTAINER={0x74, 0x3, 0x0, 0x0, {{0x7, 0x0, 0x26}, "bc5455b957ff2cc5a83e801cad503c11ae0ad8de6bb0120667321a454fc53a20e8bae750bf2fa92cee6d207cc2d36e68b728d6ec6f185cedc677390e5772e5d742520ac39b9986cc1bb72bb8743f8896a8b49993519c7fb7c6342b1642d4ff0c6753660dcd47"}}, @TCF_EM_IPT={0x5c, 0x3, 0x0, 0x0, {{0x6, 0x9, 0x7f}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3f}, @TCA_EM_IPT_MATCH_DATA={0x2c, 0x5, "e15bdcd38bb5e97be4de7957ea78ce00d271ce1662ffb7e602100ae7a1f054e8d489adb30ef3e0d4"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb, 0x2, 'policy\x00'}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0x400}, {0x0, 0x9, 0x7270, 0x2, 0x4, 0x0, 0x1}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x9, 0x1, 0x8}, {0xfff, 0x0, 0xfff7, 0x5, 0x4, 0x2, 0x1}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x80, 0x8, 0x9}, {0x2, 0x5}}}]}, @TCA_EMATCH_TREE_LIST={0x500, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2bc, 0x1, 0x0, 0x0, {{0x1685, 0x9, 0x4}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_DATA={0xf1, 0x5, "0fd6753f83663acfd3e7bc63a5afe42693c6ecca48b75ccaf44cfe3368ab434f6ce0577959d7541b589971cbe813913914c4a76c583dec493c7571a11798b67c240e507d645db677a45383eb78bb5176402f2ed05364cd03fe4c8e5e98cb7e4891b6b129b496408df925dd489f9e9dfa5fee0e9aab605587d1ac5243427acba054d89edadbb4c1971cbcf173a6e1c748d1e5f4af8082ab1291f6ba6de7964c9a6f6d08972f060c161369eeac9893f3fc97f68f12ceb923b5a90691622ecd03dbc931a3bf608001092ba300b08bc766965c697402d11f2039d2589ac06fa1edff041b42abaf082257ccc7a7f0a1"}, @TCA_EM_IPT_MATCH_DATA={0xe3, 0x5, "ad0011d14a1ade3fa7f9f29c097285aafe848860374abf25ebea8bc383816072f5f64a9b65e515bcbc700c034b34600e5b776c3faf0a5dd797b08cd54dc705ee95c8ff1685814183b6fbe4c5d70da2ef25e49166cea51849fd5601139b5a9e653bf5335d88e97369e6eb2fa253874a17cfc1a84da18dabff9d5179a0117db176c1c523a1838b2b43a163bfdd77d19a80e65a18f59ac4bfe6ac8c1dee43a9e9b2013bb01dd9c1589219198b145a696d61d5eb873bbb0f89fbf83268a642dfe68df097e42b12fca52f325d5863fc65b0292cf9fd5fb0d6b272eed429a9353b44"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb, 0x2, 'policy\x00'}, @TCA_EM_IPT_MATCH_DATA={0xbb, 0x5, "085a6ecaeba8e717d500261ba581f576d296fcdda921eee8689e177e6ad828fc051011dc50a651557e0276ad052082c10d9756e7be393f47a809c247722b29e315d7a53a6c6475ef87c05e5e36e4280faebb44838c962e07ef96b214191839efd90b9d5343633300f993afe884595ccdef23b1b4076c2c0c40ef2371cfdde9a22f023170a5d60e96d056361a73145f871d7341ee8bdf674894c90df2d52bcf98193ffa1cfdf62cb5f4f8f13c7907d923466131103560fe"}]}}, @TCF_EM_IPT={0x110, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x2dff}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_MATCH_NAME={0xb, 0x2, 'policy\x00'}, @TCA_EM_IPT_MATCH_NAME={0xb, 0x2, 'policy\x00'}, @TCA_EM_IPT_MATCH_DATA={0xd5, 0x5, "fa52c3eb744ad48c4f85315c28f6b569a0c9fd0ed91f220942d1e133a5c5edd8ac7373e3a3696799621bec6585598f7d646f7094243cb1fb83e9a965cb55ba81db65360d0d7da6e220bbba176eb3d41e5859cca850c58002c317c3fae86ec407ae3e652cbb74fc48034ea9fdd42dd417dc87c57aa1e193303106870c2b7d383c9f048dfff3c7184ac023267c93ea5c259c0206349383dee42d276e70d9f257b8d0c47084e3c5d3333e94e8472d61461b9a1b8b9728cf8ccbc6cd7e9ec62390f31de19112e06bf3cfae9fc13ba0b4f1107a"}, @TCA_EM_IPT_MATCH_NAME={0xb, 0x2, 'policy\x00'}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x1, 0x1, 0x527b}, {0x6, 0x8, 0xd1c8, 0x1, 0x7, 0x0, 0x2}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x2, 0x7, 0x4}, {{0x2, 0x1, 0x1, 0x1}, {0x2, 0x1, 0x0, 0x1}}}}, @TCF_EM_META={0x1c, 0x3, 0x0, 0x0, {{0xef, 0x4, 0x9}, [@TCA_EM_META_LVALUE={0xf, 0x2, [@TCF_META_TYPE_VAR="d22c04a372", @TCF_META_TYPE_VAR="44a9", @TCF_META_TYPE_INT=0x8]}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x2, 0x1, 0x4}, {0x3, 0x6e, 0x8000, 0x1, 0x6, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x1f4a, 0x1, 0xffff}, {0x8001, 0x5, 0x6, 0x1, 0x2, 0x0, 0x2}}}, @TCF_EM_IPT={0x24, 0x1, 0x0, 0x0, {{0x6, 0x9, 0x80}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x44264c037709de00}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x1}]}}, @TCF_EM_IPT={0x78, 0x3, 0x0, 0x0, {{0x1ff, 0x9, 0xf1}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x40, 0x5, "63d0ad65a8c33f300cc6c529732dba623fc628c7c69c6f2f11ae898ca96d70da2db801631d8f91897b6c8f1f8fd79eee3639a9198898c7a7ad92db50"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb, 0x2, 'policy\x00'}]}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x8bc, 0x2, 0x9}, {0x3, 0x7, 0x2, "a38180ba2d55a1"}}}]}, @TCA_EMATCH_TREE_LIST={0xe0, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x50, 0x3, 0x0, 0x0, {{0x3, 0x9, 0xdd}, [@TCA_EM_IPT_MATCH_NAME={0xb, 0x2, 'policy\x00'}, @TCA_EM_IPT_MATCH_NAME={0xb, 0x2, 'policy\x00'}, @TCA_EM_IPT_MATCH_NAME={0xb, 0x2, 'policy\x00'}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x400, 0x3, 0xb3dc}, {0x20000000, 0xdef7, 0x3, 0x3}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x0, 0x3, 0x3}, {0x9, 0x8, 0x10001, 0x7}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x3}, {0x3, 0x6, 0x4}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4, 0x7, 0x81}, {{0x4}, {0x2, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x1, 0x1, 0x3f}, {0x9, 0x3, 0x1, 0x4, 0x8, 0x0, 0x1}}}, @TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0xfff, 0x4, 0x401}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x80, 0x2}, {0x0, 0x39, 0x2}}}]}}]}, @TCA_EMATCH_TREE_LIST={0x1a0, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x9, 0x0, 0x613f}}}, @TCF_EM_META={0x8c, 0x1, 0x0, 0x0, {{0x1, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xffe0, 0x81, 0x2}, {0x9, 0x0, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xa6, 0x3, 0x2}, {0xe58, 0x2, 0x2}}}, @TCA_EM_META_RVALUE={0x18, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="e4b391", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="c2e723bed14e0513d0"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x4, 0x1}, {0x3, 0x9, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1000, 0xf, 0x2}, {0xf5, 0x7f}}}, @TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_VAR="82", @TCF_META_TYPE_VAR="63d7b9e00836bc", @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_RVALUE={0x26, 0x3, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="6bc1fc0d002912459d", @TCF_META_TYPE_VAR="b9b7d94797"]}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x7, 0x7, 0x7e00}, {{0x0, 0x0, 0x1, 0x1}, {0x4, 0x1, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x7ff, 0x1, 0x3f}, {0x401, 0x1, 0x1f, 0x2, 0x6, 0x1}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x7, 0x8, 0x9}, {0xffffffffffffffff, 0x6}}}, @TCF_EM_IPT={0xc8, 0x1, 0x0, 0x0, {{0x0, 0x9, 0x8}, [@TCA_EM_IPT_MATCH_DATA={0x47, 0x5, "28a1ce1ca685d2a066e35a3f8a482cf785499adf7e5b98c12e784e563f63cd07c5eee1ee9cb7584df5113a4ca037464582153d07eeae1e790a0eeb63628a03addb96be"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x54, 0x5, "cabbab8de32459005a7a48ff05abfb9fa05a0d1e678659549daa5d25ae51837ea05df81ed4129d80c1bf4ad60cb1cc056173453a269c3e57089682e83439cde534e9b31a92b705c3889b9e96942ef15b"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}]}}]}, @TCA_EMATCH_TREE_LIST={0x104, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x3f, 0x3, 0x45b}, {0x1, 0xdf, 0x2, 0x2}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x401, 0x7, 0x1f}, {{0x2, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x8, 0x7, 0x5}, {{}, {0x3, 0x0, 0x1}}}}, @TCF_EM_IPT={0x20, 0x2, 0x0, 0x0, {{0x200, 0x9, 0x9}, [@TCA_EM_IPT_MATCH_NAME={0xb, 0x2, 'policy\x00'}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}]}}, @TCF_EM_META={0x9c, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x3ff}, [@TCA_EM_META_LVALUE={0x1c, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="faa41524ff07fdec710d", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="c36b16860cd5"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8001, 0x6}, {0x2a98, 0x5}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x21}, {0x0, 0xff, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x2f, 0x1}, {0x5, 0x6, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x8, 0x2}, {0x401, 0x3, 0x1}}}, @TCA_EM_META_RVALUE={0x21, 0x3, [@TCF_META_TYPE_VAR="5c04931f0a3c12400084", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="05", @TCF_META_TYPE_VAR="ea8e6624ab09a3e0f701"]}, @TCA_EM_META_LVALUE={0x7, 0x2, [@TCF_META_TYPE_VAR="f21d", @TCF_META_TYPE_VAR='\b']}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x81, 0x2}, {0x4, 0x5, 0x2}}}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x1]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}, @TCA_CGROUP_POLICE={0x414, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x189, 0x7f, 0x9, 0x6, 0x7, 0x1ff, 0x5, 0x80000000, 0x55f5, 0x200000, 0x1, 0x5, 0x1, 0x0, 0x3, 0x8, 0x1, 0xfff, 0xfff, 0x3ff, 0xfffff001, 0x0, 0x0, 0x8001, 0x9, 0x80000000, 0x81, 0x401, 0x9, 0xff, 0x0, 0xd4, 0x2, 0x7fff, 0x3, 0x9, 0x0, 0xa0, 0x5, 0x80, 0x0, 0x7ff, 0x1, 0x8, 0x80000000, 0x0, 0x401, 0x80, 0x32, 0x3507, 0x8, 0x9, 0xffffffff, 0x4, 0x3, 0x5e2a, 0xffffffff, 0x5, 0x80000001, 0x0, 0x4, 0x7f, 0x7, 0x0, 0xb4b, 0x0, 0x1, 0x2, 0x7, 0x9569, 0x0, 0x7, 0x20, 0x0, 0x9, 0xd08, 0x5844, 0x0, 0x10001, 0xfffeffff, 0xa27, 0x101, 0x0, 0x8, 0x2, 0x7, 0xafa, 0x1, 0x53e, 0x0, 0x9, 0x3f, 0x40, 0x4, 0x566, 0x0, 0x7, 0x47b1, 0x6, 0x8000, 0x3f, 0x8e, 0x1ff, 0x400, 0x4, 0x642d, 0x7, 0xa1c3, 0x94, 0x3, 0x9, 0x1, 0x1, 0x73, 0x7, 0x8, 0xfffff235, 0x6, 0x3, 0x3ff, 0x482, 0x4, 0x4, 0x20, 0xfffffff8, 0x6, 0x2, 0x81, 0x3, 0x7f, 0x2, 0x7, 0x4b1, 0x4480, 0x8, 0x7, 0xffff19f1, 0x401, 0x0, 0x0, 0x9, 0x0, 0xfffffff7, 0x4000, 0xfffffeff, 0x9, 0x1000, 0x8, 0x2, 0x401, 0x1, 0x6, 0x9, 0x80000001, 0xbe, 0x9, 0xffff, 0x7, 0x1, 0x1, 0x4, 0xffff, 0x20, 0x2, 0x5, 0x3, 0x8001, 0x5, 0x2, 0x200, 0x9, 0x10000, 0x9, 0x75, 0x3, 0x7438, 0x4, 0xfffffffc, 0x1, 0xb382, 0x6, 0x7, 0x2, 0x401, 0x85b, 0x56, 0x3, 0x1, 0x8, 0xfffe000, 0x7, 0x80000001, 0x6b1, 0xa8bf, 0x3ff, 0x9, 0x4, 0x2, 0x1, 0xfffffff8, 0x2e12, 0x3, 0x10001, 0x4800, 0x0, 0x9, 0x1, 0x400, 0x3, 0x20, 0x6, 0x8000, 0x0, 0x0, 0x1, 0x4, 0x3, 0x401, 0xffff, 0x9, 0x1, 0x2, 0x40, 0xc5ae, 0x4, 0x86a, 0x9, 0x10001, 0x10001, 0xfff, 0x3ff, 0xfe, 0x7ff, 0x7, 0xab4, 0x9, 0xffffffff, 0x4, 0x10000, 0x8001, 0x3, 0x661, 0x2, 0x800, 0x80000001, 0x9, 0x4, 0x7c, 0x7fffffff, 0x6, 0x2, 0x6, 0x1ff, 0x4d60, 0x3be1, 0x9]}]}, @TCA_CGROUP_ACT={0x4}]}}, @filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xe4, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xc, 0xe}}, @TCA_U32_POLICE={0xc8, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffffffffffff, 0x6, 0x9, 0x1, {0x1, 0x0, 0xc8b, 0x904, 0x2b, 0x4}, {0x1, 0x1, 0x0, 0x5, 0x1f}, 0x5, 0xfffffffb, 0x2}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x3, 0x92, 0x4, 0x100, {0x9, 0x1, 0x5, 0x7, 0x1ff, 0x1}, {0x73, 0x1, 0x2, 0x3, 0x400, 0x2}, 0x1, 0x1f, 0x1000}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffe, 0x0, 0xff, 0x81, 0x1, {0x2, 0x1, 0xdf9, 0x800, 0x3, 0x3}, {0x2, 0x2, 0x4, 0x2, 0x5, 0xe4000000}, 0x5, 0x100, 0x1}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffff9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]}, @TCA_U32_CLASSID={0x8, 0x1, {0xffff, 0x8}}, @TCA_U32_HASH={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x81}}]}, 0x3880}, 0x1, 0x0, 0x0, 0x4000085}, 0x4c000) 03:08:20 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b6c, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="b440e7fd1bd1f6c5c6452b6c2339eb976f66b6c1d4f5292eae818d9c7e7a74a6deaa842aa35f3e893d4ea5868800122d55f66b78f3516beafbdd04888d713502c81e30558debd750a073494216900b50796f7b346ae61c8318ec5bceb9b516e2239e565fe7b7fc1edf8ec2cca08b084c8d22a6829b1bb24bac70029cdd741ec875378c7084fa25f1156d4097f58382b15a56cdbd94657d2aacc7e2a7231c294b34bae1a3713e8c04076371866e6e914394ad1d997deabdb6302be6662a14cd497740294a4519634e4a9e0a5d4ac6d89667b4087b800118fb8cf9c4fedc650c55696bdf2224311671ea4f8f71e8191b521abfdd1e5de98ad464101f7c178c35e7f76516da2d62bb2dc2440387913265ae8375c16d6337824cac794c5e8c99cad411073ed6ba700c69f55d9ad939958cdb7bbc9943904a1f5b56ac76556fd21bb4c58caca520b676ffbc49f200fd993026dbd48ef09cd4fbc012a7df91307ce210b2ea311e36c1a87ed68e782ba4a185a1b635d05d4ac1b34ad015dd022ad61f7feebbd450f5a07ee6f62b03e3bd7e7d50e96ecef6e30bc2a40377e021e459bdbf94f400854f21a2259215241c6bf4a1e436193509e27ac57c6518e42df7eab2a73ffcd785ee14821efeb96e878efd3b88120c7778e9f422c618e0614dd5ea79ea06d5c3e88ba397dd3b96171d77ef143a09d1d93bb44795c845a7271e1f1894c97cbedefcc53cedafe1dc004221dc4b451c09b93676d02cca15d7cd385d8e6bbb0d2b4f86a543d6e21af84760141347508e4da8611936cff6f2c84b2faf53434c55765849fd7858add5de4fea0ec98dc5b527a8677a66b70db0ebeb56bbfeaae567c3d1aac1929ac1053d1403cb1c14517769ac05145ff05700632af7a51848634b3b5f74bd894bf099769c65033c0475765934c7a1618b7ac3fbb39154f381466f1ac45ce2ba5c63184cb9f7b2f0aa372e10286b6c6ca4bb11eee3ded181d7c4838d791dc1df98a40b28e485b8ff373fc9e67f73a0a15f2f8e00554bfcacc5b0bf9f7cfb720ee63733597756d1579bd440d393574d08cd44a51d3d3a39a03b48f4ea754b7a404c9d2bb62e968cb05b297699585be683f21edbc7422a56ee26c3864553ff4fd91f7668203417fe3625d36f16a6d088bd3e62dbdff723c52069b0bc6e70cd9330a8ba46823a3349cba55e0b3394b633874dbdbdf45a677744b1842acc02d6ca35937951b3727d8920ac2e5a283035e144df463a529ca09d96f02659b640677620c8e5b49a3d648c32f3c31fe57eefbfdde5a19d10cb0c381ef1c90222fe557e186047c3b5fbb02a841a5d1afd0a6031dd7b6e0bf7dee97494015d22602f5e2c14ea7b498a1a877f57228dfa54eac4de742a69bae82a0e5bd87f25fb9e3675131f87565a92e312ca7afdaf1f8e95600735b2e9ae147b5bb08f162f"}) 03:08:20 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x5606, 0x744000) 03:08:20 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x40086602, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:20 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b6c, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:20 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) sendfile(r1, r3, &(0x7f0000000040)=0xfffffffffffffffc, 0x9) setresgid(0x0, 0x0, 0x0) setfsgid(0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280)=0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x40}, 0x0, 0x0, 0x6, 0x0, 0x5, 0x4, 0x7, 0xce, 0x7fff, 0x6, 0xffffffffffffffff, r4}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r1, r3) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) bind$isdn_base(r6, &(0x7f0000000100)={0x22, 0x85, 0x8, 0x5, 0x3}, 0x6) [ 3322.234688] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 03:08:20 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x5607, 0x744000) 03:08:20 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x40087602, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:20 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b6c, 0x0) [ 3322.353758] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3322.365416] binder: 30628:30635 ioctl 4020ae46 7fda76f58510 returned -22 03:08:20 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) accept$nfc_llcp(r2, &(0x7f0000000080), &(0x7f0000000100)=0x60) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) [ 3322.415541] binder: 30628:30635 ioctl 4020ae46 7fda76f58510 returned -22 03:08:20 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x5608, 0x744000) 03:08:20 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b6c, 0x0) 03:08:20 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4020940d, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:20 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) write$P9_ROPEN(r3, &(0x7f00000001c0)={0x18, 0x71, 0x2, {{0x0, 0x3, 0x4}, 0x8}}, 0x18) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r8 = syz_open_dev$binderN(0x0, 0x0, 0x0) r9 = dup2(r8, r7) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x5c, r11, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback={0x2}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}]}, 0x5c}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r11, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x101}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x400}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, &(0x7f0000000040)={{0x2, 0x0, @identifier="4ac8c510eaf807f355109c88ddb4b915"}}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 03:08:21 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x5609, 0x744000) 03:08:21 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$TIOCL_GETSHIFTSTATE(r2, 0x541c, &(0x7f0000000040)={0x6, 0x2}) 03:08:21 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b6c, 0x0) [ 3322.637748] binder: 30657:30660 ioctl 4020ae46 7fda76f58510 returned -22 03:08:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x80045432, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="b440e7fd1bd1f6c5c6452b6c2339eb976f66b6c1d4f5292eae818d9c7e7a74a6deaa842aa35f3e893d4ea5868800122d55f66b78f3516beafbdd04888d713502c81e30558debd750a073494216900b50796f7b346ae61c8318ec5bceb9b516e2239e565fe7b7fc1edf8ec2cca08b084c8d22a6829b1bb24bac70029cdd741ec875378c7084fa25f1156d4097f58382b15a56cdbd94657d2aacc7e2a7231c294b34bae1a3713e8c04076371866e6e914394ad1d997deabdb6302be6662a14cd497740294a4519634e4a9e0a5d4ac6d89667b4087b800118fb8cf9c4fedc650c55696bdf2224311671ea4f8f71e8191b521abfdd1e5de98ad464101f7c178c35e7f76516da2d62bb2dc2440387913265ae8375c16d6337824cac794c5e8c99cad411073ed6ba700c69f55d9ad939958cdb7bbc9943904a1f5b56ac76556fd21bb4c58caca520b676ffbc49f200fd993026dbd48ef09cd4fbc012a7df91307ce210b2ea311e36c1a87ed68e782ba4a185a1b635d05d4ac1b34ad015dd022ad61f7feebbd450f5a07ee6f62b03e3bd7e7d50e96ecef6e30bc2a40377e021e459bdbf94f400854f21a2259215241c6bf4a1e436193509e27ac57c6518e42df7eab2a73ffcd785ee14821efeb96e878efd3b88120c7778e9f422c618e0614dd5ea79ea06d5c3e88ba397dd3b96171d77ef143a09d1d93bb44795c845a7271e1f1894c97cbedefcc53cedafe1dc004221dc4b451c09b93676d02cca15d7cd385d8e6bbb0d2b4f86a543d6e21af84760141347508e4da8611936cff6f2c84b2faf53434c55765849fd7858add5de4fea0ec98dc5b527a8677a66b70db0ebeb56bbfeaae567c3d1aac1929ac1053d1403cb1c14517769ac05145ff05700632af7a51848634b3b5f74bd894bf099769c65033c0475765934c7a1618b7ac3fbb39154f381466f1ac45ce2ba5c63184cb9f7b2f0aa372e10286b6c6ca4bb11eee3ded181d7c4838d791dc1df98a40b28e485b8ff373fc9e67f73a0a15f2f8e00554bfcacc5b0bf9f7cfb720ee63733597756d1579bd440d393574d08cd44a51d3d3a39a03b48f4ea754b7a404c9d2bb62e968cb05b297699585be683f21edbc7422a56ee26c3864553ff4fd91f7668203417fe3625d36f16a6d088bd3e62dbdff723c52069b0bc6e70cd9330a8ba46823a3349cba55e0b3394b633874dbdbdf45a677744b1842acc02d6ca35937951b3727d8920ac2e5a283035e144df463a529ca09d96f02659b640677620c8e5b49a3d648c32f3c31fe57eefbfdde5a19d10cb0c381ef1c90222fe557e186047c3b5fbb02a841a5d1afd0a6031dd7b6e0bf7dee97494015d22602f5e2c14ea7b498a1a877f57228dfa54eac4de742a69bae82a0e5bd87f25fb9e3675131f87565a92e312ca7afdaf1f8e95600735b2e9ae147b5bb08f162f"}) [ 3322.680767] binder: 30657:30660 ioctl 4020ae46 7fda76f58510 returned -22 03:08:21 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x560a, 0x744000) [ 3322.724540] binder: 30657:30660 ioctl 4020ae46 7fda76f58510 returned -22 [ 3322.736743] binder: 30657:30666 ioctl c0406618 20000040 returned -22 [ 3322.745389] binder: 30662:30668 ioctl 541c 20000040 returned -22 [ 3322.757859] binder: 30657:30660 ioctl 4020ae46 7fda76f58510 returned -22 03:08:21 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b6c, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:21 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000040)={0x80000000, 0x81a, 0x0, 'queue1\x00', 0x3}) [ 3322.803745] binder: 30657:30660 ioctl 4020ae46 7fda76f58510 returned -22 03:08:21 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x560b, 0x744000) 03:08:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x80045440, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="b440e7fd1bd1f6c5c6452b6c2339eb976f66b6c1d4f5292eae818d9c7e7a74a6deaa842aa35f3e893d4ea5868800122d55f66b78f3516beafbdd04888d713502c81e30558debd750a073494216900b50796f7b346ae61c8318ec5bceb9b516e2239e565fe7b7fc1edf8ec2cca08b084c8d22a6829b1bb24bac70029cdd741ec875378c7084fa25f1156d4097f58382b15a56cdbd94657d2aacc7e2a7231c294b34bae1a3713e8c04076371866e6e914394ad1d997deabdb6302be6662a14cd497740294a4519634e4a9e0a5d4ac6d89667b4087b800118fb8cf9c4fedc650c55696bdf2224311671ea4f8f71e8191b521abfdd1e5de98ad464101f7c178c35e7f76516da2d62bb2dc2440387913265ae8375c16d6337824cac794c5e8c99cad411073ed6ba700c69f55d9ad939958cdb7bbc9943904a1f5b56ac76556fd21bb4c58caca520b676ffbc49f200fd993026dbd48ef09cd4fbc012a7df91307ce210b2ea311e36c1a87ed68e782ba4a185a1b635d05d4ac1b34ad015dd022ad61f7feebbd450f5a07ee6f62b03e3bd7e7d50e96ecef6e30bc2a40377e021e459bdbf94f400854f21a2259215241c6bf4a1e436193509e27ac57c6518e42df7eab2a73ffcd785ee14821efeb96e878efd3b88120c7778e9f422c618e0614dd5ea79ea06d5c3e88ba397dd3b96171d77ef143a09d1d93bb44795c845a7271e1f1894c97cbedefcc53cedafe1dc004221dc4b451c09b93676d02cca15d7cd385d8e6bbb0d2b4f86a543d6e21af84760141347508e4da8611936cff6f2c84b2faf53434c55765849fd7858add5de4fea0ec98dc5b527a8677a66b70db0ebeb56bbfeaae567c3d1aac1929ac1053d1403cb1c14517769ac05145ff05700632af7a51848634b3b5f74bd894bf099769c65033c0475765934c7a1618b7ac3fbb39154f381466f1ac45ce2ba5c63184cb9f7b2f0aa372e10286b6c6ca4bb11eee3ded181d7c4838d791dc1df98a40b28e485b8ff373fc9e67f73a0a15f2f8e00554bfcacc5b0bf9f7cfb720ee63733597756d1579bd440d393574d08cd44a51d3d3a39a03b48f4ea754b7a404c9d2bb62e968cb05b297699585be683f21edbc7422a56ee26c3864553ff4fd91f7668203417fe3625d36f16a6d088bd3e62dbdff723c52069b0bc6e70cd9330a8ba46823a3349cba55e0b3394b633874dbdbdf45a677744b1842acc02d6ca35937951b3727d8920ac2e5a283035e144df463a529ca09d96f02659b640677620c8e5b49a3d648c32f3c31fe57eefbfdde5a19d10cb0c381ef1c90222fe557e186047c3b5fbb02a841a5d1afd0a6031dd7b6e0bf7dee97494015d22602f5e2c14ea7b498a1a877f57228dfa54eac4de742a69bae82a0e5bd87f25fb9e3675131f87565a92e312ca7afdaf1f8e95600735b2e9ae147b5bb08f162f"}) [ 3322.855160] binder: 30657:30660 ioctl 4020ae46 7fda76f58510 returned -22 03:08:21 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b6c, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)="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"}) [ 3322.904677] binder: 30657:30660 ioctl 4020ae46 7fda76f58510 returned -22 03:08:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x80086601, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3322.963728] binder: 30657:30660 ioctl 4020ae46 7fda76f58510 returned -22 [ 3323.022878] binder: 30657:30660 ioctl 4020ae46 7fda76f58510 returned -22 [ 3323.043088] binder: 30657:30660 ioctl 4020ae46 7fda76f58510 returned -22 [ 3323.072447] binder: 30657:30660 ioctl 4020ae46 7fda76f58510 returned -22 [ 3323.095624] binder: 30657:30660 ioctl 4020ae46 7fda76f58510 returned -22 [ 3323.120815] binder: 30657:30660 ioctl 4020ae46 7fda76f58510 returned -22 [ 3323.168290] binder: 30657:30660 ioctl 4020ae46 7fda76f58510 returned -22 [ 3323.179021] binder: 30657:30660 ioctl 4020ae46 7fda76f58510 returned -22 [ 3323.202994] binder: 30657:30660 ioctl 4020ae46 7fda76f58510 returned -22 [ 3323.224913] binder: 30657:30660 ioctl 4020ae46 7fda76f58510 returned -22 [ 3323.246101] binder: 30657:30660 ioctl 4020ae46 7fda76f58510 returned -22 [ 3323.274234] binder: 30657:30660 ioctl 4020ae46 7fda76f58510 returned -22 [ 3323.286765] binder: 30657:30660 ioctl 4020ae46 7fda76f58510 returned -22 [ 3323.295573] binder: 30657:30660 ioctl 4020ae46 7fda76f58510 returned -22 [ 3323.307978] binder: 30657:30660 ioctl 4020ae46 7fda76f58510 returned -22 [ 3323.315870] binder: 30657:30660 ioctl 4020ae46 7fda76f58510 returned -22 03:08:21 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 03:08:21 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x560c, 0x744000) [ 3323.330527] binder: 30657:30660 ioctl 4020ae46 7fda76f58510 returned -22 [ 3323.337919] binder: 30657:30660 ioctl 4020ae46 7fda76f58530 returned -22 03:08:21 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b6c, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)="b440e7fd1bd1f6c5c6452b6c2339eb976f66b6c1d4f5292eae818d9c7e7a74a6deaa842aa35f3e893d4ea5868800122d55f66b78f3516beafbdd04888d713502c81e30558debd750a073494216900b50796f7b346ae61c8318ec5bceb9b516e2239e565fe7b7fc1edf8ec2cca08b084c8d22a6829b1bb24bac70029cdd741ec875378c7084fa25f1156d4097f58382b15a56cdbd94657d2aacc7e2a7231c294b34bae1a3713e8c04076371866e6e914394ad1d997deabdb6302be6662a14cd497740294a4519634e4a9e0a5d4ac6d89667b4087b800118fb8cf9c4fedc650c55696bdf2224311671ea4f8f71e8191b521abfdd1e5de98ad464101f7c178c35e7f76516da2d62bb2dc2440387913265ae8375c16d6337824cac794c5e8c99cad411073ed6ba700c69f55d9ad939958cdb7bbc9943904a1f5b56ac76556fd21bb4c58caca520b676ffbc49f200fd993026dbd48ef09cd4fbc012a7df91307ce210b2ea311e36c1a87ed68e782ba4a185a1b635d05d4ac1b34ad015dd022ad61f7feebbd450f5a07ee6f62b03e3bd7e7d50e96ecef6e30bc2a40377e021e459bdbf94f400854f21a2259215241c6bf4a1e436193509e27ac57c6518e42df7eab2a73ffcd785ee14821efeb96e878efd3b88120c7778e9f422c618e0614dd5ea79ea06d5c3e88ba397dd3b96171d77ef143a09d1d93bb44795c845a7271e1f1894c97cbedefcc53cedafe1dc004221dc4b451c09b93676d02cca15d7cd385d8e6bbb0d2b4f86a543d6e21af84760141347508e4da8611936cff6f2c84b2faf53434c55765849fd7858add5de4fea0ec98dc5b527a8677a66b70db0ebeb56bbfeaae567c3d1aac1929ac1053d1403cb1c14517769ac05145ff05700632af7a51848634b3b5f74bd894bf099769c65033c0475765934c7a1618b7ac3fbb39154f381466f1ac45ce2ba5c63184cb9f7b2f0aa372e10286b6c6ca4bb11eee3ded181d7c4838d791dc1df98a40b28e485b8ff373fc9e67f73a0a15f2f8e00554bfcacc5b0bf9f7cfb720ee63733597756d1579bd440d393574d08cd44a51d3d3a39a03b48f4ea754b7a404c9d2bb62e968cb05b297699585be683f21edbc7422a56ee26c3864553ff4fd91f7668203417fe3625d36f16a6d088bd3e62dbdff723c52069b0bc6e70cd9330a8ba46823a3349cba55e0b3394b633874dbdbdf45a677744b1842acc02d6ca35937951b3727d8920ac2e5a283035e144df463a529ca09d96f02659b640677620c8e5b49a3d648c32f3c31fe57eefbfdde5a19d10cb0c381ef1c90222fe557e186047c3b5fbb02a841a5d1afd0a6031dd7b6e0bf7dee97494015d22602f5e2c14ea7b498a1a877f57228dfa54eac4de742a69bae82a0e5bd87f25fb9e3675131f87565a92e312ca7afdaf1f8e95600735b2e9ae147b5bb08f162f"}) 03:08:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x80087601, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:21 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0x405, 0x0, 0x0, {0x7e}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000080)={0x694, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0x1}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x2}, @NL80211_ATTR_BEACON_HEAD={0x257, 0xe, "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"}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x6}, @NL80211_ATTR_HIDDEN_SSID={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}, @NL80211_ATTR_TX_RATES={0x400, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x24, 0x0, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, "c4b4ecfb88290c1f1453deeacfde4514fef6bff56df21670e9"}]}, @NL80211_BAND_60GHZ={0xc4, 0x2, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, "6c74a87ef4fe"}, @NL80211_TXRATE_LEGACY={0xa, 0x1, "45b491a447b7"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xd43, 0x6, 0x2, 0x5, 0x6, 0x1, 0xfffe]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x3ff, 0x8000, 0x8, 0x800, 0x7, 0xa09, 0x1]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, "2e74b54f5b8407703e7a7854985a63ecd8c0f551883ba9516294ca"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, "1e3902374f5cff0c3b938c"}, @NL80211_TXRATE_HT={0x3e, 0x2, "f073843448b11e35700ef6f4a931dd21718e654a537eee47529dfa2065c712624d8f1382b3b842228f4a75fa911d9dc071950c10536d215e5cfe"}]}, @NL80211_BAND_5GHZ={0x100, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x4, 0x7, 0x2, 0xc1c, 0xac, 0x0, 0xc000]}}, @NL80211_TXRATE_HT={0x30, 0x2, "5b138114faae622ba8e91e73e58e84a5fa05980fb0666f7f91568b5c5682bd985ffc9f688bff9acf41cfd81d"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, "0885c1378f0e3b92bda4b50ce1a6cbd027072cd69a770db52b7b38"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x4d, 0x2, "0cc9d90a88a250b91abbaa080aa11e1ac71b26c182044d93d38c4b1792d33d6a749d5a51e62dd65ef55dbb47a089de3047601b1e7116535f11bf15f2d232ec5e4911bcf86c1f0420f1"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7f, 0x6, 0x3f, 0x36c, 0x3, 0x0, 0x8000]}}, @NL80211_TXRATE_HT={0x21, 0x2, "2ee4523a06cb243173460f7965bfac39e4a35dcb73b9e9ebd373f8e41d"}]}, @NL80211_BAND_2GHZ={0x104, 0x0, [@NL80211_TXRATE_HT={0x40, 0x2, "321663fce33d8d340e02401578c76487e385439b67f8af7f9a1d8608d3ffec2f4ab5a1c0b25b9060ec5fc939313c4cc6ac52ce81402dc2057a6e9ce0"}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, "a22450d218ba089e723429323504da71733283b5f6fddd08"}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, "8b14c196e18706e45b85ccd3d12708e0048f48279a88"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x100, 0x1, 0x5, 0x3, 0x8, 0x1, 0x9]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, "395d9cc4891091c682f0f8b114ec22a9d79e9e209a0f3b98645957"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0x1fc0, 0x7, 0x5, 0x8, 0xe5]}}, @NL80211_TXRATE_HT={0x37, 0x2, "c148fc6e872b3b06ac0be83da5bb60e1fa7b7a18ca9f37c258e2350a90f8ae44bed1ae8d89f7878e86c1f9e301c62c16059812"}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, [@NL80211_TXRATE_HT={0x37, 0x2, "5a16b6383fc1cb9ca03d342643817a7c9374d5229b3807f91523394a817be6b18791a80ec1b9aad4770c41331c667d6e5f845c"}]}, @NL80211_BAND_6GHZ={0xc8, 0x3, [@NL80211_TXRATE_HT={0x49, 0x2, "262b5ee9012ff7871044100bb67ddf666fdcc99b25c44354bb173e44e6d0789aca5006308fe42f346595d7a35e153af75baf0b43616f881c6c5e79ff9d462675ce11b3e180"}, @NL80211_TXRATE_HT={0x33, 0x2, "c49ebac5e21d14892c37e5a3c59939b55759b8aae211e3d86627102dfe0ce5de2bca2be3f9e20aeb760437c6fa94c6"}, @NL80211_TXRATE_HT={0x44, 0x2, "7b7b7a7b9b615f6bee0498332aaa0f433a77d450aa076d600bdd0a434922bc2fc251ee24499313ca9ba034709c96a051b202380531e8d1302d51f0de353cccf8"}]}, @NL80211_BAND_2GHZ={0xc, 0x0, [@NL80211_TXRATE_GI={0x5, 0x4, 0x6812563238632515}]}]}]}, 0x694}, 0x1, 0x0, 0x0, 0x44010}, 0x1) 03:08:21 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x52, 0x0, &(0x7f0000000140)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000000)={0x0, 0x0, 0xfc01}) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) r7 = dup2(r6, r5) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) r8 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r9 = syz_open_dev$binderN(0x0, 0x0, 0x0) r10 = dup2(r9, r8) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r10, 0xc010640b, &(0x7f0000000100)={r4, r11, 0x80}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000040)={0x0, r12}) ioctl$KDSETMODE(r0, 0x4b71, 0x0) 03:08:21 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x560d, 0x744000) [ 3323.467309] binder: 30702:30706 unknown command 0 [ 3323.474212] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3323.481884] binder: 30700:30708 ioctl 4020ae46 7fda76f58510 returned -22 [ 3323.497396] binder: 30702:30706 ioctl c0306201 200000c0 returned -22 03:08:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0xc0045878, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:21 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b6c, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)="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"}) [ 3323.522836] binder: 30702:30709 ioctl c008640a 20000180 returned -22 [ 3323.541439] binder: 30700:30708 ioctl 4020ae46 7fda76f58510 returned -22 [ 3323.569404] binder: 30702:30706 ioctl c010640b 20000100 returned -22 [ 3323.588048] binder: 30702:30706 ioctl c008640a 20000040 returned -22 [ 3323.605749] binder: 30700:30708 ioctl 4020ae46 7fda76f58510 returned -22 03:08:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x560e, 0x744000) [ 3323.639143] binder: 30702:30709 unknown command 0 [ 3323.644653] binder: 30702:30709 ioctl c0306201 200000c0 returned -22 [ 3323.653308] binder: 30700:30708 ioctl 4020ae46 7fda76f58510 returned -22 03:08:22 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) chmod(&(0x7f0000000040)='./file0\x00', 0x81) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x81}], 0x1, 0x21, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) mlockall(0x5) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r5, &(0x7f00000017c0), 0x16f, 0x800000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e6373403415950e1aee3e9dc6ee4ca27820b0c8b2c9818a7800aadc496c0bcdb046d82d104cafb9e2458292a800f36f9078d6fd490ebfd81c479bde407cc8b72dbed005aeac55ebd3201f22b61ecfd0fb00"/110], 0x0, 0x0, 0x0}) getsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f00000000c0)=0x10000040, &(0x7f0000000100)=0x4) chmod(&(0x7f0000000080)='./file0\x00', 0xc0) 03:08:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0xc0045878, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3323.682395] binder: 30700:30708 ioctl 4020ae46 7fda76f58510 returned -22 [ 3323.706374] binder: 30702:30709 ioctl c008640a 20000180 returned -22 [ 3323.711621] binder: 30700:30708 ioctl 4020ae46 7fda76f58510 returned -22 [ 3323.751709] binder: 30702:30706 ioctl c010640b 20000100 returned -22 [ 3323.751729] binder: 30702:30722 ioctl c008640a 20000040 returned -22 [ 3323.767736] binder: 30700:30708 ioctl 4020ae46 7fda76f58510 returned -22 [ 3323.813398] binder: 30700:30708 ioctl 4020ae46 7fda76f58510 returned -22 [ 3323.851721] binder: 30700:30708 ioctl 4020ae46 7fda76f58510 returned -22 [ 3323.872400] binder: 30700:30708 ioctl 4020ae46 7fda76f58510 returned -22 [ 3323.895583] binder: 30700:30708 ioctl 4020ae46 7fda76f58510 returned -22 [ 3323.924941] binder: 30700:30708 ioctl 4020ae46 7fda76f58510 returned -22 [ 3323.943209] binder: 30725:30729 unknown command 1081303822 [ 3323.955192] binder: 30725:30729 ioctl c0306201 200000c0 returned -22 [ 3323.963226] binder: 30700:30708 ioctl 4020ae46 7fda76f58510 returned -22 [ 3323.986869] binder: 30700:30708 ioctl 4020ae46 7fda76f58510 returned -22 [ 3324.012599] binder: 30700:30708 ioctl 4020ae46 7fda76f58510 returned -22 [ 3324.034821] binder: 30700:30708 ioctl 4020ae46 7fda76f58510 returned -22 [ 3324.056263] binder: 30700:30708 ioctl 4020ae46 7fda76f58510 returned -22 [ 3324.083076] binder: 30700:30708 ioctl 4020ae46 7fda76f58510 returned -22 [ 3324.103348] binder: 30700:30708 ioctl 4020ae46 7fda76f58510 returned -22 [ 3324.130438] binder: 30725:30729 unknown command 1081303822 [ 3324.140652] binder: 30725:30729 ioctl c0306201 200000c0 returned -22 [ 3324.149957] binder: 30700:30708 ioctl 4020ae46 7fda76f58510 returned -22 [ 3324.157261] binder: 30700:30708 ioctl 4020ae46 7fda76f58510 returned -22 [ 3324.174871] binder: 30700:30708 ioctl 4020ae46 7fda76f58510 returned -22 [ 3324.196617] binder: 30700:30708 ioctl 4020ae46 7fda76f58510 returned -22 [ 3324.219199] binder: 30700:30708 ioctl 4020ae46 7fda76f58510 returned -22 03:08:22 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xd0) r3 = dup2(r1, r0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 03:08:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b6c, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0}) 03:08:22 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x8) ioctl$KDSETMODE(r0, 0x4b71, 0x0) 03:08:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0xc0189436, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3324.235955] binder: 30700:30708 ioctl 4020ae46 7fda76f58530 returned -22 [ 3324.352808] binder: 30748:30754 ioctl 2287 20000000 returned -22 [ 3324.372512] binder: 30750:30755 ioctl 4020ae46 7fda76f58510 returned -22 [ 3324.374532] binder: 30748:30754 ioctl 2287 20000000 returned -22 [ 3324.384011] binder: 30750:30755 ioctl 4020ae46 7fda76f58510 returned -22 03:08:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0xc020660b, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="b440e7fd1bd1f6c5c6452b6c2339eb976f66b6c1d4f5292eae818d9c7e7a74a6deaa842aa35f3e893d4ea5868800122d55f66b78f3516beafbdd04888d713502c81e30558debd750a073494216900b50796f7b346ae61c8318ec5bceb9b516e2239e565fe7b7fc1edf8ec2cca08b084c8d22a6829b1bb24bac70029cdd741ec875378c7084fa25f1156d4097f58382b15a56cdbd94657d2aacc7e2a7231c294b34bae1a3713e8c04076371866e6e914394ad1d997deabdb6302be6662a14cd497740294a4519634e4a9e0a5d4ac6d89667b4087b800118fb8cf9c4fedc650c55696bdf2224311671ea4f8f71e8191b521abfdd1e5de98ad464101f7c178c35e7f76516da2d62bb2dc2440387913265ae8375c16d6337824cac794c5e8c99cad411073ed6ba700c69f55d9ad939958cdb7bbc9943904a1f5b56ac76556fd21bb4c58caca520b676ffbc49f200fd993026dbd48ef09cd4fbc012a7df91307ce210b2ea311e36c1a87ed68e782ba4a185a1b635d05d4ac1b34ad015dd022ad61f7feebbd450f5a07ee6f62b03e3bd7e7d50e96ecef6e30bc2a40377e021e459bdbf94f400854f21a2259215241c6bf4a1e436193509e27ac57c6518e42df7eab2a73ffcd785ee14821efeb96e878efd3b88120c7778e9f422c618e0614dd5ea79ea06d5c3e88ba397dd3b96171d77ef143a09d1d93bb44795c845a7271e1f1894c97cbedefcc53cedafe1dc004221dc4b451c09b93676d02cca15d7cd385d8e6bbb0d2b4f86a543d6e21af84760141347508e4da8611936cff6f2c84b2faf53434c55765849fd7858add5de4fea0ec98dc5b527a8677a66b70db0ebeb56bbfeaae567c3d1aac1929ac1053d1403cb1c14517769ac05145ff05700632af7a51848634b3b5f74bd894bf099769c65033c0475765934c7a1618b7ac3fbb39154f381466f1ac45ce2ba5c63184cb9f7b2f0aa372e10286b6c6ca4bb11eee3ded181d7c4838d791dc1df98a40b28e485b8ff373fc9e67f73a0a15f2f8e00554bfcacc5b0bf9f7cfb720ee63733597756d1579bd440d393574d08cd44a51d3d3a39a03b48f4ea754b7a404c9d2bb62e968cb05b297699585be683f21edbc7422a56ee26c3864553ff4fd91f7668203417fe3625d36f16a6d088bd3e62dbdff723c52069b0bc6e70cd9330a8ba46823a3349cba55e0b3394b633874dbdbdf45a677744b1842acc02d6ca35937951b3727d8920ac2e5a283035e144df463a529ca09d96f02659b640677620c8e5b49a3d648c32f3c31fe57eefbfdde5a19d10cb0c381ef1c90222fe557e186047c3b5fbb02a841a5d1afd0a6031dd7b6e0bf7dee97494015d22602f5e2c14ea7b498a1a877f57228dfa54eac4de742a69bae82a0e5bd87f25fb9e3675131f87565a92e312ca7afdaf1f8e95600735b2e9ae147b5bb08f162f"}) 03:08:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x5602, 0x744000) [ 3324.405889] binder: 30750:30755 ioctl 4020ae46 7fda76f58510 returned -22 [ 3324.413886] binder: 30750:30755 ioctl 4020ae46 7fda76f58510 returned -22 [ 3324.430169] binder: 30750:30755 ioctl 4020ae46 7fda76f58510 returned -22 03:08:22 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b71, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$USBDEVFS_BULK(r3, 0xc0185502, &(0x7f0000001000)={{{0xe, 0x1}}, 0x1000, 0x0, &(0x7f0000000000)="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"}) [ 3324.451152] binder: 30750:30755 ioctl 4020ae46 7fda76f58510 returned -22 [ 3324.484704] binder: 30750:30755 ioctl 4020ae46 7fda76f58510 returned -22 [ 3324.513224] binder: 30750:30755 ioctl 4020ae46 7fda76f58510 returned -22 03:08:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="b440e7fd1bd1f6c5c6452b6c2339eb976f66b6c1d4f5292eae818d9c7e7a74a6deaa842aa35f3e893d4ea5868800122d55f66b78f3516beafbdd04888d713502c81e30558debd750a073494216900b50796f7b346ae61c8318ec5bceb9b516e2239e565fe7b7fc1edf8ec2cca08b084c8d22a6829b1bb24bac70029cdd741ec875378c7084fa25f1156d4097f58382b15a56cdbd94657d2aacc7e2a7231c294b34bae1a3713e8c04076371866e6e914394ad1d997deabdb6302be6662a14cd497740294a4519634e4a9e0a5d4ac6d89667b4087b800118fb8cf9c4fedc650c55696bdf2224311671ea4f8f71e8191b521abfdd1e5de98ad464101f7c178c35e7f76516da2d62bb2dc2440387913265ae8375c16d6337824cac794c5e8c99cad411073ed6ba700c69f55d9ad939958cdb7bbc9943904a1f5b56ac76556fd21bb4c58caca520b676ffbc49f200fd993026dbd48ef09cd4fbc012a7df91307ce210b2ea311e36c1a87ed68e782ba4a185a1b635d05d4ac1b34ad015dd022ad61f7feebbd450f5a07ee6f62b03e3bd7e7d50e96ecef6e30bc2a40377e021e459bdbf94f400854f21a2259215241c6bf4a1e436193509e27ac57c6518e42df7eab2a73ffcd785ee14821efeb96e878efd3b88120c7778e9f422c618e0614dd5ea79ea06d5c3e88ba397dd3b96171d77ef143a09d1d93bb44795c845a7271e1f1894c97cbedefcc53cedafe1dc004221dc4b451c09b93676d02cca15d7cd385d8e6bbb0d2b4f86a543d6e21af84760141347508e4da8611936cff6f2c84b2faf53434c55765849fd7858add5de4fea0ec98dc5b527a8677a66b70db0ebeb56bbfeaae567c3d1aac1929ac1053d1403cb1c14517769ac05145ff05700632af7a51848634b3b5f74bd894bf099769c65033c0475765934c7a1618b7ac3fbb39154f381466f1ac45ce2ba5c63184cb9f7b2f0aa372e10286b6c6ca4bb11eee3ded181d7c4838d791dc1df98a40b28e485b8ff373fc9e67f73a0a15f2f8e00554bfcacc5b0bf9f7cfb720ee63733597756d1579bd440d393574d08cd44a51d3d3a39a03b48f4ea754b7a404c9d2bb62e968cb05b297699585be683f21edbc7422a56ee26c3864553ff4fd91f7668203417fe3625d36f16a6d088bd3e62dbdff723c52069b0bc6e70cd9330a8ba46823a3349cba55e0b3394b633874dbdbdf45a677744b1842acc02d6ca35937951b3727d8920ac2e5a283035e144df463a529ca09d96f02659b640677620c8e5b49a3d648c32f3c31fe57eefbfdde5a19d10cb0c381ef1c90222fe557e186047c3b5fbb02a841a5d1afd0a6031dd7b6e0bf7dee97494015d22602f5e2c14ea7b498a1a877f57228dfa54eac4de742a69bae82a0e5bd87f25fb9e3675131f87565a92e312ca7afdaf1f8e95600735b2e9ae147b5bb08f162f"}) 03:08:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x560f, 0x744000) 03:08:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x5602, 0x744000) [ 3324.556611] binder: 30750:30755 ioctl 4020ae46 7fda76f58510 returned -22 [ 3324.572163] binder: 30761:30766 ioctl c0185502 20001000 returned -22 [ 3324.577972] binder: 30750:30755 ioctl 4020ae46 7fda76f58510 returned -22 [ 3324.593515] binder: 30750:30755 ioctl 4020ae46 7fda76f58510 returned -22 03:08:22 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000040)) [ 3324.601379] binder: 30750:30755 ioctl 4020ae46 7fda76f58510 returned -22 [ 3324.616879] binder: 30750:30755 ioctl 4020ae46 7fda76f58510 returned -22 [ 3324.635966] binder: 30761:30771 ioctl c0185502 20001000 returned -22 [ 3324.665927] binder: 30750:30755 ioctl 4020ae46 7fda76f58510 returned -22 03:08:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x2, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3324.714990] binder: 30750:30755 ioctl 4020ae46 7fda76f58510 returned -22 [ 3324.760141] binder: 30750:30755 ioctl 4020ae46 7fda76f58510 returned -22 [ 3324.768102] binder: 30750:30755 ioctl 4020ae46 7fda76f58510 returned -22 [ 3324.786634] binder: 30750:30755 ioctl 4020ae46 7fda76f58510 returned -22 [ 3324.801719] binder: 30750:30755 ioctl 4020ae46 7fda76f58510 returned -22 [ 3324.824747] binder: 30750:30755 ioctl 4020ae46 7fda76f58510 returned -22 [ 3324.834810] binder: 30750:30755 ioctl 4020ae46 7fda76f58510 returned -22 [ 3324.847150] binder: 30750:30755 ioctl 4020ae46 7fda76f58510 returned -22 [ 3324.855491] binder: 30750:30755 ioctl 4020ae46 7fda76f58510 returned -22 03:08:23 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 03:08:23 executing program 1: r0 = syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x8001, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000540)={0x1d, 0x14, [], [@hao={0xc9, 0x10, @empty}, @calipso={0x7, 0x58, {0x0, 0x14, 0x16, 0x4, [0xfffffffffffffffa, 0x6, 0xa2, 0x0, 0x8000, 0x81, 0x7, 0x9, 0x8000, 0x80000000]}}, @jumbo={0xc2, 0x4, 0xfffffffe}, @ra={0x5, 0x2, 0xb7}, @calipso={0x7, 0x10, {0x0, 0x2, 0x1, 0x40, [0xf21]}}, @jumbo={0xc2, 0x4, 0x5}, @ra={0x5, 0x2, 0x6}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, [], 0x1}}, @pad1]}, 0xb0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/202, 0xca}, {&(0x7f00000001c0)=""/69, 0x45}], 0x2, &(0x7f0000000280)=""/35, 0x23}, 0x7f}], 0x1, 0x40, &(0x7f0000000300)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000380)={0x0, 0xfb, 0x4f, 0x1, 0x4, "c873b485de6dc2519f1db0b5e3379e44", "e90bf4a87df27e7ad4c78db315d0d9c2ae7c39e35cf26035b1f5e0942932bddd6c95025e15056caa6d4b1f953e4da3c23f1b2ceaba2ee7c2431f"}, 0x4f, 0x3) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x10, 0x3e8, 0x800, 0x70bd28, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0xc000) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000740)) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e630c7294c19c4d1631848e4230647c475847be778683dc0d88fe40b4b34f694f25bb6418a0d40c45ce417a09290d5279f0b9130f666a331771b5d54b844d0277f4205714c7fc0d1420ccae2c1409bd212d8b39c9b75a2a1c3ec863c49fcac7fc2f399a266006855a311fdfcbf33189459c03a1eef5d1627f92a703396ee549a966ccfd982314c4908c8b7643b129b54a4efa64dda2bf1a8828994ba8dd63060e9b0321d913d7a4fcb430d619bbe9a609bab56cfdf2f5dee60c3f6249678017e1bc8a6eb3bbabfee204c3c6e25d6a47ed19db22dded31dfbb2478b00b1bad87d774f45b76480c862a00d6c1733108bb4e8750b543ca778a6b9c1efdac1a39a6718d2ff24a8fc7adc714"], 0x0, 0x0, 0x0}) ioctl$VIDIOC_S_AUDOUT(r5, 0x40345632, &(0x7f0000000340)={0x3, "b5e9fb3d8c5ca985930145dcfe6a63b0bd74c23dd87999c3022c4c2b4b0a4b1b", 0x1}) ioctl$KDSETMODE(r2, 0x4b71, 0x0) 03:08:23 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x40049409, 0x744000) 03:08:23 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x5602, 0x744000) 03:08:23 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xc0e1c3) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$SOUND_OLD_MIXER_INFO(r2, 0x80304d65, &(0x7f0000000040)) 03:08:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x3, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3324.871543] binder: 30750:30755 ioctl 4020ae46 7fda76f58510 returned -22 [ 3324.880765] binder: 30750:30755 ioctl 4020ae46 7fda76f58530 returned -22 [ 3324.962318] binder: 30789:30793 unknown command 1913414414 [ 3324.970630] binder: 30792:30795 ioctl 4020ae46 7fda76f58510 returned -22 03:08:23 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x40086602, 0x744000) 03:08:23 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x18080, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="e1564b516b05a8d12c907e154137e2c93cebed4d331d97396d0191c4fbd180d2991ef86d06e2a2ac23f2f8946291afd05b1efe4f1bfb48e22de89d829d5c35009cd80ad37953371ba71703ad86c37d90137f643b0b5df1bc040b8e201051e5150bbf3371e448ee4cab5ad75d300097160155ceba"], 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000000c0)={0xfacb8124b4a77191, r4}) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x80, 0x0) 03:08:23 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x1000) 03:08:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b71, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x402, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)={0x1c, r3, 0x301, 0x0, 0x0, {0x4}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000079c0)=[{{&(0x7f0000000080)=@rc, 0x80, &(0x7f0000003440)=[{&(0x7f0000000100)=""/140, 0x8c}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/199, 0xc7}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000007680)=""/255, 0xb1}, {&(0x7f0000005c80)=""/4096, 0x1000}, {&(0x7f00000033c0)=""/115, 0x73}], 0x7}, 0x5}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f00000034c0)=""/26, 0x1a}, {&(0x7f00000022c0)=""/195, 0xc3}], 0x2, &(0x7f0000003600)=""/81, 0x51}, 0x4}, {{&(0x7f0000003680)=@generic, 0x80, &(0x7f0000004800)=[{&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f0000004700)=""/174, 0xae}, {&(0x7f00000047c0)=""/12, 0xc}], 0x3, &(0x7f0000004840)=""/210, 0xd2}, 0x7}, {{&(0x7f0000004940)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f00000023c0)=[{&(0x7f00000049c0)=""/23, 0x17}, {0xffffffffffffffff}, {&(0x7f0000004a00)=""/22, 0x16}, {&(0x7f0000004a40)=""/4096, 0x1000}, {&(0x7f0000007640)=""/17, 0x11}, {&(0x7f0000005a80)=""/31, 0x1f}], 0x6, &(0x7f0000005b40)=""/139, 0x8b}, 0x200}, {{&(0x7f0000005c00)=@x25={0x9, @remote}, 0x80, &(0x7f0000007140), 0x0, &(0x7f00000071c0)=""/241, 0xf1}, 0x9}, {{&(0x7f00000072c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000007440)=[{&(0x7f0000007c80)=""/197, 0xc5}], 0x1, &(0x7f0000007480)=""/100, 0x64}, 0x4}, {{&(0x7f0000007500)=@ax25={{0x3, @netrom}, [@rose, @remote, @null, @bcast, @bcast, @null]}, 0x80, &(0x7f0000007940)=[{&(0x7f0000007580)=""/35, 0x23}, {&(0x7f00000075c0)=""/99, 0x63}, {&(0x7f0000007640)}, {&(0x7f0000007340)=""/246, 0xf6}, {&(0x7f0000007780)=""/11, 0xb}, {&(0x7f00000077c0)=""/150, 0x96}, {&(0x7f0000007880)=""/180, 0xb4}], 0x7}, 0x80000000}], 0x7, 0xbb99b15ec4a053ed, &(0x7f0000007b80)={0x77359400}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000007c40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000007c00)={&(0x7f0000007bc0)={0x34, r3, 0x4, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0xc014}, 0x20000084) 03:08:23 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000040)=0x1, 0x4) openat$cgroup(r2, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) [ 3324.978405] binder: 30789:30793 ioctl c0306201 200000c0 returned -22 03:08:23 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x40087602, 0x744000) 03:08:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b71, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x800) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r4) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) bind$isdn(r6, &(0x7f0000000040)={0x22, 0x9, 0xd, 0xf8, 0x1}, 0x6) read$dsp(r3, &(0x7f0000000000)=""/53, 0x35) [ 3324.978845] binder: 30789:30793 ioctl 40345632 20000340 returned -22 03:08:23 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x800) r2 = dup2(r1, r0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000003c0)={0xa, 0x4e22, 0xfffffffe, @local}, 0x1c) listen(r4, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0xdd, 0xfffffffffffffffe, 0x40000000000004, 0x8}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x3, @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x1e) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) ioctl$FIBMAP(r6, 0x1, &(0x7f00000000c0)=0xff) [ 3324.982856] binder: 30789:30793 unknown command 1913414414 [ 3324.982870] binder: 30789:30793 ioctl c0306201 200000c0 returned -22 03:08:23 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4020940d, 0x744000) [ 3324.982916] binder: 30787:30794 ioctl 80304d65 20000040 returned -22 [ 3324.984072] binder: 30789:30800 ioctl 40345632 20000340 returned -22 [ 3324.989503] binder: 30792:30795 ioctl 4020ae46 7fda76f58510 returned -22 [ 3324.989523] binder: 30792:30795 ioctl 4020ae46 7fda76f58510 returned -22 [ 3324.989540] binder: 30792:30795 ioctl 4020ae46 7fda76f58510 returned -22 [ 3324.989556] binder: 30792:30795 ioctl 4020ae46 7fda76f58510 returned -22 [ 3324.989571] binder: 30792:30795 ioctl 4020ae46 7fda76f58510 returned -22 [ 3324.989586] binder: 30792:30795 ioctl 4020ae46 7fda76f58510 returned -22 [ 3324.989601] binder: 30792:30795 ioctl 4020ae46 7fda76f58510 returned -22 [ 3324.989617] binder: 30792:30795 ioctl 4020ae46 7fda76f58510 returned -22 [ 3324.989632] binder: 30792:30795 ioctl 4020ae46 7fda76f58510 returned -22 [ 3324.989647] binder: 30792:30795 ioctl 4020ae46 7fda76f58510 returned -22 [ 3324.989662] binder: 30792:30795 ioctl 4020ae46 7fda76f58510 returned -22 [ 3324.989677] binder: 30792:30795 ioctl 4020ae46 7fda76f58510 returned -22 [ 3324.989692] binder: 30792:30795 ioctl 4020ae46 7fda76f58510 returned -22 [ 3324.989707] binder: 30792:30795 ioctl 4020ae46 7fda76f58510 returned -22 [ 3324.989721] binder: 30792:30795 ioctl 4020ae46 7fda76f58510 returned -22 [ 3324.989736] binder: 30792:30795 ioctl 4020ae46 7fda76f58510 returned -22 [ 3324.989750] binder: 30792:30795 ioctl 4020ae46 7fda76f58510 returned -22 [ 3324.989764] binder: 30792:30795 ioctl 4020ae46 7fda76f58510 returned -22 [ 3324.989778] binder: 30792:30795 ioctl 4020ae46 7fda76f58510 returned -22 [ 3324.989792] binder: 30792:30795 ioctl 4020ae46 7fda76f58510 returned -22 [ 3324.989806] binder: 30792:30795 ioctl 4020ae46 7fda76f58510 returned -22 [ 3324.989820] binder: 30792:30795 ioctl 4020ae46 7fda76f58510 returned -22 [ 3324.989834] binder: 30792:30795 ioctl 4020ae46 7fda76f58510 returned -22 [ 3324.989849] binder: 30792:30795 ioctl 4020ae46 7fda76f58530 returned -22 [ 3325.125493] binder: 30804:30808 unknown command 1363891937 [ 3325.125511] binder: 30804:30808 ioctl c0306201 200000c0 returned -22 [ 3325.126188] binder: 30804:30808 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.126207] binder: 30804:30808 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.126456] binder: 30804:30808 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.126474] binder: 30804:30808 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.126490] binder: 30804:30808 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.126505] binder: 30804:30808 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.126521] binder: 30804:30808 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.126536] binder: 30804:30808 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.126551] binder: 30804:30808 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.126566] binder: 30804:30808 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.126581] binder: 30804:30808 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.126596] binder: 30804:30808 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.126611] binder: 30804:30808 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.126624] binder: 30804:30808 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.126637] binder: 30804:30808 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.126652] binder: 30804:30808 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.126666] binder: 30804:30808 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.126682] binder: 30804:30808 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.126697] binder: 30804:30808 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.126712] binder: 30804:30808 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.126727] binder: 30804:30808 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.126743] binder: 30804:30808 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.126758] binder: 30804:30808 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.126773] binder: 30804:30808 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.126788] binder: 30804:30808 ioctl 4020ae46 7fda76f58530 returned -22 [ 3325.224115] binder: 30813:30816 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.224139] binder: 30813:30816 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.224156] binder: 30813:30816 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.224172] binder: 30813:30816 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.224189] binder: 30813:30816 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.224205] binder: 30813:30816 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.224222] binder: 30813:30816 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.224238] binder: 30813:30816 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.224254] binder: 30813:30816 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.224270] binder: 30813:30816 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.224285] binder: 30813:30816 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.224301] binder: 30813:30816 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.224316] binder: 30813:30816 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.224332] binder: 30813:30816 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.224347] binder: 30813:30816 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.224362] binder: 30813:30816 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.224378] binder: 30813:30816 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.224394] binder: 30813:30816 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.224410] binder: 30813:30816 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.224425] binder: 30813:30816 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.224441] binder: 30813:30816 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.224456] binder: 30813:30816 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.224471] binder: 30813:30816 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.224486] binder: 30813:30816 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.225056] binder: 30813:30816 ioctl 4020ae46 7fda76f58530 returned -22 [ 3325.379033] binder: 30824:30828 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.379055] binder: 30824:30828 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.379073] binder: 30824:30828 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.379089] binder: 30824:30828 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.379106] binder: 30824:30828 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.379123] binder: 30824:30828 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.379139] binder: 30824:30828 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.379155] binder: 30824:30828 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.379172] binder: 30824:30828 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.379188] binder: 30824:30828 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.379204] binder: 30824:30828 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.379220] binder: 30824:30828 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.379236] binder: 30824:30828 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.379252] binder: 30824:30828 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.379267] binder: 30824:30828 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.379283] binder: 30824:30828 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.379306] binder: 30824:30828 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.379322] binder: 30824:30828 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.379338] binder: 30824:30828 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.379355] binder: 30824:30828 ioctl 4020ae46 7fda76f58510 returned -22 03:08:24 executing program 5: ioctl$KDSETMODE(0xffffffffffffffff, 0x5602, 0x744000) 03:08:24 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r6, 0x405, 0x0, 0x0, {0x7e}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x84, r6, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_REG_RULES={0x1c, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xbe}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xa8}]}, @NL80211_ATTR_REG_RULES={0x24, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7fffffff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x10001}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7f}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) r8 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) r9 = syz_open_dev$binderN(0x0, 0x0, 0x0) r10 = dup2(r9, r8) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) fanotify_mark(r7, 0x0, 0x8000002, r10, &(0x7f0000000000)='./file0\x00') 03:08:24 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) 03:08:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x80045432, 0x744000) 03:08:24 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b71, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) fstat(r1, &(0x7f0000000080)) 03:08:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x300, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3325.379372] binder: 30824:30828 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.379388] binder: 30824:30828 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.379405] binder: 30824:30828 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.379422] binder: 30824:30828 ioctl 4020ae46 7fda76f58510 returned -22 [ 3325.379439] binder: 30824:30828 ioctl 4020ae46 7fda76f58530 returned -22 03:08:24 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x101002, 0x40) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000080)={0xff, 0x6}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 03:08:24 executing program 5: ioctl$KDSETMODE(0xffffffffffffffff, 0x5602, 0x744000) [ 3326.263376] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 03:08:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x80045440, 0x744000) 03:08:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x3f00, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:24 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$KDSETMODE(r0, 0x4b71, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000000)={0x8001, 0x3, 0x4, 0x100}) [ 3326.353645] binder: 30832:30838 ioctl c0306201 200000c0 returned -14 [ 3326.361827] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3326.389633] binder: 30848:30854 ioctl 4020ae46 7fda76f58510 returned -22 03:08:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x80086601, 0x744000) 03:08:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x20000, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3326.430683] binder: 30848:30854 ioctl 4020ae46 7fda76f58510 returned -22 03:08:24 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b71, 0x10) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1002) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="ee7686517b4dd7f6889f8f611d2ca830f7b250c8b247cf8475"], 0x0, 0x0, 0x0}) ioctl$FBIOGET_VSCREENINFO(0xffffffffffffffff, 0x4600, &(0x7f0000000100)) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, &(0x7f0000000000)=0x8) 03:08:24 executing program 5: ioctl$KDSETMODE(0xffffffffffffffff, 0x5602, 0x744000) [ 3326.514905] binder: 30848:30854 ioctl 4020ae46 7fda76f58510 returned -22 03:08:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x1000000, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x80087601, 0x744000) 03:08:25 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$KDSETMODE(r2, 0x4b3a, 0x1) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b71, 0x0) [ 3326.556319] binder: 30848:30854 ioctl 4020ae46 7fda76f58510 returned -22 [ 3326.595742] binder: 30848:30854 ioctl 4020ae46 7fda76f58510 returned -22 [ 3326.645456] binder: 30848:30854 ioctl 4020ae46 7fda76f58510 returned -22 [ 3326.684458] binder: 30848:30854 ioctl 4020ae46 7fda76f58510 returned -22 [ 3326.694756] binder: 30876:30879 ioctl 4b3a 1 returned -22 [ 3326.709847] binder: 30848:30854 ioctl 4020ae46 7fda76f58510 returned -22 [ 3326.724763] binder: 30876:30879 ioctl 4b3a 1 returned -22 [ 3326.741532] binder: 30848:30854 ioctl 4020ae46 7fda76f58510 returned -22 [ 3326.772003] binder: 30848:30854 ioctl 4020ae46 7fda76f58510 returned -22 [ 3326.796587] binder: 30848:30854 ioctl 4020ae46 7fda76f58510 returned -22 [ 3326.816129] binder: 30848:30854 ioctl 4020ae46 7fda76f58510 returned -22 [ 3326.831337] binder: 30848:30854 ioctl 4020ae46 7fda76f58510 returned -22 [ 3326.847849] binder: 30848:30854 ioctl 4020ae46 7fda76f58510 returned -22 [ 3326.868300] binder: 30848:30854 ioctl 4020ae46 7fda76f58510 returned -22 [ 3326.887861] binder: 30848:30854 ioctl 4020ae46 7fda76f58510 returned -22 [ 3326.903712] binder: 30848:30854 ioctl 4020ae46 7fda76f58510 returned -22 [ 3326.919032] binder: 30848:30854 ioctl 4020ae46 7fda76f58510 returned -22 [ 3326.934517] binder: 30848:30854 ioctl 4020ae46 7fda76f58510 returned -22 [ 3326.950392] binder: 30848:30854 ioctl 4020ae46 7fda76f58510 returned -22 [ 3326.965244] binder: 30848:30854 ioctl 4020ae46 7fda76f58510 returned -22 03:08:25 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x206402, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r6, 0x405, 0x0, 0x0, {0x7e}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r6, 0x4, 0x2070bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0xffffffffffffffff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x40880) 03:08:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x5602, 0x744000) 03:08:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x2000000, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3326.973185] binder: 30848:30854 ioctl 4020ae46 7fda76f58510 returned -22 [ 3326.981028] binder: 30848:30854 ioctl 4020ae46 7fda76f58510 returned -22 [ 3326.990076] binder: 30848:30854 ioctl 4020ae46 7fda76f58510 returned -22 [ 3326.997928] binder: 30848:30854 ioctl 4020ae46 7fda76f58530 returned -22 03:08:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0xc0045878, 0x744000) 03:08:25 executing program 1: prctl$PR_CAPBSET_DROP(0x18, 0x22) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000640)={0x1, 0x0, 0x12, 0x18, 0x10, &(0x7f0000000240)}) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r1) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="f2630c400b3ad228489177cdc24d0438df00fa6612efe1f13a4f62d7966c1f8964dc9bd1df8557651506c6fa7594b59dcdb63e53b45badd3f30aed1983a3890fe11e9e725fa4a7a5a59fc25883adbc6b6bc6d50d41f05a5e2aefecdfa899265cb468c28c1eaf5a21076dfef7d944232f298a8641b970b374bf80b0feadfbe67a33ba45d75be55be7537374cdad8e8afdacc36845bcc72641e21c13"], 0x0, 0x0, 0x0}) ioctl$VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f00000000c0)={0xcc7a, 0x34325241, 0x2, @discrete={0x2}}) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000040)={0xffffffa3, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) r7 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x5, 0x101a00) ioctl$KVM_S390_INTERRUPT_CPU(r7, 0x4010ae94, &(0x7f0000000200)={0x5, 0xffffc276, 0x726b70b4}) ioctl$KDSETMODE(r6, 0x4b71, 0x0) 03:08:25 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(0xffffffffffffffff, 0x5602, 0x744000) 03:08:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0xc0045878, 0x744000) 03:08:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x3000000, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3327.113551] binder: 30890:30899 ioctl 4020ae46 7fda76f58510 returned -22 [ 3327.126851] binder: 30894:30900 unknown command 1074553842 [ 3327.143596] binder: 30894:30900 ioctl c0306201 200000c0 returned -22 [ 3327.152586] binder: 30890:30899 ioctl 4020ae46 7fda76f58510 returned -22 [ 3327.167530] binder: 30890:30899 ioctl 4020ae46 7fda76f58510 returned -22 [ 3327.177452] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 3327.188466] binder: 30894:30902 ioctl c02c564a 200000c0 returned -22 [ 3327.206152] binder: 30890:30899 ioctl 4020ae46 7fda76f58510 returned -22 [ 3327.231586] binder: 30890:30899 ioctl 4020ae46 7fda76f58510 returned -22 [ 3327.240144] binder: 30894:30902 unknown command 1074553842 [ 3327.249359] binder: 30894:30902 ioctl c0306201 200000c0 returned -22 03:08:25 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(0xffffffffffffffff, 0x5602, 0x744000) 03:08:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0xc0189436, 0x744000) [ 3327.279708] binder: 30890:30899 ioctl 4020ae46 7fda76f58510 returned -22 [ 3327.280051] binder: 30894:30900 ioctl c02c564a 200000c0 returned -22 [ 3327.294465] binder: 30894:30907 ioctl 4010ae94 20000200 returned -22 [ 3327.312035] binder: 30890:30899 ioctl 4020ae46 7fda76f58510 returned -22 03:08:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x20000000, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3327.332733] binder: 30890:30899 ioctl 4020ae46 7fda76f58510 returned -22 [ 3327.368467] binder: 30890:30899 ioctl 4020ae46 7fda76f58510 returned -22 03:08:25 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b71, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$FBIOGETCMAP(r3, 0x4604, &(0x7f00000001c0)={0x3, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0]}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB=',c\f@'], 0x0, 0x0, 0x0}) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000000)={0x6, 0x2, 0x0, 0x8, 0x84, "ad8fdd4039f5e1882242c1d83479eccae48f7d", 0x81, 0xc7}) [ 3327.406002] binder: 30890:30899 ioctl 4020ae46 7fda76f58510 returned -22 [ 3327.448465] binder: 30890:30899 ioctl 4020ae46 7fda76f58510 returned -22 [ 3327.480589] binder: 30890:30899 ioctl 4020ae46 7fda76f58510 returned -22 [ 3327.494125] binder: 30920:30923 ioctl 4604 200001c0 returned -22 [ 3327.501159] binder: 30890:30899 ioctl 4020ae46 7fda76f58510 returned -22 [ 3327.501178] binder: 30890:30899 ioctl 4020ae46 7fda76f58510 returned -22 [ 3327.501195] binder: 30890:30899 ioctl 4020ae46 7fda76f58510 returned -22 [ 3327.501210] binder: 30890:30899 ioctl 4020ae46 7fda76f58510 returned -22 [ 3327.501225] binder: 30890:30899 ioctl 4020ae46 7fda76f58510 returned -22 [ 3327.501239] binder: 30890:30899 ioctl 4020ae46 7fda76f58510 returned -22 [ 3327.501253] binder: 30890:30899 ioctl 4020ae46 7fda76f58510 returned -22 [ 3327.501269] binder: 30890:30899 ioctl 4020ae46 7fda76f58510 returned -22 [ 3327.501285] binder: 30890:30899 ioctl 4020ae46 7fda76f58510 returned -22 [ 3327.501300] binder: 30890:30899 ioctl 4020ae46 7fda76f58510 returned -22 [ 3327.501316] binder: 30890:30899 ioctl 4020ae46 7fda76f58510 returned -22 [ 3327.501330] binder: 30890:30899 ioctl 4020ae46 7fda76f58510 returned -22 [ 3327.501347] binder: 30890:30899 ioctl 4020ae46 7fda76f58530 returned -22 [ 3327.595776] binder: 30920:30923 unknown command 1074553644 [ 3327.614728] binder: 30920:30923 ioctl c0306201 200000c0 returned -22 03:08:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000040)={0x8, 'veth1_to_hsr\x00', {'ip6erspan0\x00'}, 0x7}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 03:08:26 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(0xffffffffffffffff, 0x5602, 0x744000) 03:08:26 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0xc020660b, 0x744000) 03:08:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x3f000000, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3327.646725] binder: 30920:30926 ioctl 402c542c 20000000 returned -22 [ 3327.677186] binder: 30920:30926 ioctl 4604 200001c0 returned -22 [ 3327.685852] binder: 30920:30931 unknown command 1074553644 03:08:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x5602, 0x0) [ 3327.718599] binder: 30920:30931 ioctl c0306201 200000c0 returned -22 [ 3327.731967] binder: 30932:30936 ioctl 4020ae46 7fda76f58510 returned -22 [ 3327.752057] binder: 30932:30936 ioctl 4020ae46 7fda76f58510 returned -22 03:08:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:26 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4bfb, 0x400000) [ 3327.781848] binder: 30932:30936 ioctl 4020ae46 7fda76f58510 returned -22 [ 3327.800609] binder: 30932:30936 ioctl 4020ae46 7fda76f58510 returned -22 [ 3327.816757] binder: 30932:30936 ioctl 4020ae46 7fda76f58510 returned -22 03:08:26 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) 03:08:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x5602, 0x0) [ 3327.843783] binder: 30932:30936 ioctl 4020ae46 7fda76f58510 returned -22 03:08:26 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4bfb, 0x53b000) 03:08:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x2, 0x17, 0x2, 0x0, &(0x7f0000000000)="b440e7fd1bd1f6c5c6452b6c2339eb976f66b6c1d4f5292eae818d9c7e7a74a6deaa842aa35f3e893d4ea5868800122d55f66b78f3516beafbdd04888d713502c81e30558debd750a073494216900b50796f7b346ae61c8318ec5bceb9b516e2239e565fe7b7fc1edf8ec2cca08b084c8d22a6829b1bb24bac70029cdd741ec875378c7084fa25f1156d4097f58382b15a56cdbd94657d2aacc7e2a7231c294b34bae1a3713e8c04076371866e6e914394ad1d997deabdb6302be6662a14cd497740294a4519634e4a9e0a5d4ac6d89667b4087b800118fb8cf9c4fedc650c55696bdf2224311671ea4f8f71e8191b521abfdd1e5de98ad464101f7c178c35e7f76516da2d62bb2dc2440387913265ae8375c16d6337824cac794c5e8c99cad411073ed6ba700c69f55d9ad939958cdb7bbc9943904a1f5b56ac76556fd21bb4c58caca520b676ffbc49f200fd993026dbd48ef09cd4fbc012a7df91307ce210b2ea311e36c1a87ed68e782ba4a185a1b635d05d4ac1b34ad015dd022ad61f7feebbd450f5a07ee6f62b03e3bd7e7d50e96ecef6e30bc2a40377e021e459bdbf94f400854f21a2259215241c6bf4a1e436193509e27ac57c6518e42df7eab2a73ffcd785ee14821efeb96e878efd3b88120c7778e9f422c618e0614dd5ea79ea06d5c3e88ba397dd3b96171d77ef143a09d1d93bb44795c845a7271e1f1894c97cbedefcc53cedafe1dc004221dc4b451c09b93676d02cca15d7cd385d8e6bbb0d2b4f86a543d6e21af84760141347508e4da8611936cff6f2c84b2faf53434c55765849fd7858add5de4fea0ec98dc5b527a8677a66b70db0ebeb56bbfeaae567c3d1aac1929ac1053d1403cb1c14517769ac05145ff05700632af7a51848634b3b5f74bd894bf099769c65033c0475765934c7a1618b7ac3fbb39154f381466f1ac45ce2ba5c63184cb9f7b2f0aa372e10286b6c6ca4bb11eee3ded181d7c4838d791dc1df98a40b28e485b8ff373fc9e67f73a0a15f2f8e00554bfcacc5b0bf9f7cfb720ee63733597756d1579bd440d393574d08cd44a51d3d3a39a03b48f4ea754b7a404c9d2bb62e968cb05b297699585be683f21edbc7422a56ee26c3864553ff4fd91f7668203417fe3625d36f16a6d088bd3e62dbdff723c52069b0bc6e70cd9330a8ba46823a3349cba55e0b3394b633874dbdbdf45a677744b1842acc02d6ca35937951b3727d8920ac2e5a283035e144df463a529ca09d96f02659b640677620c8e5b49a3d648c32f3c31fe57eefbfdde5a19d10cb0c381ef1c90222fe557e186047c3b5fbb02a841a5d1afd0a6031dd7b6e0bf7dee97494015d22602f5e2c14ea7b498a1a877f57228dfa54eac4de742a69bae82a0e5bd87f25fb9e3675131f87565a92e312ca7afdaf1f8e95600735b2e9ae147b5bb08f162f"}) [ 3327.904391] binder: 30932:30936 ioctl 4020ae46 7fda76f58510 returned -22 [ 3327.933572] binder: 30932:30936 ioctl 4020ae46 7fda76f58510 returned -22 03:08:26 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$KDSETMODE(r5, 0x4b71, 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10002, 0x15d) r7 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r8 = syz_open_dev$binderN(0x0, 0x0, 0x0) r9 = dup2(r8, r7) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$TCSETS2(r9, 0x402c542b, &(0x7f0000000040)={0x9, 0x8, 0x8000, 0x6, 0x40, "e6a567db54b2bfe9b9ad00000061669d2adbab", 0x0, 0xa1}) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) [ 3327.958082] binder: 30932:30936 ioctl 4020ae46 7fda76f58510 returned -22 [ 3327.988902] binder: 30932:30936 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.022653] binder: 30951:30957 ioctl 4b71 1 returned -22 [ 3328.028978] binder: 30932:30936 ioctl 4020ae46 7fda76f58510 returned -22 03:08:26 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x2, 0x4, 0x3ff, 0x0, 0x1}, 0x40) bpf$MAP_CREATE(0x3, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 03:08:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x5602, 0x0) 03:08:26 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$KDSETMODE(r2, 0x4b71, 0x0) 03:08:26 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4bfb, 0x790000) [ 3328.028996] binder: 30932:30936 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.029012] binder: 30932:30936 ioctl 4020ae46 7fda76f58510 returned -22 03:08:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x3, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3328.029027] binder: 30932:30936 ioctl 4020ae46 7fda76f58510 returned -22 03:08:26 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4bfb, 0xb90000) [ 3328.029042] binder: 30932:30936 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.029056] binder: 30932:30936 ioctl 4020ae46 7fda76f58510 returned -22 03:08:26 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000040)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f0000000080)=0x3a23, 0x4) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 3328.029070] binder: 30932:30936 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.029083] binder: 30932:30936 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.029098] binder: 30932:30936 ioctl 4020ae46 7fda76f58510 returned -22 03:08:26 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4bfb, 0x20000000) [ 3328.029112] binder: 30932:30936 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.029125] binder: 30932:30936 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.029140] binder: 30932:30936 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.029159] binder: 30932:30936 ioctl 4020ae46 7fda76f58510 returned -22 03:08:26 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000080)={0x17c, 0x7, 0x4, 0x2, 0x6, {r6, r7/1000+10000}, {0x5, 0x2, 0x7, 0x5, 0x2, 0x80, "b60c38a9"}, 0x4, 0x2, @userptr=0x8, 0x3, 0x0, r0}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x772, 0x0, 0x9}]}) r9 = dup2(r1, r2) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) [ 3328.029177] binder: 30932:30936 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.029192] binder: 30932:30936 ioctl 4020ae46 7fda76f58530 returned -22 [ 3328.060448] binder: 30951:30957 ioctl 402c542b 20000040 returned -22 03:08:26 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4bfb, 0x21000000) [ 3328.174123] binder: 30963:30968 ioctl 4b71 0 returned -22 [ 3328.195034] binder: 30964:30971 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.195054] binder: 30964:30971 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.195070] binder: 30964:30971 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.195087] binder: 30964:30971 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.195104] binder: 30964:30971 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.195120] binder: 30964:30971 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.195134] binder: 30964:30971 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.195151] binder: 30964:30971 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.195169] binder: 30964:30971 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.195185] binder: 30964:30971 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.195200] binder: 30964:30971 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.195217] binder: 30964:30971 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.195233] binder: 30964:30971 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.195250] binder: 30964:30971 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.195265] binder: 30964:30971 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.195281] binder: 30964:30971 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.195296] binder: 30964:30971 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.195311] binder: 30964:30971 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.195327] binder: 30964:30971 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.195341] binder: 30964:30971 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.195357] binder: 30964:30971 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.195372] binder: 30964:30971 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.195388] binder: 30964:30971 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.195402] binder: 30964:30971 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.195415] binder: 30964:30971 ioctl 4020ae46 7fda76f58530 returned -22 [ 3328.429283] binder: 30979:30981 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.429306] binder: 30979:30981 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.429324] binder: 30979:30981 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.429341] binder: 30979:30981 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.429358] binder: 30979:30981 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.429375] binder: 30979:30981 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.429391] binder: 30979:30981 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.429407] binder: 30979:30981 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.429424] binder: 30979:30981 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.429440] binder: 30979:30981 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.429456] binder: 30979:30981 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.429471] binder: 30979:30981 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.429487] binder: 30979:30981 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.429512] binder: 30979:30981 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.429529] binder: 30979:30981 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.429545] binder: 30979:30981 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.429564] binder: 30979:30981 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.429579] binder: 30979:30981 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.429594] binder: 30979:30981 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.429609] binder: 30979:30981 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.429626] binder: 30979:30981 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.429641] binder: 30979:30981 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.429656] binder: 30979:30981 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.429671] binder: 30979:30981 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.429687] binder: 30979:30981 ioctl 4020ae46 7fda76f58530 returned -22 [ 3328.588062] binder: 30985:30986 ioctl c058560f 20000080 returned -22 [ 3328.588506] binder: 30985:30986 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.588524] binder: 30985:30986 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.588539] binder: 30985:30986 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.588554] binder: 30985:30986 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.588569] binder: 30985:30986 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.588583] binder: 30985:30986 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.588598] binder: 30985:30986 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.588613] binder: 30985:30986 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.588628] binder: 30985:30986 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.588643] binder: 30985:30986 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.588658] binder: 30985:30986 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.588673] binder: 30985:30986 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.588689] binder: 30985:30986 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.588703] binder: 30985:30986 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.588718] binder: 30985:30986 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.588734] binder: 30985:30986 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.588750] binder: 30985:30986 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.588764] binder: 30985:30986 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.588780] binder: 30985:30986 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.588795] binder: 30985:30986 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.588809] binder: 30985:30986 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.588824] binder: 30985:30986 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.588838] binder: 30985:30986 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.588853] binder: 30985:30986 ioctl 4020ae46 7fda76f58510 returned -22 [ 3328.588867] binder: 30985:30986 ioctl 4020ae46 7fda76f58530 returned -22 03:08:28 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b68, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x3, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:28 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4bfb, 0x7fffffffefff) 03:08:28 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) fcntl$dupfd(r3, 0x406, r4) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000440)={0x30, 0x2, 0x0, 0x4, 0x8, 0x3, 0x800000000000}, 0x0) setpgid(r5, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 03:08:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x300, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:28 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4bfb, 0x744000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x400000, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200011}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x2, 0x3, 0x1006, 0x0, 0x0, {0x5}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x6}}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x22}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x3, 0x1}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x10}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) 03:08:28 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b68, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3329.798629] binder: 31001:31004 ioctl 4020ae46 7fda76f58510 returned -22 [ 3329.846712] binder: 31001:31004 ioctl 4020ae46 7fda76f58510 returned -22 03:08:28 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b48, 0x744000) 03:08:28 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) dup2(r5, r6) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r8) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r8) r9 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$KDSETMODE(r9, 0x4b71, 0x0) [ 3329.905092] binder: 31001:31004 ioctl 4020ae46 7fda76f58510 returned -22 03:08:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x3f00, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:28 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0e630c40dfca6ad9725b3547fc38f3e025d961b025f6f930a57cf058c48b1770cff6939df5ec058fbf0b47c3edb501d34fde5c9e58691057a1d403790d"], 0x0, 0x0, 0x0}) ioctl$KVM_GET_SREGS(r3, 0x8138ae83, &(0x7f0000000000)) ioctl$KDSETMODE(r0, 0x4bfb, 0x744000) [ 3329.957425] binder: 31001:31004 ioctl 4020ae46 7fda76f58510 returned -22 [ 3329.980830] binder: 31001:31004 ioctl 4020ae46 7fda76f58510 returned -22 [ 3329.997299] binder: 31020:31023 ioctl 4c81 1 returned -22 [ 3330.003361] binder: 31001:31004 ioctl 4020ae46 7fda76f58510 returned -22 [ 3330.013257] binder: 31020:31023 ioctl 4b71 0 returned -22 [ 3330.020604] binder: 31001:31004 ioctl 4020ae46 7fda76f58510 returned -22 [ 3330.031093] binder: 31022:31025 ioctl 8138ae83 20000000 returned -22 03:08:28 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b48, 0x744000) 03:08:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x20000, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3330.050800] binder: 31001:31004 ioctl 4020ae46 7fda76f58510 returned -22 [ 3330.076990] binder: 31020:31028 ioctl 4b71 0 returned -22 [ 3330.079073] binder: 31022:31025 ioctl 8138ae83 20000000 returned -22 [ 3330.121364] binder: 31001:31004 ioctl 4020ae46 7fda76f58510 returned -22 [ 3330.140157] binder: 31001:31004 ioctl 4020ae46 7fda76f58510 returned -22 [ 3330.165729] binder: 31001:31004 ioctl 4020ae46 7fda76f58510 returned -22 03:08:28 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x6, 0x301300) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x1411, 0x304, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8048}, 0x800) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000140)={0x3, 0x7}) r6 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="49e2541867bde697547651"], 0x0, 0x0, 0x0}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) getsockopt$IP_SET_OP_GET_BYINDEX(r7, 0x1, 0x53, &(0x7f0000000080)={0x7, 0x7, 0x3}, &(0x7f0000000100)=0x28) ioctl$KDSETMODE(r6, 0x4bfb, 0x744000) 03:08:28 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b48, 0x744000) [ 3330.204310] binder: 31001:31004 ioctl 4020ae46 7fda76f58510 returned -22 [ 3330.231610] binder: 31001:31004 ioctl 4020ae46 7fda76f58510 returned -22 [ 3330.264792] binder: 31001:31004 ioctl 4020ae46 7fda76f58510 returned -22 [ 3330.289365] binder: 31001:31004 ioctl 4020ae46 7fda76f58510 returned -22 [ 3330.303120] binder: 31038:31041 ioctl 4008af12 20000140 returned -22 [ 3330.308369] binder: 31001:31004 ioctl 4020ae46 7fda76f58510 returned -22 [ 3330.321280] binder: 31001:31004 ioctl 4020ae46 7fda76f58510 returned -22 [ 3330.331671] binder: 31038:31041 unknown command 408216137 [ 3330.345608] binder: 31038:31041 ioctl c0306201 200000c0 returned -22 [ 3330.358379] binder: 31001:31004 ioctl 4020ae46 7fda76f58510 returned -22 [ 3330.375319] binder: 31038:31041 ioctl 4bfb 744000 returned -22 [ 3330.383491] binder: 31001:31004 ioctl 4020ae46 7fda76f58510 returned -22 [ 3330.401189] binder: 31001:31004 ioctl 4020ae46 7fda76f58510 returned -22 [ 3330.413393] binder: 31038:31041 ioctl 4008af12 20000140 returned -22 [ 3330.414455] binder: 31038:31045 unknown command 408216137 [ 3330.427144] binder: 31001:31004 ioctl 4020ae46 7fda76f58510 returned -22 [ 3330.443897] binder: 31001:31004 ioctl 4020ae46 7fda76f58510 returned -22 [ 3330.451952] binder: 31038:31045 ioctl c0306201 200000c0 returned -22 [ 3330.468005] binder: 31001:31004 ioctl 4020ae46 7fda76f58510 returned -22 [ 3330.489056] binder: 31001:31004 ioctl 4020ae46 7fda76f58510 returned -22 [ 3330.505925] binder: 31001:31004 ioctl 4020ae46 7fda76f58530 returned -22 03:08:28 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$NBD_SET_BLKSIZE(r8, 0xab01, 0x2) ioctl$USBDEVFS_CLAIMINTERFACE(r5, 0x8004550f, &(0x7f0000000040)=0x400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) 03:08:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x1000000, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:28 executing program 5: ioctl$KDSETMODE(0xffffffffffffffff, 0x4b48, 0x744000) 03:08:28 executing program 2: ioctl$KDSETMODE(0xffffffffffffffff, 0x4bfb, 0x744000) 03:08:29 executing program 5: ioctl$KDSETMODE(0xffffffffffffffff, 0x4b48, 0x744000) [ 3330.636994] binder: 31053:31054 ioctl 4020ae46 7fda76f58510 returned -22 [ 3330.666816] binder: 31053:31054 ioctl 4020ae46 7fda76f58510 returned -22 03:08:29 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x2000000, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3330.701127] binder: 31053:31060 ioctl ab01 2 returned -22 [ 3330.704862] binder: 31053:31054 ioctl 4020ae46 7fda76f58510 returned -22 [ 3330.737817] binder: 31053:31054 ioctl 4020ae46 7fda76f58510 returned -22 [ 3330.762088] binder: 31053:31066 ioctl 8004550f 20000040 returned -22 [ 3330.783735] binder: 31053:31054 ioctl 4020ae46 7fda76f58510 returned -22 03:08:29 executing program 5: ioctl$KDSETMODE(0xffffffffffffffff, 0x4b48, 0x744000) [ 3330.808470] binder: 31053:31054 ioctl 4020ae46 7fda76f58510 returned -22 [ 3330.835641] binder: 31053:31054 ioctl 4020ae46 7fda76f58510 returned -22 03:08:29 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x3000000, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:29 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b48, 0x744000) [ 3330.865881] binder: 31053:31054 ioctl 4020ae46 7fda76f58510 returned -22 [ 3330.899997] binder: 31053:31054 ioctl 4020ae46 7fda76f58510 returned -22 [ 3330.935715] binder: 31053:31054 ioctl 4020ae46 7fda76f58510 returned -22 03:08:29 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x20000000, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3330.978351] binder: 31053:31054 ioctl 4020ae46 7fda76f58510 returned -22 [ 3331.003525] binder: 31053:31054 ioctl 4020ae46 7fda76f58510 returned -22 03:08:29 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b48, 0x744000) [ 3331.024698] binder: 31053:31054 ioctl 4020ae46 7fda76f58510 returned -22 [ 3331.056507] binder: 31053:31054 ioctl 4020ae46 7fda76f58510 returned -22 [ 3331.080775] binder: 31053:31054 ioctl 4020ae46 7fda76f58510 returned -22 03:08:29 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b48, 0x744000) [ 3331.108808] binder: 31053:31054 ioctl 4020ae46 7fda76f58510 returned -22 [ 3331.133053] binder: 31053:31054 ioctl 4020ae46 7fda76f58510 returned -22 [ 3331.146657] binder: 31053:31054 ioctl 4020ae46 7fda76f58510 returned -22 [ 3331.168959] binder: 31053:31054 ioctl 4020ae46 7fda76f58510 returned -22 [ 3331.186408] binder: 31053:31054 ioctl 4020ae46 7fda76f58510 returned -22 [ 3331.206349] binder: 31053:31054 ioctl 4020ae46 7fda76f58510 returned -22 [ 3331.247118] binder: 31053:31054 ioctl 4020ae46 7fda76f58510 returned -22 [ 3331.285596] binder: 31053:31054 ioctl 4020ae46 7fda76f58510 returned -22 [ 3331.306162] binder: 31053:31054 ioctl 4020ae46 7fda76f58510 returned -22 [ 3331.329587] binder: 31053:31054 ioctl 4020ae46 7fda76f58530 returned -22 03:08:29 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000040)=0x200, 0x4) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 03:08:29 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x3f000000, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:29 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b48, 0x744000) [ 3331.448233] binder: 31097:31099 ioctl 4020ae46 7fda76f58510 returned -22 [ 3331.468948] binder: 31097:31099 ioctl 4020ae46 7fda76f58510 returned -22 [ 3331.491658] binder: 31097:31099 ioctl 4020ae46 7fda76f58510 returned -22 03:08:29 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x10004, 0x0, &(0x7f0000000000)="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"}) 03:08:29 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b48, 0x0) [ 3331.514699] binder: 31097:31099 ioctl 4020ae46 7fda76f58510 returned -22 [ 3331.542805] binder: 31097:31099 ioctl 4020ae46 7fda76f58510 returned -22 [ 3331.562519] binder: 31097:31099 ioctl 4020ae46 7fda76f58510 returned -22 [ 3331.604208] binder: 31097:31099 ioctl 4020ae46 7fda76f58510 returned -22 [ 3331.633634] binder: 31097:31099 ioctl 4020ae46 7fda76f58510 returned -22 03:08:30 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b48, 0x0) 03:08:30 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3331.655791] binder: 31097:31099 ioctl 4020ae46 7fda76f58510 returned -22 [ 3331.681352] binder: 31097:31099 ioctl 4020ae46 7fda76f58510 returned -22 03:08:30 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b48, 0x0) [ 3331.714403] binder: 31097:31099 ioctl 4020ae46 7fda76f58510 returned -22 [ 3331.738677] binder: 31097:31099 ioctl 4020ae46 7fda76f58510 returned -22 03:08:30 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x2, &(0x7f0000000000)="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"}) [ 3331.798847] binder: 31097:31099 ioctl 4020ae46 7fda76f58510 returned -22 [ 3331.825629] binder: 31097:31099 ioctl 4020ae46 7fda76f58510 returned -22 [ 3331.864906] binder: 31097:31099 ioctl 4020ae46 7fda76f58510 returned -22 [ 3331.882158] binder: 31097:31099 ioctl 4020ae46 7fda76f58510 returned -22 [ 3331.898822] binder: 31097:31099 ioctl 4020ae46 7fda76f58510 returned -22 03:08:30 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x3, &(0x7f0000000000)="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"}) [ 3331.922135] binder: 31097:31099 ioctl 4020ae46 7fda76f58510 returned -22 [ 3331.947660] binder: 31097:31099 ioctl 4020ae46 7fda76f58510 returned -22 03:08:30 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x10004, 0x0, &(0x7f0000000000)="b440e7fd1bd1f6c5c6452b6c2339eb976f66b6c1d4f5292eae818d9c7e7a74a6deaa842aa35f3e893d4ea5868800122d55f66b78f3516beafbdd04888d713502c81e30558debd750a073494216900b50796f7b346ae61c8318ec5bceb9b516e2239e565fe7b7fc1edf8ec2cca08b084c8d22a6829b1bb24bac70029cdd741ec875378c7084fa25f1156d4097f58382b15a56cdbd94657d2aacc7e2a7231c294b34bae1a3713e8c04076371866e6e914394ad1d997deabdb6302be6662a14cd497740294a4519634e4a9e0a5d4ac6d89667b4087b800118fb8cf9c4fedc650c55696bdf2224311671ea4f8f71e8191b521abfdd1e5de98ad464101f7c178c35e7f76516da2d62bb2dc2440387913265ae8375c16d6337824cac794c5e8c99cad411073ed6ba700c69f55d9ad939958cdb7bbc9943904a1f5b56ac76556fd21bb4c58caca520b676ffbc49f200fd993026dbd48ef09cd4fbc012a7df91307ce210b2ea311e36c1a87ed68e782ba4a185a1b635d05d4ac1b34ad015dd022ad61f7feebbd450f5a07ee6f62b03e3bd7e7d50e96ecef6e30bc2a40377e021e459bdbf94f400854f21a2259215241c6bf4a1e436193509e27ac57c6518e42df7eab2a73ffcd785ee14821efeb96e878efd3b88120c7778e9f422c618e0614dd5ea79ea06d5c3e88ba397dd3b96171d77ef143a09d1d93bb44795c845a7271e1f1894c97cbedefcc53cedafe1dc004221dc4b451c09b93676d02cca15d7cd385d8e6bbb0d2b4f86a543d6e21af84760141347508e4da8611936cff6f2c84b2faf53434c55765849fd7858add5de4fea0ec98dc5b527a8677a66b70db0ebeb56bbfeaae567c3d1aac1929ac1053d1403cb1c14517769ac05145ff05700632af7a51848634b3b5f74bd894bf099769c65033c0475765934c7a1618b7ac3fbb39154f381466f1ac45ce2ba5c63184cb9f7b2f0aa372e10286b6c6ca4bb11eee3ded181d7c4838d791dc1df98a40b28e485b8ff373fc9e67f73a0a15f2f8e00554bfcacc5b0bf9f7cfb720ee63733597756d1579bd440d393574d08cd44a51d3d3a39a03b48f4ea754b7a404c9d2bb62e968cb05b297699585be683f21edbc7422a56ee26c3864553ff4fd91f7668203417fe3625d36f16a6d088bd3e62dbdff723c52069b0bc6e70cd9330a8ba46823a3349cba55e0b3394b633874dbdbdf45a677744b1842acc02d6ca35937951b3727d8920ac2e5a283035e144df463a529ca09d96f02659b640677620c8e5b49a3d648c32f3c31fe57eefbfdde5a19d10cb0c381ef1c90222fe557e186047c3b5fbb02a841a5d1afd0a6031dd7b6e0bf7dee97494015d22602f5e2c14ea7b498a1a877f57228dfa54eac4de742a69bae82a0e5bd87f25fb9e3675131f87565a92e312ca7afdaf1f8e95600735b2e9ae147b5bb08f162f"}) [ 3331.974237] binder: 31097:31099 ioctl 4020ae46 7fda76f58510 returned -22 [ 3332.006118] binder: 31097:31099 ioctl 4020ae46 7fda76f58510 returned -22 [ 3332.030976] binder: 31097:31099 ioctl 4020ae46 7fda76f58510 returned -22 [ 3332.055173] binder: 31097:31099 ioctl 4020ae46 7fda76f58510 returned -22 03:08:30 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x300, &(0x7f0000000000)="b440e7fd1bd1f6c5c6452b6c2339eb976f66b6c1d4f5292eae818d9c7e7a74a6deaa842aa35f3e893d4ea5868800122d55f66b78f3516beafbdd04888d713502c81e30558debd750a073494216900b50796f7b346ae61c8318ec5bceb9b516e2239e565fe7b7fc1edf8ec2cca08b084c8d22a6829b1bb24bac70029cdd741ec875378c7084fa25f1156d4097f58382b15a56cdbd94657d2aacc7e2a7231c294b34bae1a3713e8c04076371866e6e914394ad1d997deabdb6302be6662a14cd497740294a4519634e4a9e0a5d4ac6d89667b4087b800118fb8cf9c4fedc650c55696bdf2224311671ea4f8f71e8191b521abfdd1e5de98ad464101f7c178c35e7f76516da2d62bb2dc2440387913265ae8375c16d6337824cac794c5e8c99cad411073ed6ba700c69f55d9ad939958cdb7bbc9943904a1f5b56ac76556fd21bb4c58caca520b676ffbc49f200fd993026dbd48ef09cd4fbc012a7df91307ce210b2ea311e36c1a87ed68e782ba4a185a1b635d05d4ac1b34ad015dd022ad61f7feebbd450f5a07ee6f62b03e3bd7e7d50e96ecef6e30bc2a40377e021e459bdbf94f400854f21a2259215241c6bf4a1e436193509e27ac57c6518e42df7eab2a73ffcd785ee14821efeb96e878efd3b88120c7778e9f422c618e0614dd5ea79ea06d5c3e88ba397dd3b96171d77ef143a09d1d93bb44795c845a7271e1f1894c97cbedefcc53cedafe1dc004221dc4b451c09b93676d02cca15d7cd385d8e6bbb0d2b4f86a543d6e21af84760141347508e4da8611936cff6f2c84b2faf53434c55765849fd7858add5de4fea0ec98dc5b527a8677a66b70db0ebeb56bbfeaae567c3d1aac1929ac1053d1403cb1c14517769ac05145ff05700632af7a51848634b3b5f74bd894bf099769c65033c0475765934c7a1618b7ac3fbb39154f381466f1ac45ce2ba5c63184cb9f7b2f0aa372e10286b6c6ca4bb11eee3ded181d7c4838d791dc1df98a40b28e485b8ff373fc9e67f73a0a15f2f8e00554bfcacc5b0bf9f7cfb720ee63733597756d1579bd440d393574d08cd44a51d3d3a39a03b48f4ea754b7a404c9d2bb62e968cb05b297699585be683f21edbc7422a56ee26c3864553ff4fd91f7668203417fe3625d36f16a6d088bd3e62dbdff723c52069b0bc6e70cd9330a8ba46823a3349cba55e0b3394b633874dbdbdf45a677744b1842acc02d6ca35937951b3727d8920ac2e5a283035e144df463a529ca09d96f02659b640677620c8e5b49a3d648c32f3c31fe57eefbfdde5a19d10cb0c381ef1c90222fe557e186047c3b5fbb02a841a5d1afd0a6031dd7b6e0bf7dee97494015d22602f5e2c14ea7b498a1a877f57228dfa54eac4de742a69bae82a0e5bd87f25fb9e3675131f87565a92e312ca7afdaf1f8e95600735b2e9ae147b5bb08f162f"}) [ 3332.078454] binder: 31097:31099 ioctl 4020ae46 7fda76f58510 returned -22 [ 3332.102473] binder: 31097:31099 ioctl 4020ae46 7fda76f58530 returned -22 03:08:30 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x10004, 0x0, &(0x7f0000000000)="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"}) 03:08:30 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x7a, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000040)=0x32) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 03:08:30 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x3f00, &(0x7f0000000000)="b440e7fd1bd1f6c5c6452b6c2339eb976f66b6c1d4f5292eae818d9c7e7a74a6deaa842aa35f3e893d4ea5868800122d55f66b78f3516beafbdd04888d713502c81e30558debd750a073494216900b50796f7b346ae61c8318ec5bceb9b516e2239e565fe7b7fc1edf8ec2cca08b084c8d22a6829b1bb24bac70029cdd741ec875378c7084fa25f1156d4097f58382b15a56cdbd94657d2aacc7e2a7231c294b34bae1a3713e8c04076371866e6e914394ad1d997deabdb6302be6662a14cd497740294a4519634e4a9e0a5d4ac6d89667b4087b800118fb8cf9c4fedc650c55696bdf2224311671ea4f8f71e8191b521abfdd1e5de98ad464101f7c178c35e7f76516da2d62bb2dc2440387913265ae8375c16d6337824cac794c5e8c99cad411073ed6ba700c69f55d9ad939958cdb7bbc9943904a1f5b56ac76556fd21bb4c58caca520b676ffbc49f200fd993026dbd48ef09cd4fbc012a7df91307ce210b2ea311e36c1a87ed68e782ba4a185a1b635d05d4ac1b34ad015dd022ad61f7feebbd450f5a07ee6f62b03e3bd7e7d50e96ecef6e30bc2a40377e021e459bdbf94f400854f21a2259215241c6bf4a1e436193509e27ac57c6518e42df7eab2a73ffcd785ee14821efeb96e878efd3b88120c7778e9f422c618e0614dd5ea79ea06d5c3e88ba397dd3b96171d77ef143a09d1d93bb44795c845a7271e1f1894c97cbedefcc53cedafe1dc004221dc4b451c09b93676d02cca15d7cd385d8e6bbb0d2b4f86a543d6e21af84760141347508e4da8611936cff6f2c84b2faf53434c55765849fd7858add5de4fea0ec98dc5b527a8677a66b70db0ebeb56bbfeaae567c3d1aac1929ac1053d1403cb1c14517769ac05145ff05700632af7a51848634b3b5f74bd894bf099769c65033c0475765934c7a1618b7ac3fbb39154f381466f1ac45ce2ba5c63184cb9f7b2f0aa372e10286b6c6ca4bb11eee3ded181d7c4838d791dc1df98a40b28e485b8ff373fc9e67f73a0a15f2f8e00554bfcacc5b0bf9f7cfb720ee63733597756d1579bd440d393574d08cd44a51d3d3a39a03b48f4ea754b7a404c9d2bb62e968cb05b297699585be683f21edbc7422a56ee26c3864553ff4fd91f7668203417fe3625d36f16a6d088bd3e62dbdff723c52069b0bc6e70cd9330a8ba46823a3349cba55e0b3394b633874dbdbdf45a677744b1842acc02d6ca35937951b3727d8920ac2e5a283035e144df463a529ca09d96f02659b640677620c8e5b49a3d648c32f3c31fe57eefbfdde5a19d10cb0c381ef1c90222fe557e186047c3b5fbb02a841a5d1afd0a6031dd7b6e0bf7dee97494015d22602f5e2c14ea7b498a1a877f57228dfa54eac4de742a69bae82a0e5bd87f25fb9e3675131f87565a92e312ca7afdaf1f8e95600735b2e9ae147b5bb08f162f"}) 03:08:30 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x10004, 0x0, &(0x7f0000000000)="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"}) [ 3332.302971] binder: 31139:31142 ioctl 4020ae46 7fda76f58510 returned -22 [ 3332.329278] binder: 31139:31142 ioctl 4020ae46 7fda76f58510 returned -22 03:08:30 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x20000, &(0x7f0000000000)="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"}) [ 3332.357217] binder: 31139:31142 ioctl 4020ae46 7fda76f58510 returned -22 [ 3332.360044] binder: 31139:31145 ioctl 80044940 20000040 returned -22 [ 3332.390319] binder: 31139:31142 ioctl 4020ae46 7fda76f58510 returned -22 03:08:30 executing program 5: ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x10004, 0x0, &(0x7f0000000000)="b440e7fd1bd1f6c5c6452b6c2339eb976f66b6c1d4f5292eae818d9c7e7a74a6deaa842aa35f3e893d4ea5868800122d55f66b78f3516beafbdd04888d713502c81e30558debd750a073494216900b50796f7b346ae61c8318ec5bceb9b516e2239e565fe7b7fc1edf8ec2cca08b084c8d22a6829b1bb24bac70029cdd741ec875378c7084fa25f1156d4097f58382b15a56cdbd94657d2aacc7e2a7231c294b34bae1a3713e8c04076371866e6e914394ad1d997deabdb6302be6662a14cd497740294a4519634e4a9e0a5d4ac6d89667b4087b800118fb8cf9c4fedc650c55696bdf2224311671ea4f8f71e8191b521abfdd1e5de98ad464101f7c178c35e7f76516da2d62bb2dc2440387913265ae8375c16d6337824cac794c5e8c99cad411073ed6ba700c69f55d9ad939958cdb7bbc9943904a1f5b56ac76556fd21bb4c58caca520b676ffbc49f200fd993026dbd48ef09cd4fbc012a7df91307ce210b2ea311e36c1a87ed68e782ba4a185a1b635d05d4ac1b34ad015dd022ad61f7feebbd450f5a07ee6f62b03e3bd7e7d50e96ecef6e30bc2a40377e021e459bdbf94f400854f21a2259215241c6bf4a1e436193509e27ac57c6518e42df7eab2a73ffcd785ee14821efeb96e878efd3b88120c7778e9f422c618e0614dd5ea79ea06d5c3e88ba397dd3b96171d77ef143a09d1d93bb44795c845a7271e1f1894c97cbedefcc53cedafe1dc004221dc4b451c09b93676d02cca15d7cd385d8e6bbb0d2b4f86a543d6e21af84760141347508e4da8611936cff6f2c84b2faf53434c55765849fd7858add5de4fea0ec98dc5b527a8677a66b70db0ebeb56bbfeaae567c3d1aac1929ac1053d1403cb1c14517769ac05145ff05700632af7a51848634b3b5f74bd894bf099769c65033c0475765934c7a1618b7ac3fbb39154f381466f1ac45ce2ba5c63184cb9f7b2f0aa372e10286b6c6ca4bb11eee3ded181d7c4838d791dc1df98a40b28e485b8ff373fc9e67f73a0a15f2f8e00554bfcacc5b0bf9f7cfb720ee63733597756d1579bd440d393574d08cd44a51d3d3a39a03b48f4ea754b7a404c9d2bb62e968cb05b297699585be683f21edbc7422a56ee26c3864553ff4fd91f7668203417fe3625d36f16a6d088bd3e62dbdff723c52069b0bc6e70cd9330a8ba46823a3349cba55e0b3394b633874dbdbdf45a677744b1842acc02d6ca35937951b3727d8920ac2e5a283035e144df463a529ca09d96f02659b640677620c8e5b49a3d648c32f3c31fe57eefbfdde5a19d10cb0c381ef1c90222fe557e186047c3b5fbb02a841a5d1afd0a6031dd7b6e0bf7dee97494015d22602f5e2c14ea7b498a1a877f57228dfa54eac4de742a69bae82a0e5bd87f25fb9e3675131f87565a92e312ca7afdaf1f8e95600735b2e9ae147b5bb08f162f"}) [ 3332.429393] binder: 31139:31142 ioctl 4020ae46 7fda76f58510 returned -22 [ 3332.459764] binder: 31139:31142 ioctl 4020ae46 7fda76f58510 returned -22 03:08:30 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x1000000, &(0x7f0000000000)="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"}) [ 3332.493243] binder: 31139:31142 ioctl 4020ae46 7fda76f58510 returned -22 [ 3332.526183] binder: 31139:31142 ioctl 4020ae46 7fda76f58510 returned -22 03:08:30 executing program 5: ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x10004, 0x0, &(0x7f0000000000)="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"}) [ 3332.561785] binder: 31139:31142 ioctl 4020ae46 7fda76f58510 returned -22 [ 3332.594344] binder: 31139:31142 ioctl 4020ae46 7fda76f58510 returned -22 03:08:31 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x2000000, &(0x7f0000000000)="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"}) [ 3332.631618] binder: 31139:31142 ioctl 4020ae46 7fda76f58510 returned -22 [ 3332.665108] binder: 31139:31142 ioctl 4020ae46 7fda76f58510 returned -22 03:08:31 executing program 5: ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x10004, 0x0, &(0x7f0000000000)="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"}) [ 3332.705455] binder: 31139:31142 ioctl 4020ae46 7fda76f58510 returned -22 [ 3332.736350] binder: 31139:31142 ioctl 4020ae46 7fda76f58510 returned -22 [ 3332.748734] binder: 31139:31142 ioctl 4020ae46 7fda76f58510 returned -22 03:08:31 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x3000000, &(0x7f0000000000)="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"}) [ 3332.755902] binder: 31139:31142 ioctl 4020ae46 7fda76f58510 returned -22 [ 3332.782225] binder: 31139:31142 ioctl 4020ae46 7fda76f58510 returned -22 03:08:31 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x10004, 0x0, &(0x7f0000000000)="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"}) [ 3332.821365] binder: 31139:31142 ioctl 4020ae46 7fda76f58510 returned -22 03:08:31 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x20000000, &(0x7f0000000000)="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"}) [ 3332.881484] binder: 31139:31142 ioctl 4020ae46 7fda76f58510 returned -22 [ 3332.903131] binder: 31139:31142 ioctl 4020ae46 7fda76f58510 returned -22 [ 3332.934127] binder: 31139:31142 ioctl 4020ae46 7fda76f58510 returned -22 [ 3332.974765] binder: 31139:31142 ioctl 4020ae46 7fda76f58510 returned -22 [ 3333.008466] binder: 31139:31142 ioctl 4020ae46 7fda76f58510 returned -22 [ 3333.025309] binder: 31139:31142 ioctl 4020ae46 7fda76f58510 returned -22 [ 3333.040050] binder: 31139:31142 ioctl 4020ae46 7fda76f58530 returned -22 [ 3333.056131] binder: 31139:31142 ioctl 8138ae83 7fda76f586f0 returned -22 03:08:31 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x3f000000, &(0x7f0000000000)="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"}) 03:08:31 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x10004, 0x0, &(0x7f0000000000)="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"}) 03:08:31 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x10004, 0x0, &(0x7f0000000000)="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"}) 03:08:31 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:31 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x10004, 0x0, &(0x7f0000000000)="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"}) 03:08:31 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:31 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='sessionid\x00') r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r2) setfsgid(r2) write$FUSE_ATTR(r0, &(0x7f0000000080)={0x78, 0x0, 0x6, {0x3, 0x4, 0x0, {0x1, 0x2, 0x1f, 0x0, 0x1, 0x9, 0x3f, 0x100, 0x3f, 0x4, 0x1f, 0xee01, r2, 0xfffffffa, 0x100}}}, 0x78) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 03:08:31 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) 03:08:31 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3333.535234] binder: 31201:31202 ioctl 4020ae46 7fda76f58510 returned -22 [ 3333.553598] binder: 31201:31202 ioctl 4020ae46 7fda76f58510 returned -22 [ 3333.592340] binder: 31201:31202 ioctl 4020ae46 7fda76f58510 returned -22 [ 3333.620496] binder: 31201:31202 ioctl 4020ae46 7fda76f58510 returned -22 03:08:32 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:32 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) [ 3333.666273] binder: 31201:31202 ioctl 4020ae46 7fda76f58510 returned -22 [ 3333.694054] binder: 31201:31202 ioctl 4020ae46 7fda76f58510 returned -22 [ 3333.713236] binder: 31201:31202 ioctl 4020ae46 7fda76f58510 returned -22 [ 3333.751932] binder: 31201:31202 ioctl 4020ae46 7fda76f58510 returned -22 [ 3333.788079] binder: 31201:31202 ioctl 4020ae46 7fda76f58510 returned -22 03:08:32 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3333.812609] binder: 31201:31202 ioctl 4020ae46 7fda76f58510 returned -22 [ 3333.836401] binder: 31201:31202 ioctl 4020ae46 7fda76f58510 returned -22 [ 3333.851398] binder: 31201:31202 ioctl 4020ae46 7fda76f58510 returned -22 03:08:32 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) [ 3333.866413] binder: 31201:31202 ioctl 4020ae46 7fda76f58510 returned -22 [ 3333.890717] binder: 31201:31202 ioctl 4020ae46 7fda76f58510 returned -22 [ 3333.902451] binder: 31201:31202 ioctl 4020ae46 7fda76f58510 returned -22 03:08:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x800) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\a\x00'], 0x0, 0x0, 0x0}) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000000480), &(0x7f00000004c0)=0x4) ioctl$UI_DEV_DESTROY(r2, 0x5502) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="b440e7fd1bd1f6c5c6452b6c2339eb976f66b6c1d4f5292eae818d9c7e7a74a6deaa842aa35f3e893d4ea5868800122d55f66b78f3516beafbdd04888d713502c81e30558debd750a073494216900b50796f7b346ae61c8318ec5bceb9b516e2239e565fe7b7fc1edf8ec2cca08b084c8d22a6829b1bb24bac70029cdd741ec875378c7084fa25f1156d4097f58382b15a56cdbd94657d2aacc7e2a7231c294b34bae1a3713e8c04076371866e6e914394ad1d997deabdb6302be6662a14cd497740294a4519634e4a9e0a5d4ac6d89667b4087b800118fb8cf9c4fedc650c55696bdf2224311671ea4f8f71e8191b521abfdd1e5de98ad464101f7c178c35e7f76516da2d62bb2dc2440387913265ae8375c16d6337824cac794c5e8c99cad411073ed6ba700c69f55d9ad939958cdb7bbc9943904a1f5b56ac76556fd21bb4c58caca520b676ffbc49f200fd993026dbd48ef09cd4fbc012a7df91307ce210b2ea311e36c1a87ed68e782ba4a185a1b635d05d4ac1b34ad015dd022ad61f7feebbd450f5a07ee6f62b03e3bd7e7d50e96ecef6e30bc2a40377e021e459bdbf94f400854f21a2259215241c6bf4a1e436193509e27ac57c6518e42df7eab2a73ffcd785ee14821efeb96e878efd3b88120c7778e9f422c618e0614dd5ea79ea06d5c3e88ba397dd3b96171d77ef143a09d1d93bb44795c845a7271e1f1894c97cbedefcc53cedafe1dc004221dc4b451c09b93676d02cca15d7cd385d8e6bbb0d2b4f86a543d6e21af84760141347508e4da8611936cff6f2c84b2faf53434c55765849fd7858add5de4fea0ec98dc5b527a8677a66b70db0ebeb56bbfeaae567c3d1aac1929ac1053d1403cb1c14517769ac05145ff05700632af7a51848634b3b5f74bd894bf099769c65033c0475765934c7a1618b7ac3fbb39154f381466f1ac45ce2ba5c63184cb9f7b2f0aa372e10286b6c6ca4bb11eee3ded181d7c4838d791dc1df98a40b28e485b8ff373fc9e67f73a0a15f2f8e00554bfcacc5b0bf9f7cfb720ee63733597756d1579bd440d393574d08cd44a51d3d3a39a03b48f4ea754b7a404c9d2bb62e968cb05b297699585be683f21edbc7422a56ee26c3864553ff4fd91f7668203417fe3625d36f16a6d088bd3e62dbdff723c52069b0bc6e70cd9330a8ba46823a3349cba55e0b3394b633874dbdbdf45a677744b1842acc02d6ca35937951b3727d8920ac2e5a283035e144df463a529ca09d96f02659b640677620c8e5b49a3d648c32f3c31fe57eefbfdde5a19d10cb0c381ef1c90222fe557e186047c3b5fbb02a841a5d1afd0a6031dd7b6e0bf7dee97494015d22602f5e2c14ea7b498a1a877f57228dfa54eac4de742a69bae82a0e5bd87f25fb9e3675131f87565a92e312ca7afdaf1f8e95600735b2e9ae147b5bb08f162f"}) [ 3333.927179] binder: 31201:31202 ioctl 4020ae46 7fda76f58510 returned -22 [ 3333.941291] binder: 31201:31202 ioctl 4020ae46 7fda76f58510 returned -22 [ 3333.956756] binder: 31201:31202 ioctl 4020ae46 7fda76f58510 returned -22 [ 3333.964675] binder: 31201:31202 ioctl 4020ae46 7fda76f58510 returned -22 03:08:32 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x10004, 0x0, &(0x7f0000000000)="b440e7fd1bd1f6c5c6452b6c2339eb976f66b6c1d4f5292eae818d9c7e7a74a6deaa842aa35f3e893d4ea5868800122d55f66b78f3516beafbdd04888d713502c81e30558debd750a073494216900b50796f7b346ae61c8318ec5bceb9b516e2239e565fe7b7fc1edf8ec2cca08b084c8d22a6829b1bb24bac70029cdd741ec875378c7084fa25f1156d4097f58382b15a56cdbd94657d2aacc7e2a7231c294b34bae1a3713e8c04076371866e6e914394ad1d997deabdb6302be6662a14cd497740294a4519634e4a9e0a5d4ac6d89667b4087b800118fb8cf9c4fedc650c55696bdf2224311671ea4f8f71e8191b521abfdd1e5de98ad464101f7c178c35e7f76516da2d62bb2dc2440387913265ae8375c16d6337824cac794c5e8c99cad411073ed6ba700c69f55d9ad939958cdb7bbc9943904a1f5b56ac76556fd21bb4c58caca520b676ffbc49f200fd993026dbd48ef09cd4fbc012a7df91307ce210b2ea311e36c1a87ed68e782ba4a185a1b635d05d4ac1b34ad015dd022ad61f7feebbd450f5a07ee6f62b03e3bd7e7d50e96ecef6e30bc2a40377e021e459bdbf94f400854f21a2259215241c6bf4a1e436193509e27ac57c6518e42df7eab2a73ffcd785ee14821efeb96e878efd3b88120c7778e9f422c618e0614dd5ea79ea06d5c3e88ba397dd3b96171d77ef143a09d1d93bb44795c845a7271e1f1894c97cbedefcc53cedafe1dc004221dc4b451c09b93676d02cca15d7cd385d8e6bbb0d2b4f86a543d6e21af84760141347508e4da8611936cff6f2c84b2faf53434c55765849fd7858add5de4fea0ec98dc5b527a8677a66b70db0ebeb56bbfeaae567c3d1aac1929ac1053d1403cb1c14517769ac05145ff05700632af7a51848634b3b5f74bd894bf099769c65033c0475765934c7a1618b7ac3fbb39154f381466f1ac45ce2ba5c63184cb9f7b2f0aa372e10286b6c6ca4bb11eee3ded181d7c4838d791dc1df98a40b28e485b8ff373fc9e67f73a0a15f2f8e00554bfcacc5b0bf9f7cfb720ee63733597756d1579bd440d393574d08cd44a51d3d3a39a03b48f4ea754b7a404c9d2bb62e968cb05b297699585be683f21edbc7422a56ee26c3864553ff4fd91f7668203417fe3625d36f16a6d088bd3e62dbdff723c52069b0bc6e70cd9330a8ba46823a3349cba55e0b3394b633874dbdbdf45a677744b1842acc02d6ca35937951b3727d8920ac2e5a283035e144df463a529ca09d96f02659b640677620c8e5b49a3d648c32f3c31fe57eefbfdde5a19d10cb0c381ef1c90222fe557e186047c3b5fbb02a841a5d1afd0a6031dd7b6e0bf7dee97494015d22602f5e2c14ea7b498a1a877f57228dfa54eac4de742a69bae82a0e5bd87f25fb9e3675131f87565a92e312ca7afdaf1f8e95600735b2e9ae147b5bb08f162f"}) [ 3333.978649] binder: 31201:31202 ioctl 4020ae46 7fda76f58510 returned -22 [ 3334.004006] binder: 31201:31202 ioctl 4020ae46 7fda76f58510 returned -22 [ 3334.016389] binder: 31224:31227 unknown command 458752 [ 3334.027026] binder: 31201:31202 ioctl 4020ae46 7fda76f58510 returned -22 [ 3334.045921] binder: 31224:31227 ioctl c0306201 200000c0 returned -22 [ 3334.053059] binder: 31201:31202 ioctl 4020ae46 7fda76f58510 returned -22 [ 3334.053078] binder: 31201:31202 ioctl 4020ae46 7fda76f58510 returned -22 [ 3334.053094] binder: 31201:31202 ioctl 4020ae46 7fda76f58530 returned -22 03:08:32 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x10004, 0x0, &(0x7f0000000000)="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"}) [ 3334.069954] binder: 31224:31230 ioctl 5502 0 returned -22 03:08:32 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xffffffff7fffffff, 0x80080) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) r7 = dup2(r6, r5) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) r8 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r9 = syz_open_dev$binderN(0x0, 0x0, 0x0) r10 = dup2(r9, r8) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x1404, 0x200, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) bind$l2tp6(r7, &(0x7f0000000080)={0xa, 0x0, 0xfff, @rand_addr=' \x01\x00', 0x7, 0x4}, 0x20) ioctl$TIOCGICOUNT(r4, 0x545d, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 03:08:32 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x10004, 0x0, &(0x7f0000000000)="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"}) [ 3334.183800] binder: 31224:31230 unknown command 458752 [ 3334.190322] binder: 31224:31230 ioctl c0306201 200000c0 returned -22 [ 3334.205866] binder: 31224:31236 ioctl 5502 0 returned -22 03:08:32 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000440)={0x2, {0x2, 0x7, 0x8000, 0x4, 0x4, 0x1}}) [ 3334.254149] binder: 31239:31244 ioctl 4020ae46 7fda76f58510 returned -22 [ 3334.270753] binder: 31239:31244 ioctl 4020ae46 7fda76f58510 returned -22 03:08:32 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x0, 0x0, &(0x7f0000000000)="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"}) [ 3334.311728] binder: 31239:31244 ioctl 4020ae46 7fda76f58510 returned -22 [ 3334.335756] binder: 31239:31244 ioctl 4020ae46 7fda76f58510 returned -22 [ 3334.348274] binder: 31246:31249 ioctl 541c 20000440 returned -22 [ 3334.365973] binder: 31239:31244 ioctl 4020ae46 7fda76f58510 returned -22 [ 3334.385554] binder: 31246:31253 ioctl 541c 20000440 returned -22 [ 3334.395710] binder: 31239:31244 ioctl 4020ae46 7fda76f58510 returned -22 03:08:32 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x0, 0x0, &(0x7f0000000000)="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"}) 03:08:32 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r4) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$IMGETDEVINFO(r6, 0x80044944, &(0x7f0000000440)={0x3}) [ 3334.420511] binder: 31239:31244 ioctl 4020ae46 7fda76f58510 returned -22 [ 3334.443534] binder: 31239:31244 ioctl 4020ae46 7fda76f58510 returned -22 [ 3334.460634] binder: 31239:31244 ioctl 4020ae46 7fda76f58510 returned -22 [ 3334.482548] binder: 31239:31244 ioctl 4020ae46 7fda76f58510 returned -22 [ 3334.507848] binder: 31239:31244 ioctl 4020ae46 7fda76f58510 returned -22 03:08:32 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x0, 0x0, &(0x7f0000000000)="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"}) [ 3334.535389] binder: 31239:31244 ioctl 4020ae46 7fda76f58510 returned -22 [ 3334.565467] binder: 31257:31259 ioctl 80044944 20000440 returned -22 [ 3334.565544] binder: 31239:31244 ioctl 4020ae46 7fda76f58510 returned -22 03:08:33 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x10004, 0x0, 0x0}) [ 3334.591657] binder: 31257:31262 ioctl 80044944 20000440 returned -22 [ 3334.622466] binder: 31239:31244 ioctl 4020ae46 7fda76f58510 returned -22 [ 3334.654732] binder: 31239:31244 ioctl 4020ae46 7fda76f58510 returned -22 [ 3334.677793] binder: 31239:31244 ioctl 4020ae46 7fda76f58510 returned -22 [ 3334.702818] binder: 31239:31244 ioctl 4020ae46 7fda76f58510 returned -22 03:08:33 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x10004, 0x0, 0x0}) 03:08:33 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @local, 0x6}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x66, &(0x7f0000000300)={r5, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x90) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000440)={r5}, &(0x7f0000000480)=0x8) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3334.732566] binder: 31239:31244 ioctl 4020ae46 7fda76f58510 returned -22 [ 3334.754356] binder: 31239:31244 ioctl 4020ae46 7fda76f58510 returned -22 [ 3334.782164] binder: 31239:31244 ioctl 4020ae46 7fda76f58510 returned -22 [ 3334.804754] binder: 31239:31244 ioctl 4020ae46 7fda76f58510 returned -22 [ 3334.829748] binder: 31239:31244 ioctl 4020ae46 7fda76f58510 returned -22 03:08:33 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x10004, 0x0, 0x0}) [ 3334.859988] binder: 31239:31244 ioctl 4020ae46 7fda76f58510 returned -22 [ 3334.895676] binder: 31239:31244 ioctl 4020ae46 7fda76f58510 returned -22 [ 3334.922124] binder: 31239:31244 ioctl 4020ae46 7fda76f58530 returned -22 03:08:33 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0xc5) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/pfkey\x00', 0x10040, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/552], 0x228) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:33 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 3334.996221] binder: 31281:31282 ioctl aea2 c5 returned -22 [ 3335.010944] binder: 31281:31283 ioctl aea2 c5 returned -22 03:08:33 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:33 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b4a, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3335.066077] binder: 31286:31288 ioctl 4020ae46 7fda76f58510 returned -22 [ 3335.095832] binder: 31286:31288 ioctl 4020ae46 7fda76f58510 returned -22 [ 3335.121357] binder: 31286:31288 ioctl 4020ae46 7fda76f58510 returned -22 [ 3335.157097] binder: 31286:31288 ioctl 4020ae46 7fda76f58510 returned -22 03:08:33 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b4a, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:33 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/full\x00', 0x10000, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000500)=@int=0x80000000, 0x4) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000440)=[0x100, 0x6, 0xffffd2bc, 0x9, 0x7, 0x0], 0x6, 0x800, 0x0, r3}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000400)={0x0, 0x400, 0x9, 0x16, 0xab, &(0x7f0000000000)="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"}) [ 3335.174642] binder: 31286:31288 ioctl 4020ae46 7fda76f58510 returned -22 [ 3335.183832] binder: 31286:31288 ioctl 4020ae46 7fda76f58510 returned -22 [ 3335.204336] binder: 31286:31288 ioctl 4020ae46 7fda76f58510 returned -22 [ 3335.235852] binder: 31286:31288 ioctl 4020ae46 7fda76f58510 returned -22 [ 3335.261810] binder: 31286:31288 ioctl 4020ae46 7fda76f58510 returned -22 [ 3335.279273] binder: 31299:31300 ioctl c01864c6 20000480 returned -22 03:08:33 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b4a, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3335.295926] binder: 31286:31288 ioctl 4020ae46 7fda76f58510 returned -22 [ 3335.320368] binder: 31299:31305 ioctl c01864c6 20000480 returned -22 [ 3335.333255] binder: 31286:31288 ioctl 4020ae46 7fda76f58510 returned -22 [ 3335.357024] binder: 31286:31288 ioctl 4020ae46 7fda76f58510 returned -22 [ 3335.375579] binder: 31286:31288 ioctl 4020ae46 7fda76f58510 returned -22 [ 3335.383316] binder: 31286:31288 ioctl 4020ae46 7fda76f58510 returned -22 [ 3335.395847] binder: 31286:31288 ioctl 4020ae46 7fda76f58510 returned -22 03:08:33 executing program 5: ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b4a, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3335.404243] binder: 31286:31288 ioctl 4020ae46 7fda76f58510 returned -22 03:08:33 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$radio(&(0x7f0000000440)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000480)={0x1, "4c6fdf7fa883303dfa2f2cb7fcb17a4ec434fe298176ed3ec16c5c66e12314f4", 0x2, 0x40, 0x3, 0x8, 0x8, 0x2, 0x8, 0x1ff}) syz_open_dev$vivid(&(0x7f0000000500)='/dev/video#\x00', 0x2, 0x2) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="b440e7fd1bd1f6c5c6452b6c2339eb976f66b6c1d4f5292eae818d9c7e7a74a6deaa842aa35f3e893d4ea5868800122d55f66b78f3516beafbdd04888d713502c81e30558debd750a073494216900b50796f7b346ae61c8318ec5bceb9b516e2239e565fe7b7fc1edf8ec2cca08b084c8d22a6829b1bb24bac70029cdd741ec875378c7084fa25f1156d4097f58382b15a56cdbd94657d2aacc7e2a7231c294b34bae1a3713e8c04076371866e6e914394ad1d997deabdb6302be6662a14cd497740294a4519634e4a9e0a5d4ac6d89667b4087b800118fb8cf9c4fedc650c55696bdf2224311671ea4f8f71e8191b521abfdd1e5de98ad464101f7c178c35e7f76516da2d62bb2dc2440387913265ae8375c16d6337824cac794c5e8c99cad411073ed6ba700c69f55d9ad939958cdb7bbc9943904a1f5b56ac76556fd21bb4c58caca520b676ffbc49f200fd993026dbd48ef09cd4fbc012a7df91307ce210b2ea311e36c1a87ed68e782ba4a185a1b635d05d4ac1b34ad015dd022ad61f7feebbd450f5a07ee6f62b03e3bd7e7d50e96ecef6e30bc2a40377e021e459bdbf94f400854f21a2259215241c6bf4a1e436193509e27ac57c6518e42df7eab2a73ffcd785ee14821efeb96e878efd3b88120c7778e9f422c618e0614dd5ea79ea06d5c3e88ba397dd3b96171d77ef143a09d1d93bb44795c845a7271e1f1894c97cbedefcc53cedafe1dc004221dc4b451c09b93676d02cca15d7cd385d8e6bbb0d2b4f86a543d6e21af84760141347508e4da8611936cff6f2c84b2faf53434c55765849fd7858add5de4fea0ec98dc5b527a8677a66b70db0ebeb56bbfeaae567c3d1aac1929ac1053d1403cb1c14517769ac05145ff05700632af7a51848634b3b5f74bd894bf099769c65033c0475765934c7a1618b7ac3fbb39154f381466f1ac45ce2ba5c63184cb9f7b2f0aa372e10286b6c6ca4bb11eee3ded181d7c4838d791dc1df98a40b28e485b8ff373fc9e67f73a0a15f2f8e00554bfcacc5b0bf9f7cfb720ee63733597756d1579bd440d393574d08cd44a51d3d3a39a03b48f4ea754b7a404c9d2bb62e968cb05b297699585be683f21edbc7422a56ee26c3864553ff4fd91f7668203417fe3625d36f16a6d088bd3e62dbdff723c52069b0bc6e70cd9330a8ba46823a3349cba55e0b3394b633874dbdbdf45a677744b1842acc02d6ca35937951b3727d8920ac2e5a283035e144df463a529ca09d96f02659b640677620c8e5b49a3d648c32f3c31fe57eefbfdde5a19d10cb0c381ef1c90222fe557e186047c3b5fbb02a841a5d1afd0a6031dd7b6e0bf7dee97494015d22602f5e2c14ea7b498a1a877f57228dfa54eac4de742a69bae82a0e5bd87f25fb9e3675131f87565a92e312ca7afdaf1f8e95600735b2e9ae147b5bb08f162f"}) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$VIDIOC_G_INPUT(r4, 0x80045626, &(0x7f0000000540)) [ 3335.463568] binder: 31286:31288 ioctl 4020ae46 7fda76f58510 returned -22 [ 3335.487769] binder: 31286:31288 ioctl 4020ae46 7fda76f58510 returned -22 [ 3335.494668] binder: 31286:31288 ioctl 4020ae46 7fda76f58510 returned -22 03:08:33 executing program 5: ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b4a, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3335.509029] binder: 31286:31288 ioctl 4020ae46 7fda76f58510 returned -22 [ 3335.532185] binder: 31311:31313 ioctl 80045626 20000540 returned -22 [ 3335.542058] binder: 31286:31288 ioctl 4020ae46 7fda76f58510 returned -22 [ 3335.561781] binder: 31286:31288 ioctl 4020ae46 7fda76f58510 returned -22 03:08:34 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) write(r1, &(0x7f0000000440), 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:34 executing program 5: ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b4a, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3335.589585] binder: 31286:31288 ioctl 4020ae46 7fda76f58510 returned -22 [ 3335.625074] binder: 31286:31288 ioctl 4020ae46 7fda76f58510 returned -22 [ 3335.666010] binder: 31286:31288 ioctl 4020ae46 7fda76f58530 returned -22 03:08:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b4a, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="b440e7fd1bd1f6c5c6452b6c2339eb976f66b6c1d4f5292eae818d9c7e7a74a6deaa842aa35f3e893d4ea5868800122d55f66b78f3516beafbdd04888d713502c81e30558debd750a073494216900b50796f7b346ae61c8318ec5bceb9b516e2239e565fe7b7fc1edf8ec2cca08b084c8d22a6829b1bb24bac70029cdd741ec875378c7084fa25f1156d4097f58382b15a56cdbd94657d2aacc7e2a7231c294b34bae1a3713e8c04076371866e6e914394ad1d997deabdb6302be6662a14cd497740294a4519634e4a9e0a5d4ac6d89667b4087b800118fb8cf9c4fedc650c55696bdf2224311671ea4f8f71e8191b521abfdd1e5de98ad464101f7c178c35e7f76516da2d62bb2dc2440387913265ae8375c16d6337824cac794c5e8c99cad411073ed6ba700c69f55d9ad939958cdb7bbc9943904a1f5b56ac76556fd21bb4c58caca520b676ffbc49f200fd993026dbd48ef09cd4fbc012a7df91307ce210b2ea311e36c1a87ed68e782ba4a185a1b635d05d4ac1b34ad015dd022ad61f7feebbd450f5a07ee6f62b03e3bd7e7d50e96ecef6e30bc2a40377e021e459bdbf94f400854f21a2259215241c6bf4a1e436193509e27ac57c6518e42df7eab2a73ffcd785ee14821efeb96e878efd3b88120c7778e9f422c618e0614dd5ea79ea06d5c3e88ba397dd3b96171d77ef143a09d1d93bb44795c845a7271e1f1894c97cbedefcc53cedafe1dc004221dc4b451c09b93676d02cca15d7cd385d8e6bbb0d2b4f86a543d6e21af84760141347508e4da8611936cff6f2c84b2faf53434c55765849fd7858add5de4fea0ec98dc5b527a8677a66b70db0ebeb56bbfeaae567c3d1aac1929ac1053d1403cb1c14517769ac05145ff05700632af7a51848634b3b5f74bd894bf099769c65033c0475765934c7a1618b7ac3fbb39154f381466f1ac45ce2ba5c63184cb9f7b2f0aa372e10286b6c6ca4bb11eee3ded181d7c4838d791dc1df98a40b28e485b8ff373fc9e67f73a0a15f2f8e00554bfcacc5b0bf9f7cfb720ee63733597756d1579bd440d393574d08cd44a51d3d3a39a03b48f4ea754b7a404c9d2bb62e968cb05b297699585be683f21edbc7422a56ee26c3864553ff4fd91f7668203417fe3625d36f16a6d088bd3e62dbdff723c52069b0bc6e70cd9330a8ba46823a3349cba55e0b3394b633874dbdbdf45a677744b1842acc02d6ca35937951b3727d8920ac2e5a283035e144df463a529ca09d96f02659b640677620c8e5b49a3d648c32f3c31fe57eefbfdde5a19d10cb0c381ef1c90222fe557e186047c3b5fbb02a841a5d1afd0a6031dd7b6e0bf7dee97494015d22602f5e2c14ea7b498a1a877f57228dfa54eac4de742a69bae82a0e5bd87f25fb9e3675131f87565a92e312ca7afdaf1f8e95600735b2e9ae147b5bb08f162f"}) 03:08:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x20, 0x2, [@TCA_RSVP_CLASSID={0x8}, @TCA_RSVP_DST={0x14, 0x2, @private2}]}}]}, 0x50}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r9, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xfff1}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x20, 0x2, [@TCA_RSVP_CLASSID={0x8}, @TCA_RSVP_DST={0x14, 0x2, @private2}]}}]}, 0x50}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x170, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKINFO_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) 03:08:34 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b4a, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:34 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x420080, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x8001, 0xc0100) r4 = dup2(r1, r0) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) r7 = dup2(r6, r5) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r7, 0x894b, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) 03:08:34 executing program 3: gettid() r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x17, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048000}, 0x80) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="b440e7fd1bd1f6c5c6452b6c2339eb976f66b6c1d4f5292eae818d9c7e7a74a6deaa842aa35f3e893d4ea5868800122d55f66b78f3516beafbdd04888d713502c81e30558debd750a073494216900b50796f7b346ae61c8318ec5bceb9b516e2239e565fe7b7fc1edf8ec2cca08b084c8d22a6829b1bb24bac70029cdd741ec875378c7084fa25f1156d4097f58382b15a56cdbd94657d2aacc7e2a7231c294b34bae1a3713e8c04076371866e6e914394ad1d997deabdb6302be6662a14cd497740294a4519634e4a9e0a5d4ac6d89667b4087b800118fb8cf9c4fedc650c55696bdf2224311671ea4f8f71e8191b521abfdd1e5de98ad464101f7c178c35e7f76516da2d62bb2dc2440387913265ae8375c16d6337824cac794c5e8c99cad411073ed6ba700c69f55d9ad939958cdb7bbc9943904a1f5b56ac76556fd21bb4c58caca520b676ffbc49f200fd993026dbd48ef09cd4fbc012a7df91307ce210b2ea311e36c1a87ed68e782ba4a185a1b635d05d4ac1b34ad015dd022ad61f7feebbd450f5a07ee6f62b03e3bd7e7d50e96ecef6e30bc2a40377e021e459bdbf94f400854f21a2259215241c6bf4a1e436193509e27ac57c6518e42df7eab2a73ffcd785ee14821efeb96e878efd3b88120c7778e9f422c618e0614dd5ea79ea06d5c3e88ba397dd3b96171d77ef143a09d1d93bb44795c845a7271e1f1894c97cbedefcc53cedafe1dc004221dc4b451c09b93676d02cca15d7cd385d8e6bbb0d2b4f86a543d6e21af84760141347508e4da8611936cff6f2c84b2faf53434c55765849fd7858add5de4fea0ec98dc5b527a8677a66b70db0ebeb56bbfeaae567c3d1aac1929ac1053d1403cb1c14517769ac05145ff05700632af7a51848634b3b5f74bd894bf099769c65033c0475765934c7a1618b7ac3fbb39154f381466f1ac45ce2ba5c63184cb9f7b2f0aa372e10286b6c6ca4bb11eee3ded181d7c4838d791dc1df98a40b28e485b8ff373fc9e67f73a0a15f2f8e00554bfcacc5b0bf9f7cfb720ee63733597756d1579bd440d393574d08cd44a51d3d3a39a03b48f4ea754b7a404c9d2bb62e968cb05b297699585be683f21edbc7422a56ee26c3864553ff4fd91f7668203417fe3625d36f16a6d088bd3e62dbdff723c52069b0bc6e70cd9330a8ba46823a3349cba55e0b3394b633874dbdbdf45a677744b1842acc02d6ca35937951b3727d8920ac2e5a283035e144df463a529ca09d96f02659b640677620c8e5b49a3d648c32f3c31fe57eefbfdde5a19d10cb0c381ef1c90222fe557e186047c3b5fbb02a841a5d1afd0a6031dd7b6e0bf7dee97494015d22602f5e2c14ea7b498a1a877f57228dfa54eac4de742a69bae82a0e5bd87f25fb9e3675131f87565a92e312ca7afdaf1f8e95600735b2e9ae147b5bb08f162f"}) [ 3335.844107] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3335.862455] binder: 31331:31333 ioctl 894b 20000100 returned -22 03:08:34 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b4a, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="b440e7fd1bd1f6c5c6452b6c2339eb976f66b6c1d4f5292eae818d9c7e7a74a6deaa842aa35f3e893d4ea5868800122d55f66b78f3516beafbdd04888d713502c81e30558debd750a073494216900b50796f7b346ae61c8318ec5bceb9b516e2239e565fe7b7fc1edf8ec2cca08b084c8d22a6829b1bb24bac70029cdd741ec875378c7084fa25f1156d4097f58382b15a56cdbd94657d2aacc7e2a7231c294b34bae1a3713e8c04076371866e6e914394ad1d997deabdb6302be6662a14cd497740294a4519634e4a9e0a5d4ac6d89667b4087b800118fb8cf9c4fedc650c55696bdf2224311671ea4f8f71e8191b521abfdd1e5de98ad464101f7c178c35e7f76516da2d62bb2dc2440387913265ae8375c16d6337824cac794c5e8c99cad411073ed6ba700c69f55d9ad939958cdb7bbc9943904a1f5b56ac76556fd21bb4c58caca520b676ffbc49f200fd993026dbd48ef09cd4fbc012a7df91307ce210b2ea311e36c1a87ed68e782ba4a185a1b635d05d4ac1b34ad015dd022ad61f7feebbd450f5a07ee6f62b03e3bd7e7d50e96ecef6e30bc2a40377e021e459bdbf94f400854f21a2259215241c6bf4a1e436193509e27ac57c6518e42df7eab2a73ffcd785ee14821efeb96e878efd3b88120c7778e9f422c618e0614dd5ea79ea06d5c3e88ba397dd3b96171d77ef143a09d1d93bb44795c845a7271e1f1894c97cbedefcc53cedafe1dc004221dc4b451c09b93676d02cca15d7cd385d8e6bbb0d2b4f86a543d6e21af84760141347508e4da8611936cff6f2c84b2faf53434c55765849fd7858add5de4fea0ec98dc5b527a8677a66b70db0ebeb56bbfeaae567c3d1aac1929ac1053d1403cb1c14517769ac05145ff05700632af7a51848634b3b5f74bd894bf099769c65033c0475765934c7a1618b7ac3fbb39154f381466f1ac45ce2ba5c63184cb9f7b2f0aa372e10286b6c6ca4bb11eee3ded181d7c4838d791dc1df98a40b28e485b8ff373fc9e67f73a0a15f2f8e00554bfcacc5b0bf9f7cfb720ee63733597756d1579bd440d393574d08cd44a51d3d3a39a03b48f4ea754b7a404c9d2bb62e968cb05b297699585be683f21edbc7422a56ee26c3864553ff4fd91f7668203417fe3625d36f16a6d088bd3e62dbdff723c52069b0bc6e70cd9330a8ba46823a3349cba55e0b3394b633874dbdbdf45a677744b1842acc02d6ca35937951b3727d8920ac2e5a283035e144df463a529ca09d96f02659b640677620c8e5b49a3d648c32f3c31fe57eefbfdde5a19d10cb0c381ef1c90222fe557e186047c3b5fbb02a841a5d1afd0a6031dd7b6e0bf7dee97494015d22602f5e2c14ea7b498a1a877f57228dfa54eac4de742a69bae82a0e5bd87f25fb9e3675131f87565a92e312ca7afdaf1f8e95600735b2e9ae147b5bb08f162f"}) [ 3335.886251] binder: 31331:31333 ioctl 4020ae46 7fda76f58510 returned -22 [ 3335.933420] binder: 31331:31333 ioctl 4020ae46 7fda76f58510 returned -22 [ 3335.946753] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 03:08:34 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000580)) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/qat_adf_ctl\x00', 0x763003, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000480)={0xc, @sliced={0x1000, [0x6, 0x8f76, 0x1ff, 0x40, 0x8, 0x1000, 0x6, 0x3f, 0x3, 0x2, 0x2, 0x0, 0xfff, 0xff, 0xcd92, 0x1, 0x1, 0x4, 0x0, 0x200, 0x4, 0x1, 0x188a, 0x3, 0x4, 0x948, 0x800, 0xae, 0x1, 0x80, 0x15, 0x4, 0x1e, 0x2, 0x4, 0x9, 0x8, 0xc1c8, 0x5, 0x3f, 0x3, 0x7, 0x100, 0x0, 0xfbdf, 0x9, 0x3, 0x208c], 0x4800}}) 03:08:34 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b4a, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3335.982649] binder: 31331:31333 ioctl 4020ae46 7fda76f58510 returned -22 [ 3336.016241] binder: 31331:31333 ioctl 4020ae46 7fda76f58510 returned -22 [ 3336.040466] binder: 31351:31355 ioctl 5459 20000580 returned -22 [ 3336.052516] binder: 31331:31333 ioctl 4020ae46 7fda76f58510 returned -22 [ 3336.078564] binder: 31331:31333 ioctl 4020ae46 7fda76f58510 returned -22 03:08:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b4a, 0x0) [ 3336.088996] binder: 31331:31333 ioctl 4020ae46 7fda76f58510 returned -22 [ 3336.108319] binder: 31351:31355 ioctl 5459 20000580 returned -22 [ 3336.127427] binder: 31331:31333 ioctl 4020ae46 7fda76f58510 returned -22 [ 3336.153184] binder: 31331:31333 ioctl 4020ae46 7fda76f58510 returned -22 [ 3336.179719] binder: 31331:31333 ioctl 4020ae46 7fda76f58510 returned -22 03:08:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b4a, 0x0) [ 3336.213125] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3336.225130] binder: 31331:31333 ioctl 4020ae46 7fda76f58510 returned -22 [ 3336.248236] binder: 31331:31333 ioctl 4020ae46 7fda76f58510 returned -22 03:08:34 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, [], 0x1}}, 0x1c) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RWALK(r2, &(0x7f00000004c0)={0x57, 0x6f, 0x1, {0x6, [{0xf07d15e0a58f1c81, 0x2, 0x7}, {0x8, 0x0, 0x6}, {}, {0x10, 0x3, 0x2}, {0x0, 0x3, 0x5}, {0x4, 0x0, 0x4}]}}, 0x57) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000440)={0x3, [0x0, 0x0, 0x0]}) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1c}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x800) [ 3336.251554] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3336.275983] binder: 31331:31333 ioctl 4020ae46 7fda76f58510 returned -22 [ 3336.297791] binder: 31331:31333 ioctl 4020ae46 7fda76f58510 returned -22 03:08:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b4a, 0x0) [ 3336.339430] binder: 31331:31333 ioctl 4020ae46 7fda76f58510 returned -22 [ 3336.371235] binder: 31331:31333 ioctl 4020ae46 7fda76f58510 returned -22 03:08:34 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x70080) [ 3336.417080] binder: 31331:31333 ioctl 4020ae46 7fda76f58510 returned -22 [ 3336.440255] binder: 31331:31333 ioctl 4020ae46 7fda76f58510 returned -22 03:08:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b4a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3336.478912] binder: 31331:31333 ioctl 4020ae46 7fda76f58510 returned -22 [ 3336.510073] binder: 31331:31333 ioctl 4020ae46 7fda76f58510 returned -22 03:08:34 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x109a41) [ 3336.534786] binder: 31331:31333 ioctl 4020ae46 7fda76f58510 returned -22 [ 3336.559593] binder: 31331:31333 ioctl 4020ae46 7fda76f58510 returned -22 [ 3336.584476] binder: 31331:31333 ioctl 4020ae46 7fda76f58510 returned -22 [ 3336.614075] binder: 31331:31333 ioctl 4020ae46 7fda76f58510 returned -22 03:08:35 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo\x00') ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000180)={0x2d}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) setsockopt$netrom_NETROM_IDLE(r5, 0x103, 0x7, &(0x7f00000001c0)=0xd9, 0x4) r6 = dup2(r2, r1) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r9 = syz_open_dev$binderN(0x0, 0x0, 0x0) r10 = dup2(r9, r8) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$EVIOCGUNIQ(r10, 0x80404508, &(0x7f0000000040)=""/97) 03:08:35 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xa34, 0x202) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000000)) read$usbfs(r0, &(0x7f0000000080)=""/66, 0x42) 03:08:35 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$rtc(&(0x7f0000000600)='/dev/rtc#\x00', 0x1ff, 0x8400) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xe0, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'veth0\x00'}}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'veth0_vlan\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'team0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_to_team\x00'}}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1e6d2243}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x463}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd0e0}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x79d}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x81}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x40800) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:35 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b4a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)="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"}) [ 3336.745871] binder: 31393:31394 ioctl 4020ae46 7fda76f58510 returned -22 [ 3336.760747] binder: 31393:31394 ioctl 4020ae46 7fda76f58510 returned -22 [ 3336.779587] binder: 31393:31394 ioctl 4020ae46 7fda76f58510 returned -22 03:08:35 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b4a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:08:35 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r4) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='@'], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_REFRESH(r6, 0x2402, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 03:08:35 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="cd39f9a8afe65e1548457549f57cc35e0dcaf1bc87d863b581d8d11f1c3f9dad5bac2922e5d6cd3b73ee47c3b5d6677234be211a7867c8f6e28687783f171dee8d840ddd6dd43a0c322fe94c9f1ad41f0994aa73f09eef837ed0d2f274f9b304a9634bc0dab86cdf4ec312682fbc2e3e03cbc49924003e82461c9ba685bb6d627c29f255b07af425b47068e421973d3b519ba866a213"], 0x0, 0x0, 0x0}) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x5381) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x84140) pause() [ 3336.909776] binder: 31406:31408 ioctl 4020ae46 7fda76f58510 returned -22 [ 3336.935275] binder: 31406:31408 ioctl 4020ae46 7fda76f58510 returned -22 03:08:35 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$VIDIOC_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000000)={0x6, 0x0, [], {0x0, @bt={0x1f, 0x400, 0x0, 0x7, 0x4, 0x8, 0x688, 0x4, 0xfff, 0x8, 0x7, 0x10001, 0x5, 0xffffffff, 0x0, 0x22, {0x725fc5b8, 0x800}, 0xa5, 0x9f}}}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000440)="b440e7fd1bd1f6c5c6452b6c2339eb976f66b6c1d4f5292eae818d9c7e7a74a6deaa842aa35f3e893d4ea5868800122d55f66b78f3516beafbdd04888d713502c81e30558debd750a073494216900b50796f7b346ae61c8318ec5bceb9b516e2239e565fe7b7fc1edf8ec2cca08b084c8d22a6829b1bb24bac70029cdd741ec875378c7084fa25f1156d4097f58382b15a56cdbd94657d2aacc7e2a7231c294b34bae1a3713e8c04076371866e6e914394ad1d997deabdb6302be6662a14cd497740294a4519634e4a9e0a5d4ac6d89667b4087b800118fb8cf9c4fedc650c55696bdf2224311671ea4f8f71e8191b521abfdd1e5de98ad464101f7c178c35e7f76516da2d62bb2dc2440387913265ae8375c16d6337824cac794c5e8c99cad411073ed6ba700c69f55d9ad939958cdb7bbc9943904a1f5b56ac76556fd21bb4c58caca520b676ffbc49f200fd993026dbd48ef09cd4fbc012a7df91307ce210b2ea311e36c1a87ed68e782ba4a185a1b635d05d4ac1b34ad015dd022ad61f7feebbd450f5a07ee6f62b03e3bd7e7d50e96ecef6e30bc2a40377e021e459bdbf94f400854f21a2259215241c6bf4a1e436193509e27ac57c6518e42df7eab2a73ffcd785ee14821efeb96e878efd3b88120c7778e9f422c618e0614dd5ea79ea06d5c3e88ba397dd3b96171d77ef143a09d1d93bb44795c845a7271e1f1894c97cbedefcc53cedafe1dc004221dc4b451c09b93676d02cca15d7cd385d8e6bbb0d2b4f86a543d6e21af84760141347508e4da8611936cff6f2c84b2faf53434c55765849fd7858add5de4fea0ec98dc5b527a8677a66b70db0ebeb56bbfeaae567c3d1aac1929ac1053d1403cb1c14517769ac05145ff05700632af7a51848634b3b5f74bd894bf099769c65033c0475765934c7a1618b7ac3fbb39154f381466f1ac45ce2ba5c63184cb9f7b2f0aa372e10286b6c6ca4bb11eee3ded181d7c4838d791dc1df98a40b28e485b8ff373fc9e67f73a0a15f2f8e00554bfcacc5b0bf9f7cfb720ee63733597756d1579bd440d393574d08cd44a51d3d3a39a03b48f4ea754b7a404c9d2bb62e968cb05b297699585be683f21edbc7422a56ee26c3864553ff4fd91f7668203417fe3625d36f16a6d088bd3e62dbdff723c52069b0bc6e70cd9330a8ba46823a3349cba55e0b3394b633874dbdbdf45a677744b1842acc02d6ca35937951b3727d8920ac2e5a283035e144df463a529ca09d96f02659b640677620c8e5b49a3d648c32f3c31fe57eefbfdde5a19d10cb0c381ef1c90222fe557e186047c3b5fbb02a841a5d1afd0a6031dd7b6e0bf7dee97494015d22602f5e2c14ea7b498a1a877f57228dfa54eac4de742a69bae82a0e5bd87f25fb9e3675131f87565a92e312ca7afdaf1f8e95600735b2e9ae147b5bb08f162f"}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) [ 3336.963452] binder: 31406:31413 unknown command 64 [ 3336.969139] binder: 31406:31408 ioctl 4020ae46 7fda76f58510 returned -22 [ 3336.984109] binder: 31410:31412 unknown command -1460061747 [ 3336.994474] binder: 31406:31413 ioctl c0306201 200000c0 returned -22 [ 3337.002601] binder: 31410:31412 ioctl c0306201 200000c0 returned -22 03:08:35 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b49, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3337.009269] binder: 31406:31408 ioctl 4020ae46 7fda76f58510 returned -22 [ 3337.015156] binder: 31406:31417 ioctl 2402 8 returned -22 [ 3337.017100] binder: 31406:31408 ioctl 4020ae46 7fda76f58510 returned -22 [ 3337.017117] binder: 31406:31408 ioctl 4020ae46 7fda76f58510 returned -22 [ 3337.017133] binder: 31406:31408 ioctl 4020ae46 7fda76f58510 returned -22 [ 3337.028215] binder: 31414:31418 ioctl c0945662 20000000 returned -22 [ 3337.054016] binder: 31410:31419 ioctl 5381 0 returned -22 03:08:35 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b49, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3337.099828] binder: 31414:31423 unknown command 0 [ 3337.105778] binder: 31414:31423 ioctl c0306201 200000c0 returned -22 [ 3337.110215] binder: 31406:31408 ioctl 4020ae46 7fda76f58510 returned -22 [ 3337.115979] binder: 31414:31424 ioctl c0945662 20000000 returned -22 [ 3337.147182] binder: 31406:31408 ioctl 4020ae46 7fda76f58510 returned -22 [ 3337.176513] binder: 31406:31408 ioctl 4020ae46 7fda76f58510 returned -22 [ 3337.204749] binder: 31406:31408 ioctl 4020ae46 7fda76f58510 returned -22 03:08:35 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b49, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:35 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) accept4$phonet_pipe(r5, &(0x7f0000000540), &(0x7f0000000580)=0x10, 0xc00) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000440)=""/224) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x2017, 0x2, 0x0, &(0x7f0000000000)="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"}) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r5, 0x81785501, &(0x7f00000005c0)=""/153) [ 3337.239315] binder: 31406:31408 ioctl 4020ae46 7fda76f58510 returned -22 [ 3337.267201] binder: 31406:31408 ioctl 4020ae46 7fda76f58510 returned -22 [ 3337.282548] binder: 31406:31408 ioctl 4020ae46 7fda76f58510 returned -22 [ 3337.319627] binder: 31406:31408 ioctl 4020ae46 7fda76f58510 returned -22 [ 3337.340275] binder: 31434:31435 ioctl 80084502 20000440 returned -22 [ 3337.362909] binder: 31406:31408 ioctl 4020ae46 7fda76f58510 returned -22 03:08:35 executing program 5: ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b49, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3337.384308] binder: 31434:31435 ioctl 81785501 200005c0 returned -22 [ 3337.397056] binder: 31406:31408 ioctl 4020ae46 7fda76f58510 returned -22 [ 3337.414614] binder: 31406:31408 ioctl 4020ae46 7fda76f58510 returned -22 [ 3337.438141] binder: 31434:31435 ioctl 80084502 20000440 returned -22 [ 3337.448077] binder: 31434:31440 ioctl 81785501 200005c0 returned -22 [ 3337.450755] binder: 31406:31408 ioctl 4020ae46 7fda76f58510 returned -22 03:08:35 executing program 5: ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b49, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="b440e7fd1bd1f6c5c6452b6c2339eb976f66b6c1d4f5292eae818d9c7e7a74a6deaa842aa35f3e893d4ea5868800122d55f66b78f3516beafbdd04888d713502c81e30558debd750a073494216900b50796f7b346ae61c8318ec5bceb9b516e2239e565fe7b7fc1edf8ec2cca08b084c8d22a6829b1bb24bac70029cdd741ec875378c7084fa25f1156d4097f58382b15a56cdbd94657d2aacc7e2a7231c294b34bae1a3713e8c04076371866e6e914394ad1d997deabdb6302be6662a14cd497740294a4519634e4a9e0a5d4ac6d89667b4087b800118fb8cf9c4fedc650c55696bdf2224311671ea4f8f71e8191b521abfdd1e5de98ad464101f7c178c35e7f76516da2d62bb2dc2440387913265ae8375c16d6337824cac794c5e8c99cad411073ed6ba700c69f55d9ad939958cdb7bbc9943904a1f5b56ac76556fd21bb4c58caca520b676ffbc49f200fd993026dbd48ef09cd4fbc012a7df91307ce210b2ea311e36c1a87ed68e782ba4a185a1b635d05d4ac1b34ad015dd022ad61f7feebbd450f5a07ee6f62b03e3bd7e7d50e96ecef6e30bc2a40377e021e459bdbf94f400854f21a2259215241c6bf4a1e436193509e27ac57c6518e42df7eab2a73ffcd785ee14821efeb96e878efd3b88120c7778e9f422c618e0614dd5ea79ea06d5c3e88ba397dd3b96171d77ef143a09d1d93bb44795c845a7271e1f1894c97cbedefcc53cedafe1dc004221dc4b451c09b93676d02cca15d7cd385d8e6bbb0d2b4f86a543d6e21af84760141347508e4da8611936cff6f2c84b2faf53434c55765849fd7858add5de4fea0ec98dc5b527a8677a66b70db0ebeb56bbfeaae567c3d1aac1929ac1053d1403cb1c14517769ac05145ff05700632af7a51848634b3b5f74bd894bf099769c65033c0475765934c7a1618b7ac3fbb39154f381466f1ac45ce2ba5c63184cb9f7b2f0aa372e10286b6c6ca4bb11eee3ded181d7c4838d791dc1df98a40b28e485b8ff373fc9e67f73a0a15f2f8e00554bfcacc5b0bf9f7cfb720ee63733597756d1579bd440d393574d08cd44a51d3d3a39a03b48f4ea754b7a404c9d2bb62e968cb05b297699585be683f21edbc7422a56ee26c3864553ff4fd91f7668203417fe3625d36f16a6d088bd3e62dbdff723c52069b0bc6e70cd9330a8ba46823a3349cba55e0b3394b633874dbdbdf45a677744b1842acc02d6ca35937951b3727d8920ac2e5a283035e144df463a529ca09d96f02659b640677620c8e5b49a3d648c32f3c31fe57eefbfdde5a19d10cb0c381ef1c90222fe557e186047c3b5fbb02a841a5d1afd0a6031dd7b6e0bf7dee97494015d22602f5e2c14ea7b498a1a877f57228dfa54eac4de742a69bae82a0e5bd87f25fb9e3675131f87565a92e312ca7afdaf1f8e95600735b2e9ae147b5bb08f162f"}) 03:08:35 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3337.491008] binder: 31406:31408 ioctl 4020ae46 7fda76f58510 returned -22 [ 3337.508925] binder: 31406:31408 ioctl 4020ae46 7fda76f58510 returned -22 [ 3337.541825] binder: 31406:31408 ioctl 4020ae46 7fda76f58510 returned -22 [ 3337.564957] binder: 31406:31408 ioctl 4020ae46 7fda76f58510 returned -22 [ 3337.588791] binder: 31406:31408 ioctl 4020ae46 7fda76f58510 returned -22 03:08:35 executing program 5: ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b49, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="b440e7fd1bd1f6c5c6452b6c2339eb976f66b6c1d4f5292eae818d9c7e7a74a6deaa842aa35f3e893d4ea5868800122d55f66b78f3516beafbdd04888d713502c81e30558debd750a073494216900b50796f7b346ae61c8318ec5bceb9b516e2239e565fe7b7fc1edf8ec2cca08b084c8d22a6829b1bb24bac70029cdd741ec875378c7084fa25f1156d4097f58382b15a56cdbd94657d2aacc7e2a7231c294b34bae1a3713e8c04076371866e6e914394ad1d997deabdb6302be6662a14cd497740294a4519634e4a9e0a5d4ac6d89667b4087b800118fb8cf9c4fedc650c55696bdf2224311671ea4f8f71e8191b521abfdd1e5de98ad464101f7c178c35e7f76516da2d62bb2dc2440387913265ae8375c16d6337824cac794c5e8c99cad411073ed6ba700c69f55d9ad939958cdb7bbc9943904a1f5b56ac76556fd21bb4c58caca520b676ffbc49f200fd993026dbd48ef09cd4fbc012a7df91307ce210b2ea311e36c1a87ed68e782ba4a185a1b635d05d4ac1b34ad015dd022ad61f7feebbd450f5a07ee6f62b03e3bd7e7d50e96ecef6e30bc2a40377e021e459bdbf94f400854f21a2259215241c6bf4a1e436193509e27ac57c6518e42df7eab2a73ffcd785ee14821efeb96e878efd3b88120c7778e9f422c618e0614dd5ea79ea06d5c3e88ba397dd3b96171d77ef143a09d1d93bb44795c845a7271e1f1894c97cbedefcc53cedafe1dc004221dc4b451c09b93676d02cca15d7cd385d8e6bbb0d2b4f86a543d6e21af84760141347508e4da8611936cff6f2c84b2faf53434c55765849fd7858add5de4fea0ec98dc5b527a8677a66b70db0ebeb56bbfeaae567c3d1aac1929ac1053d1403cb1c14517769ac05145ff05700632af7a51848634b3b5f74bd894bf099769c65033c0475765934c7a1618b7ac3fbb39154f381466f1ac45ce2ba5c63184cb9f7b2f0aa372e10286b6c6ca4bb11eee3ded181d7c4838d791dc1df98a40b28e485b8ff373fc9e67f73a0a15f2f8e00554bfcacc5b0bf9f7cfb720ee63733597756d1579bd440d393574d08cd44a51d3d3a39a03b48f4ea754b7a404c9d2bb62e968cb05b297699585be683f21edbc7422a56ee26c3864553ff4fd91f7668203417fe3625d36f16a6d088bd3e62dbdff723c52069b0bc6e70cd9330a8ba46823a3349cba55e0b3394b633874dbdbdf45a677744b1842acc02d6ca35937951b3727d8920ac2e5a283035e144df463a529ca09d96f02659b640677620c8e5b49a3d648c32f3c31fe57eefbfdde5a19d10cb0c381ef1c90222fe557e186047c3b5fbb02a841a5d1afd0a6031dd7b6e0bf7dee97494015d22602f5e2c14ea7b498a1a877f57228dfa54eac4de742a69bae82a0e5bd87f25fb9e3675131f87565a92e312ca7afdaf1f8e95600735b2e9ae147b5bb08f162f"}) 03:08:36 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000440)={0x0, 0x0, 0x17, 0x1, 0x1fd, &(0x7f0000000000)="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"}) fcntl$setstatus(r0, 0x4, 0x400) [ 3337.613986] binder: 31406:31408 ioctl 4020ae46 7fda76f58530 returned -22 03:08:36 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) read$snddsp(r3, &(0x7f0000000180)=""/4096, 0x1000) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) [ 3337.751815] binder: 31410:31412 unknown command -1460061747 [ 3337.757890] binder: 31410:31412 ioctl c0306201 200000c0 returned -22 [ 3337.764721] binder: 31410:31463 ioctl 5381 0 returned -22 [ 3337.784603] binder: 31462:31464 ioctl 4020ae46 7fda76f58510 returned -22 [ 3337.797611] binder: 31462:31464 ioctl 4020ae46 7fda76f58510 returned -22 [ 3337.812606] binder: 31462:31464 ioctl 4020ae46 7fda76f58510 returned -22 [ 3337.831804] binder: 31462:31464 ioctl 4020ae46 7fda76f58510 returned -22 [ 3337.854251] binder: 31462:31464 ioctl 4020ae46 7fda76f58510 returned -22 [ 3337.871585] binder: 31462:31464 ioctl 4020ae46 7fda76f58510 returned -22 [ 3337.894496] binder: 31462:31464 ioctl 4020ae46 7fda76f58510 returned -22 [ 3337.920284] binder: 31462:31464 ioctl 4020ae46 7fda76f58510 returned -22 [ 3337.935216] binder: 31462:31464 ioctl 4020ae46 7fda76f58510 returned -22 [ 3337.950261] binder: 31462:31464 ioctl 4020ae46 7fda76f58510 returned -22 [ 3337.965169] binder: 31462:31464 ioctl 4020ae46 7fda76f58510 returned -22 [ 3337.979021] binder: 31462:31464 ioctl 4020ae46 7fda76f58510 returned -22 [ 3337.993949] binder: 31462:31464 ioctl 4020ae46 7fda76f58510 returned -22 [ 3338.001093] binder: 31462:31464 ioctl 4020ae46 7fda76f58510 returned -22 [ 3338.008952] binder: 31462:31464 ioctl 4020ae46 7fda76f58510 returned -22 [ 3338.016035] binder: 31462:31464 ioctl 4020ae46 7fda76f58510 returned -22 [ 3338.023136] binder: 31462:31464 ioctl 4020ae46 7fda76f58510 returned -22 [ 3338.030445] binder: 31462:31464 ioctl 4020ae46 7fda76f58510 returned -22 [ 3338.037588] binder: 31462:31464 ioctl 4020ae46 7fda76f58510 returned -22 [ 3338.052518] binder: 31462:31464 ioctl 4020ae46 7fda76f58510 returned -22 [ 3338.067645] binder: 31462:31464 ioctl 4020ae46 7fda76f58510 returned -22 [ 3338.084532] binder: 31462:31464 ioctl 4020ae46 7fda76f58510 returned -22 [ 3338.099664] binder: 31462:31464 ioctl 4020ae46 7fda76f58510 returned -22 [ 3338.114784] binder: 31462:31464 ioctl 4020ae46 7fda76f58510 returned -22 03:08:36 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x5dfa00) 03:08:36 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b49, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:36 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, r3) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @local, 0x6}]}, &(0x7f0000000180)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x66, &(0x7f0000000300)={r7, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x90) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000440)={r7, 0x5}, &(0x7f0000000480)=0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$VFIO_GET_API_VERSION(r2, 0x3b64) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3338.144700] binder: 31462:31464 ioctl 4020ae46 7fda76f58530 returned -22 [ 3338.178851] binder: 31462:31470 ioctl 4020ae46 7fda76f37510 returned -22 [ 3338.185764] binder: 31462:31470 ioctl 4020ae46 7fda76f37510 returned -22 03:08:36 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x32141) [ 3338.214876] binder: 31462:31470 ioctl 4020ae46 7fda76f37510 returned -22 [ 3338.241489] binder: 31462:31470 ioctl 4020ae46 7fda76f37510 returned -22 03:08:36 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b49, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3338.274984] binder: 31477:31480 ioctl 3b64 0 returned -22 03:08:36 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 03:08:36 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x4140) 03:08:36 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b49, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3338.353502] binder: 31477:31488 ioctl 3b64 0 returned -22 03:08:36 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) futimesat(r2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x0, 0x2710}}) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 3338.420023] binder: 31490:31492 ioctl 4020ae46 7fda76f58510 returned -22 [ 3338.426926] binder: 31490:31492 ioctl 4020ae46 7fda76f58510 returned -22 03:08:36 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x1082) 03:08:36 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b49, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3338.489097] binder: 31490:31492 ioctl 4020ae46 7fda76f58510 returned -22 [ 3338.515364] binder: 31490:31492 ioctl 4020ae46 7fda76f58510 returned -22 03:08:36 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b49, 0x0) 03:08:36 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$IMSETDEVNAME(r2, 0x80184947, &(0x7f0000000480)={0x4, 'syz1\x00'}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r4) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f0000000440)={0x0, 0x0, 0x78d4b2b99b9044f7, 0x3}) 03:08:36 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) dup2(r0, r0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x2}, @in={0x2, 0x4e20, @broadcast}], 0x2c) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000d, 0x4010, r4, 0x0) [ 3338.573593] binder: 31490:31492 ioctl 4020ae46 7fda76f58510 returned -22 [ 3338.611860] binder: 31490:31492 ioctl 4020ae46 7fda76f58510 returned -22 [ 3338.657598] binder: 31490:31492 ioctl 4020ae46 7fda76f58510 returned -22 [ 3338.664693] binder: 31510:31514 ioctl 80184947 20000480 returned -22 [ 3338.691190] binder: 31490:31492 ioctl 4020ae46 7fda76f58510 returned -22 [ 3338.691832] binder: 31510:31514 ioctl c0206434 20000440 returned -22 03:08:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b49, 0x0) [ 3338.725629] binder: 31490:31492 ioctl 4020ae46 7fda76f58510 returned -22 [ 3338.734855] binder: 31510:31518 ioctl 80184947 20000480 returned -22 [ 3338.764887] binder: 31490:31492 ioctl 4020ae46 7fda76f58510 returned -22 [ 3338.802509] binder: 31511:31515 unknown command 609091594 [ 3338.813443] binder: 31511:31515 ioctl c0306201 200000c0 returned -22 [ 3338.822422] binder: 31490:31492 ioctl 4020ae46 7fda76f58510 returned -22 03:08:37 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$SNDRV_PCM_IOCTL_STATUS64(r3, 0x80984120, &(0x7f0000000440)) 03:08:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b49, 0x0) [ 3338.856555] binder: 31490:31492 ioctl 4020ae46 7fda76f58510 returned -22 [ 3338.871659] binder: 31490:31492 ioctl 4020ae46 7fda76f58510 returned -22 [ 3338.895497] binder: 31490:31492 ioctl 4020ae46 7fda76f58510 returned -22 [ 3338.908515] binder: 31523:31525 ioctl 80984120 20000440 returned -22 [ 3338.919928] binder: 31490:31492 ioctl 4020ae46 7fda76f58510 returned -22 [ 3338.935868] binder: 31490:31492 ioctl 4020ae46 7fda76f58510 returned -22 [ 3338.953407] binder: 31523:31531 ioctl 80984120 20000440 returned -22 [ 3338.966857] binder: 31490:31492 ioctl 4020ae46 7fda76f58510 returned -22 [ 3338.998200] binder: 31490:31492 ioctl 4020ae46 7fda76f58510 returned -22 [ 3339.021022] binder: 31490:31492 ioctl 4020ae46 7fda76f58510 returned -22 [ 3339.036010] binder: 31490:31492 ioctl 4020ae46 7fda76f58510 returned -22 [ 3339.050930] binder: 31490:31492 ioctl 4020ae46 7fda76f58510 returned -22 [ 3339.065891] binder: 31490:31492 ioctl 4020ae46 7fda76f58510 returned -22 [ 3339.079833] binder: 31490:31492 ioctl 4020ae46 7fda76f58510 returned -22 [ 3339.093553] binder: 31490:31492 ioctl 4020ae46 7fda76f58510 returned -22 [ 3339.118811] binder: 31490:31492 ioctl 4020ae46 7fda76f58530 returned -22 [ 3339.132626] binder: 31490:31492 ioctl 8138ae83 7fda76f586f0 returned -22 03:08:37 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000440)=@req={0x1, 0x0, 0xfffffffe, 0x1f}, 0x10) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) readahead(r1, 0x5, 0x3) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, 0xffffffffffffffff) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x1c, 0x0, &(0x7f0000000000)="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"}) 03:08:37 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4282c2) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000040)={0x6, 0xffff, 0x80}, 0x10) 03:08:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b49, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) socket$phonet(0x23, 0x2, 0x1) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004800}, 0x10) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000100)={0x7, 0x3ff, 0xfffffffe, 0x8e14}, 0x10) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80605414, &(0x7f0000000040)) r5 = dup2(r4, r3) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) [ 3339.245332] binder: 31538:31540 ioctl 1276 0 returned -22 [ 3339.259175] binder: 31541:31544 ioctl 80605414 20000040 returned -22 [ 3339.279631] binder: 31541:31544 ioctl 4020ae46 7fda76f58510 returned -22 03:08:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b49, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)="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"}) [ 3339.296635] binder: 31538:31546 ioctl 1276 0 returned -22 [ 3339.296741] binder: 31541:31544 ioctl 4020ae46 7fda76f58510 returned -22 03:08:37 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="70000000040801020000000000000000070000030900010073797a31000000009dec49d00587cabaf70500030021000000050003003a0000000900010073797a30000000002c00048008000540000000080800064045af5a60080002400000003f0800064000000008080001400000000206000240883e0000"], 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x4008044) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x2a, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r5, 0xc040564b, &(0x7f0000000080)={0x2, 0x0, 0x1009, 0x80, 0xfffffffe, {0xfff, 0x2e}, 0x1}) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) unlink(&(0x7f0000000040)='./file0\x00') getsockopt$netrom_NETROM_IDLE(r6, 0x103, 0x7, &(0x7f0000000280)=0xfff, &(0x7f00000002c0)=0x4) 03:08:37 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x80000002, 0x0, &(0x7f0000000000)="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"}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x2) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0f630c4001000000000000000000000052a9ba972bf56ca438d77e32747b2202cc83f9d7f64c5f5f3398d16400f3723be3c78599d2fb7043e6019894b6009e5422"], 0x0, 0x0, 0x0}) ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f0000000440)={0x4, 0x1, 0xfff, 0x1e, 0x8, 0xffffffffffffff81}) accept$nfc_llcp(r3, &(0x7f0000000480), &(0x7f0000000500)=0x60) 03:08:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b49, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 3339.373479] binder: 31541:31544 ioctl 4020ae46 7fda76f58510 returned -22 [ 3339.408599] binder: 31541:31544 ioctl 4020ae46 7fda76f58510 returned -22 [ 3339.431499] binder: 31553:31556 ioctl 4b71 20000440 returned -22 [ 3339.451800] binder: 31541:31544 ioctl 4020ae46 7fda76f58510 returned -22 [ 3339.464146] binder: 31553:31560 ioctl 4b71 20000440 returned -22 03:08:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b40, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="b440e7fd1bd1f6c5c6452b6c2339eb976f66b6c1d4f5292eae818d9c7e7a74a6deaa842aa35f3e893d4ea5868800122d55f66b78f3516beafbdd04888d713502c81e30558debd750a073494216900b50796f7b346ae61c8318ec5bceb9b516e2239e565fe7b7fc1edf8ec2cca08b084c8d22a6829b1bb24bac70029cdd741ec875378c7084fa25f1156d4097f58382b15a56cdbd94657d2aacc7e2a7231c294b34bae1a3713e8c04076371866e6e914394ad1d997deabdb6302be6662a14cd497740294a4519634e4a9e0a5d4ac6d89667b4087b800118fb8cf9c4fedc650c55696bdf2224311671ea4f8f71e8191b521abfdd1e5de98ad464101f7c178c35e7f76516da2d62bb2dc2440387913265ae8375c16d6337824cac794c5e8c99cad411073ed6ba700c69f55d9ad939958cdb7bbc9943904a1f5b56ac76556fd21bb4c58caca520b676ffbc49f200fd993026dbd48ef09cd4fbc012a7df91307ce210b2ea311e36c1a87ed68e782ba4a185a1b635d05d4ac1b34ad015dd022ad61f7feebbd450f5a07ee6f62b03e3bd7e7d50e96ecef6e30bc2a40377e021e459bdbf94f400854f21a2259215241c6bf4a1e436193509e27ac57c6518e42df7eab2a73ffcd785ee14821efeb96e878efd3b88120c7778e9f422c618e0614dd5ea79ea06d5c3e88ba397dd3b96171d77ef143a09d1d93bb44795c845a7271e1f1894c97cbedefcc53cedafe1dc004221dc4b451c09b93676d02cca15d7cd385d8e6bbb0d2b4f86a543d6e21af84760141347508e4da8611936cff6f2c84b2faf53434c55765849fd7858add5de4fea0ec98dc5b527a8677a66b70db0ebeb56bbfeaae567c3d1aac1929ac1053d1403cb1c14517769ac05145ff05700632af7a51848634b3b5f74bd894bf099769c65033c0475765934c7a1618b7ac3fbb39154f381466f1ac45ce2ba5c63184cb9f7b2f0aa372e10286b6c6ca4bb11eee3ded181d7c4838d791dc1df98a40b28e485b8ff373fc9e67f73a0a15f2f8e00554bfcacc5b0bf9f7cfb720ee63733597756d1579bd440d393574d08cd44a51d3d3a39a03b48f4ea754b7a404c9d2bb62e968cb05b297699585be683f21edbc7422a56ee26c3864553ff4fd91f7668203417fe3625d36f16a6d088bd3e62dbdff723c52069b0bc6e70cd9330a8ba46823a3349cba55e0b3394b633874dbdbdf45a677744b1842acc02d6ca35937951b3727d8920ac2e5a283035e144df463a529ca09d96f02659b640677620c8e5b49a3d648c32f3c31fe57eefbfdde5a19d10cb0c381ef1c90222fe557e186047c3b5fbb02a841a5d1afd0a6031dd7b6e0bf7dee97494015d22602f5e2c14ea7b498a1a877f57228dfa54eac4de742a69bae82a0e5bd87f25fb9e3675131f87565a92e312ca7afdaf1f8e95600735b2e9ae147b5bb08f162f"}) [ 3339.482413] binder: 31541:31544 ioctl 4020ae46 7fda76f58510 returned -22 [ 3339.491459] binder: 31552:31554 unknown command 16 [ 3339.502278] binder: 31552:31554 ioctl c0306201 200000c0 returned -22 [ 3339.530062] binder: 31552:31554 ioctl c040564b 20000080 returned -22 [ 3339.537858] binder: 31541:31544 ioctl 4020ae46 7fda76f58510 returned -22 [ 3339.570965] binder: 31541:31544 ioctl 4020ae46 7fda76f58510 returned -22 03:08:37 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\a\x00\x00\x00'], 0x0, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000440)=0x6) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/autofs\x00', 0x48a00, 0x0) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000400)={0x0, 0x1, 0x17, 0x2, 0x0, &(0x7f0000000000)="b440e7fd1bd1f6c5c6452b6c2339eb976f66b6c1d4f5292eae818d9c7e7a74a6deaa842aa35f3e893d4ea5868800122d55f66b78f3516beafbdd04888d713502c81e30558debd750a073494216900b50796f7b346ae61c8318ec5bceb9b516e2239e565fe7b7fc1edf8ec2cca08b084c8d22a6829b1bb24bac70029cdd741ec875378c7084fa25f1156d4097f58382b15a56cdbd94657d2aacc7e2a7231c294b34bae1a3713e8c04076371866e6e914394ad1d997deabdb6302be6662a14cd497740294a4519634e4a9e0a5d4ac6d89667b4087b800118fb8cf9c4fedc650c55696bdf2224311671ea4f8f71e8191b521abfdd1e5de98ad464101f7c178c35e7f76516da2d62bb2dc2440387913265ae8375c16d6337824cac794c5e8c99cad411073ed6ba700c69f55d9ad939958cdb7bbc9943904a1f5b56ac76556fd21bb4c58caca520b676ffbc49f200fd993026dbd48ef09cd4fbc012a7df91307ce210b2ea311e36c1a87ed68e782ba4a185a1b635d05d4ac1b34ad015dd022ad61f7feebbd450f5a07ee6f62b03e3bd7e7d50e96ecef6e30bc2a40377e021e459bdbf94f400854f21a2259215241c6bf4a1e436193509e27ac57c6518e42df7eab2a73ffcd785ee14821efeb96e878efd3b88120c7778e9f422c618e0614dd5ea79ea06d5c3e88ba397dd3b96171d77ef143a09d1d93bb44795c845a7271e1f1894c97cbedefcc53cedafe1dc004221dc4b451c09b93676d02cca15d7cd385d8e6bbb0d2b4f86a543d6e21af84760141347508e4da8611936cff6f2c84b2faf53434c55765849fd7858add5de4fea0ec98dc5b527a8677a66b70db0ebeb56bbfeaae567c3d1aac1929ac1053d1403cb1c14517769ac05145ff05700632af7a51848634b3b5f74bd894bf099769c65033c0475765934c7a1618b7ac3fbb39154f381466f1ac45ce2ba5c63184cb9f7b2f0aa372e10286b6c6ca4bb11eee3ded181d7c4838d791dc1df98a40b28e485b8ff373fc9e67f73a0a15f2f8e00554bfcacc5b0bf9f7cfb720ee63733597756d1579bd440d393574d08cd44a51d3d3a39a03b48f4ea754b7a404c9d2bb62e968cb05b297699585be683f21edbc7422a56ee26c3864553ff4fd91f7668203417fe3625d36f16a6d088bd3e62dbdff723c52069b0bc6e70cd9330a8ba46823a3349cba55e0b3394b633874dbdbdf45a677744b1842acc02d6ca35937951b3727d8920ac2e5a283035e144df463a529ca09d96f02659b640677620c8e5b49a3d648c32f3c31fe57eefbfdde5a19d10cb0c381ef1c90222fe557e186047c3b5fbb02a841a5d1afd0a6031dd7b6e0bf7dee97494015d22602f5e2c14ea7b498a1a877f57228dfa54eac4de742a69bae82a0e5bd87f25fb9e3675131f87565a92e312ca7afdaf1f8e95600735b2e9ae147b5bb08f162f"}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000004c0)) 03:08:38 executing program 5 (fault-call:1 fault-nth:0): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b49, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 3339.580876] binder: 31552:31561 unknown command 16 [ 3339.581449] binder: 31552:31566 ioctl c040564b 20000080 returned -22 [ 3339.586253] binder: 31552:31561 ioctl c0306201 200000c0 returned -22 [ 3339.617196] binder: 31541:31544 ioctl 4020ae46 7fda76f58510 returned -22 [ 3339.650411] binder: 31567:31570 unknown command 7 [ 3339.662678] binder: 31541:31544 ioctl 4020ae46 7fda76f58510 returned -22 [ 3339.681709] binder: 31567:31570 ioctl c0306201 200000c0 returned -22 [ 3339.681917] FAULT_INJECTION: forcing a failure. [ 3339.681917] name failslab, interval 1, probability 0, space 0, times 0 03:08:38 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x200000) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)=0x1) [ 3339.704470] binder: 31541:31544 ioctl 4020ae46 7fda76f58510 returned -22 [ 3339.708489] binder: 31567:31574 ioctl ae01 0 returned -22 [ 3339.720771] binder: 31541:31544 ioctl 4020ae46 7fda76f58510 returned -22 [ 3339.737612] binder: 31541:31544 ioctl 4020ae46 7fda76f58510 returned -22 [ 3339.747965] CPU: 0 PID: 31572 Comm: syz-executor.5 Not tainted 4.19.124-syzkaller #0 [ 3339.755876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3339.765252] Call Trace: [ 3339.767854] dump_stack+0x1fc/0x2fe [ 3339.771524] should_fail.cold+0xa/0x14 [ 3339.775451] ? setup_fault_attr+0x200/0x200 [ 3339.781289] binder: 31575:31576 ioctl 40045431 20000040 returned -22 [ 3339.783701] __should_failslab+0x115/0x180 [ 3339.783716] should_failslab+0x5/0xf [ 3339.783736] kmem_cache_alloc_trace+0x2a0/0x3a0 [ 3339.803598] vt_do_kdgkb_ioctl+0x74/0xb60 [ 3339.807764] ? security_capable+0x8e/0xc0 [ 3339.812905] vt_ioctl+0x432/0x2500 [ 3339.816466] ? complete_change_console+0x390/0x390 [ 3339.821405] ? lock_downgrade+0x740/0x740 [ 3339.825567] ? lock_acquire+0x170/0x3c0 [ 3339.829547] ? avc_has_perm_noaudit+0xa2/0x390 [ 3339.834139] ? check_preemption_disabled+0x41/0x280 [ 3339.839173] ? avc_has_perm_noaudit+0x1ed/0x390 [ 3339.843853] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3339.849061] ? complete_change_console+0x390/0x390 [ 3339.854001] tty_ioctl+0x7a5/0x1420 [ 3339.857648] ? tty_vhangup+0x30/0x30 [ 3339.861378] ? cred_has_capability+0x162/0x2e0 [ 3339.865971] ? cred_has_capability+0x1d9/0x2e0 [ 3339.869806] binder: 31541:31544 ioctl 4020ae46 7fda76f58510 returned -22 [ 3339.870574] ? selinux_inode_copy_up+0x180/0x180 [ 3339.884120] ? __fget+0x31e/0x520 [ 3339.887581] ? tty_vhangup+0x30/0x30 [ 3339.891303] do_vfs_ioctl+0xcda/0x12e0 [ 3339.895204] ? selinux_file_ioctl+0x125/0x5d0 [ 3339.899709] ? check_preemption_disabled+0x41/0x280 [ 3339.904910] ? ioctl_preallocate+0x200/0x200 [ 3339.909350] ? selinux_socket_sock_rcv_skb+0x570/0x570 [ 3339.914639] ? __fget+0x345/0x520 [ 3339.918106] ? ksys_dup3+0x3c0/0x3c0 [ 3339.922392] ? security_file_ioctl+0x6c/0xb0 [ 3339.926801] binder: 31541:31544 ioctl 4020ae46 7fda76f58510 returned -22 [ 3339.926812] ksys_ioctl+0x9b/0xc0 [ 3339.926829] __x64_sys_ioctl+0x6f/0xb0 [ 3339.940995] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3339.945679] do_syscall_64+0xf9/0x620 [ 3339.950297] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3339.955584] RIP: 0033:0x45ca29 [ 3339.958784] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3339.965903] binder: 31541:31544 ioctl 4020ae46 7fda76f58510 returned -22 [ 3339.977716] RSP: 002b:00007f02cf0ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3339.977730] RAX: ffffffffffffffda RBX: 00000000004e6b40 RCX: 000000000045ca29 03:08:38 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) [ 3339.977739] RDX: 0000000020000400 RSI: 0000000000004b49 RDI: 0000000000000003 [ 3339.977747] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3339.977754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3339.977761] R13: 0000000000000374 R14: 00000000004c605c R15: 00007f02cf0ed6d4 [ 3340.024332] binder: 31567:31570 ioctl ae01 0 returned -22 03:08:38 executing program 5 (fault-call:1 fault-nth:1): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b49, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:08:38 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x1, 0x101b, 0x2, 0x0, &(0x7f0000000000)="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"}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) mmap$snddsp_status(&(0x7f0000ffe000/0x2000)=nil, 0x1000, 0x200000e, 0x30, r3, 0x82000000) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r4) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$KVM_SET_XCRS(r6, 0x4188aea7, &(0x7f0000000440)={0x3, 0x7, [{0x2, 0x0, 0x10001}, {0x9, 0x0, 0x401}, {0xcc, 0x0, 0x7}]}) [ 3340.122013] binder: 31582:31583 unknown command 4 [ 3340.134253] binder: 31582:31583 ioctl c0306201 200000c0 returned -22 03:08:38 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @local, 0x6}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x66, &(0x7f0000000300)={r5, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x90) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000080)={r5, @in={{0x2, 0x4e20, @rand_addr=0x64010100}}, 0x800, 0x8}, &(0x7f0000000180)=0x90) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={r6, 0x99}, &(0x7f0000000200)=0x8) r7 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r8 = syz_open_dev$binderN(0x0, 0x0, 0x0) r9 = dup2(r8, r7) syz_kvm_setup_cpu$x86(r9, r9, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe79) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) [ 3340.173224] binder: 31586:31589 ioctl 4188aea7 20000440 returned -22 03:08:38 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b49, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:08:38 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0xc02) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$TCXONC(r2, 0x540a, 0x1) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000040)={0x5, @sdr={0x38414262, 0x8}}) 03:08:38 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000600)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) request_key(&(0x7f0000000400)='pkcs7_test\x00', &(0x7f0000000540)={'syz', 0x3}, &(0x7f0000000580)='trusted\x00', r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r4) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x7fff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000080)=0xc) keyctl$chown(0x4, r1, r7, 0x0) keyctl$get_security(0x11, r1, &(0x7f0000000480)=""/189, 0xbd) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000440)={0x0, 0x0, 0x18, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3340.283588] binder: 31591:31594 ioctl 4020ae46 7fda76f58510 returned -22 [ 3340.313896] binder: 31591:31594 ioctl 4020ae46 7fda76f58510 returned -22 [ 3340.322941] binder: 31597:31600 ioctl 540a 1 returned -22 03:08:38 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 3340.365395] binder: 31591:31594 ioctl 4020ae46 7fda76f58510 returned -22 [ 3340.402023] binder: 31591:31594 ioctl 4020ae46 7fda76f58510 returned -22 [ 3340.423555] binder: 31591:31594 ioctl 4020ae46 7fda76f58510 returned -22 [ 3340.443227] binder: 31597:31608 ioctl 540a 1 returned -22 [ 3340.447077] binder: 31591:31594 ioctl 4020ae46 7fda76f58510 returned -22 03:08:38 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b2f, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 3340.482181] binder: 31591:31594 ioctl 4020ae46 7fda76f58510 returned -22 [ 3340.505186] binder: 31591:31594 ioctl 4020ae46 7fda76f58510 returned -22 [ 3340.517158] binder: 31591:31594 ioctl 4020ae46 7fda76f58510 returned -22 03:08:38 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) r1 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) close(r1) [ 3340.527267] binder: 31591:31594 ioctl 4020ae46 7fda76f58510 returned -22 [ 3340.536604] binder: 31591:31594 ioctl 4020ae46 7fda76f58510 returned -22 [ 3340.563228] binder: 31591:31594 ioctl 4020ae46 7fda76f58510 returned -22 03:08:38 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x800017, 0x2, 0x181, &(0x7f0000000000)="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"}) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$SOUND_MIXER_READ_RECSRC(r3, 0x80044dff, &(0x7f0000000440)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) pwritev(r4, &(0x7f0000000480), 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x5) [ 3340.582230] binder: 31591:31594 ioctl 4020ae46 7fda76f58510 returned -22 [ 3340.596555] binder: 31591:31594 ioctl 4020ae46 7fda76f58510 returned -22 [ 3340.611918] binder: 31591:31594 ioctl 4020ae46 7fda76f58510 returned -22 03:08:39 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b30, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 3340.636383] binder: 31591:31594 ioctl 4020ae46 7fda76f58510 returned -22 [ 3340.659110] binder: 31620:31623 ioctl 80044dff 20000440 returned -22 [ 3340.666748] binder: 31591:31594 ioctl 4020ae46 7fda76f58510 returned -22 [ 3340.690071] binder: 31620:31623 ioctl 80044dff 20000440 returned -22 [ 3340.697367] binder: 31591:31594 ioctl 4020ae46 7fda76f58510 returned -22 03:08:39 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000040)='veth0_to_batadv\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000000)={0x100000, 0x3000}) 03:08:39 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b31, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:08:39 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm-monitor\x00', 0x40, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000480)) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000004c0)=[@timestamp, @timestamp], 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="b440e7fd1bd1f6c5c6452b6c2339eb976f66b6c1d4f5292eae818d9c7e7a74a6deaa842aa35f3e893d4ea5868800122d55f66b78f3516beafbdd04888d713502c81e30558debd750a073494216900b50796f7b346ae61c8318ec5bceb9b516e2239e565fe7b7fc1edf8ec2cca08b084c8d22a6829b1bb24bac70029cdd741ec875378c7084fa25f1156d4097f58382b15a56cdbd94657d2aacc7e2a7231c294b34bae1a3713e8c04076371866e6e914394ad1d997deabdb6302be6662a14cd497740294a4519634e4a9e0a5d4ac6d89667b4087b800118fb8cf9c4fedc650c55696bdf2224311671ea4f8f71e8191b521abfdd1e5de98ad464101f7c178c35e7f76516da2d62bb2dc2440387913265ae8375c16d6337824cac794c5e8c99cad411073ed6ba700c69f55d9ad939958cdb7bbc9943904a1f5b56ac76556fd21bb4c58caca520b676ffbc49f200fd993026dbd48ef09cd4fbc012a7df91307ce210b2ea311e36c1a87ed68e782ba4a185a1b635d05d4ac1b34ad015dd022ad61f7feebbd450f5a07ee6f62b03e3bd7e7d50e96ecef6e30bc2a40377e021e459bdbf94f400854f21a2259215241c6bf4a1e436193509e27ac57c6518e42df7eab2a73ffcd785ee14821efeb96e878efd3b88120c7778e9f422c618e0614dd5ea79ea06d5c3e88ba397dd3b96171d77ef143a09d1d93bb44795c845a7271e1f1894c97cbedefcc53cedafe1dc004221dc4b451c09b93676d02cca15d7cd385d8e6bbb0d2b4f86a543d6e21af84760141347508e4da8611936cff6f2c84b2faf53434c55765849fd7858add5de4fea0ec98dc5b527a8677a66b70db0ebeb56bbfeaae567c3d1aac1929ac1053d1403cb1c14517769ac05145ff05700632af7a51848634b3b5f74bd894bf099769c65033c0475765934c7a1618b7ac3fbb39154f381466f1ac45ce2ba5c63184cb9f7b2f0aa372e10286b6c6ca4bb11eee3ded181d7c4838d791dc1df98a40b28e485b8ff373fc9e67f73a0a15f2f8e00554bfcacc5b0bf9f7cfb720ee63733597756d1579bd440d393574d08cd44a51d3d3a39a03b48f4ea754b7a404c9d2bb62e968cb05b297699585be683f21edbc7422a56ee26c3864553ff4fd91f7668203417fe3625d36f16a6d088bd3e62dbdff723c52069b0bc6e70cd9330a8ba46823a3349cba55e0b3394b633874dbdbdf45a677744b1842acc02d6ca35937951b3727d8920ac2e5a283035e144df463a529ca09d96f02659b640677620c8e5b49a3d648c32f3c31fe57eefbfdde5a19d10cb0c381ef1c90222fe557e186047c3b5fbb02a841a5d1afd0a6031dd7b6e0bf7dee97494015d22602f5e2c14ea7b498a1a877f57228dfa54eac4de742a69bae82a0e5bd87f25fb9e3675131f87565a92e312ca7afdaf1f8e95600735b2e9ae147b5bb08f162f"}) [ 3340.735831] binder: 31591:31594 ioctl 4020ae46 7fda76f58510 returned -22 [ 3340.773443] binder: 31591:31594 ioctl 4020ae46 7fda76f58510 returned -22 [ 3340.793745] binder: 31591:31594 ioctl 4020ae46 7fda76f58510 returned -22 [ 3340.804836] binder: 31631:31632 ioctl 89a1 20000040 returned -22 [ 3340.816320] binder: 31591:31594 ioctl 4020ae46 7fda76f58510 returned -22 [ 3340.826420] binder: 31631:31632 ioctl 4010ae68 20000000 returned -22 [ 3340.853109] binder: 31591:31594 ioctl 4020ae46 7fda76f58510 returned -22 [ 3340.864823] binder: 31631:31632 ioctl 89a1 20000040 returned -22 [ 3340.899879] binder: 31591:31594 ioctl 4020ae46 7fda76f58510 returned -22 [ 3340.939488] binder: 31591:31594 ioctl 4020ae46 7fda76f58530 returned -22 [ 3340.946905] binder: 31591:31594 ioctl 8138ae83 7fda76f586f0 returned -22 03:08:39 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x801) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 03:08:39 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b32, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:08:39 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000440)=0x8000, 0x4) 03:08:39 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0xbe, 0x80900) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0x10542, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) recvfrom$phonet(r3, &(0x7f00000000c0)=""/170, 0xaa, 0x2001, &(0x7f0000000180)={0x23, 0x0, 0x6}, 0x10) bind$isdn(r0, &(0x7f0000000080)={0x22, 0x1, 0x0, 0x1, 0x53}, 0x6) [ 3341.061561] binder: 31644:31645 ioctl 4020ae46 7fda76f58510 returned -22 [ 3341.071317] binder: 31644:31645 ioctl 4020ae46 7fda76f58510 returned -22 [ 3341.087477] binder: 31644:31645 ioctl 4020ae46 7fda76f58510 returned -22 [ 3341.112723] binder: 31644:31645 ioctl 4020ae46 7fda76f58510 returned -22 [ 3341.124015] binder: 31644:31645 ioctl 4020ae46 7fda76f58510 returned -22 [ 3341.142741] binder: 31644:31645 ioctl 4020ae46 7fda76f58510 returned -22 [ 3341.153982] binder: 31644:31645 ioctl 4020ae46 7fda76f58510 returned -22 03:08:39 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b33, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:08:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) write$binfmt_elf64(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x166) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vcsu\x00', 0x8201, 0x0) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000a00)={0x1, 0x0, 0x8, 0x11, 0x9a, &(0x7f0000000600)}) [ 3341.161645] binder: 31644:31645 ioctl 4020ae46 7fda76f58510 returned -22 [ 3341.170064] binder: 31644:31645 ioctl 4020ae46 7fda76f58510 returned -22 [ 3341.181627] binder: 31644:31645 ioctl 4020ae46 7fda76f58510 returned -22 [ 3341.200138] binder: 31644:31645 ioctl 4020ae46 7fda76f58510 returned -22 03:08:39 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b34, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 3341.219394] binder: 31644:31645 ioctl 4020ae46 7fda76f58510 returned -22 [ 3341.226884] binder: 31644:31645 ioctl 4020ae46 7fda76f58510 returned -22 [ 3341.247126] binder: 31644:31645 ioctl 4020ae46 7fda76f58510 returned -22 [ 3341.275126] binder: 31644:31645 ioctl 4020ae46 7fda76f58510 returned -22 [ 3341.283998] binder: 31644:31645 ioctl 4020ae46 7fda76f58510 returned -22 03:08:39 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b35, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 3341.333282] binder: 31644:31645 ioctl 4020ae46 7fda76f58510 returned -22 [ 3341.369633] binder: 31644:31645 ioctl 4020ae46 7fda76f58510 returned -22 [ 3341.395519] binder: 31644:31645 ioctl 4020ae46 7fda76f58510 returned -22 [ 3341.425332] binder: 31644:31645 ioctl 4020ae46 7fda76f58510 returned -22 03:08:39 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b36, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 3341.446259] binder: 31644:31645 ioctl 4020ae46 7fda76f58510 returned -22 [ 3341.462933] binder: 31644:31645 ioctl 4020ae46 7fda76f58510 returned -22 [ 3341.479330] binder: 31644:31645 ioctl 4020ae46 7fda76f58510 returned -22 [ 3341.506526] binder: 31644:31645 ioctl 4020ae46 7fda76f58510 returned -22 [ 3341.529108] binder: 31644:31645 ioctl 4020ae46 7fda76f58530 returned -22 03:08:39 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b37, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:08:40 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0717000000000000000016"], 0x28}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r5, 0x2802ea6514a88dc8, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x69b006fb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 03:08:40 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b3a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 3341.787193] binder: 31679:31682 ioctl 4020ae46 7fda76f58510 returned -22 [ 3341.814661] binder: 31679:31682 ioctl 4020ae46 7fda76f58510 returned -22 03:08:40 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x4140) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$isdn(0x22, 0x3, 0x22) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/timer\x00', 0x0, 0x0) syz_open_pts(r2, 0x141040) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000080)=0xe607) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f00000000c0)={0x2d}) listen(r0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e630c40e8eae61ba1136b18a59d2f82791ca27b359ca35f69ccc69a5e56b88295c58d0087db674fe6d6ee4f9cf73416d3f049604ae1c5e6f7"], 0x0, 0x0, 0x0}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @local, 0x6}]}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x66, &(0x7f0000000300)={r6, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x90) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000180)={r6, 0x30, "42beffd45d780d9ea2d51e290ba1264a88cc54217737232458abd53e991b094d41a3eadceccc5a89cf10c800c6ab3e44"}, &(0x7f00000001c0)=0x38) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x4, 0x56ad, 0x5}) 03:08:40 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b3b, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 3341.833033] binder: 31679:31682 ioctl 4020ae46 7fda76f58510 returned -22 [ 3341.853687] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3341.870528] binder: 31679:31682 ioctl 4020ae46 7fda76f58510 returned -22 [ 3341.894178] binder: 31679:31682 ioctl 4020ae46 7fda76f58510 returned -22 [ 3341.921600] binder: 31679:31682 ioctl 4020ae46 7fda76f58510 returned -22 03:08:40 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b3c, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 3341.958210] binder: 31679:31682 ioctl 4020ae46 7fda76f58510 returned -22 [ 3341.974690] binder: 31679:31682 ioctl 4020ae46 7fda76f58510 returned -22 03:08:40 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) fsetxattr$security_selinux(r0, &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b, 0x0) [ 3342.013168] binder: 31679:31682 ioctl 4020ae46 7fda76f58510 returned -22 [ 3342.030268] binder: 31679:31682 ioctl 4020ae46 7fda76f58510 returned -22 [ 3342.046103] binder: 31679:31682 ioctl 4020ae46 7fda76f58510 returned -22 [ 3342.071009] binder: 31679:31682 ioctl 4020ae46 7fda76f58510 returned -22 [ 3342.088175] binder: 31679:31682 ioctl 4020ae46 7fda76f58510 returned -22 03:08:40 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b3d, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 3342.104076] audit: type=1400 audit(1590289720.460:60): avc: denied { relabelto } for pid=31696 comm="syz-executor.4" name="TCPv6" dev="sockfs" ino=547116 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:systemd_notify_exec_t:s0 tclass=tcp_socket permissive=1 [ 3342.105664] binder: 31679:31682 ioctl 4020ae46 7fda76f58510 returned -22 [ 3342.154327] binder: 31679:31682 ioctl 4020ae46 7fda76f58510 returned -22 [ 3342.184087] binder: 31679:31682 ioctl 4020ae46 7fda76f58510 returned -22 [ 3342.201698] binder: 31679:31682 ioctl 4020ae46 7fda76f58510 returned -22 [ 3342.220986] binder: 31679:31682 ioctl 4020ae46 7fda76f58510 returned -22 03:08:40 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b40, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:08:40 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x1ca83) [ 3342.237104] binder: 31679:31682 ioctl 4020ae46 7fda76f58510 returned -22 [ 3342.260699] binder: 31679:31682 ioctl 4020ae46 7fda76f58510 returned -22 [ 3342.277157] binder: 31679:31682 ioctl 4020ae46 7fda76f58510 returned -22 03:08:40 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b41, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 3342.319747] binder: 31679:31682 ioctl 4020ae46 7fda76f58510 returned -22 [ 3342.347668] binder: 31679:31682 ioctl 4020ae46 7fda76f58510 returned -22 03:08:40 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000040)) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x5bfd03) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000100)={[0x7, 0x8, 0x6, 0x7fc, 0x1, 0x1ff, 0x6060, 0x3, 0x1, 0xff, 0x4, 0x0, 0x80000000, 0xfffffffffffffffc, 0x10001, 0x1], 0x0, 0x4}) [ 3342.370308] binder: 31679:31682 ioctl 4020ae46 7fda76f58510 returned -22 [ 3342.404322] binder: 31679:31682 ioctl 4020ae46 7fda76f58530 returned -22 03:08:40 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b44, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 3342.441716] binder: 31712:31713 ioctl 80081272 20000040 returned -22 [ 3342.481722] binder: 31712:31717 ioctl 80081272 20000040 returned -22 03:08:40 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x460280) 03:08:40 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b45, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:08:40 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="a66b18b1ac"], 0x0, 0x0, 0x0}) r6 = openat(r2, &(0x7f0000000040)='./file0\x00', 0x0, 0x3) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) r8 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r9 = syz_open_dev$binderN(0x0, 0x0, 0x0) r10 = dup2(r9, r8) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r7, &(0x7f0000000240)={0x16, 0x98, 0xfa00, {&(0x7f0000000180), 0x2, r11, 0x30, 0x0, @ib={0x1b, 0x8, 0x8, {"ab73acf580b63262c87471b5580247b4"}, 0x7, 0x3, 0x2}}}, 0xa0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x2, 0x4, 0x0, r6}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) 03:08:40 executing program 4: quotactl(0x2080000202, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000200)='.') openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) [ 3342.624108] binder: 31727:31728 unknown command -1323799642 [ 3342.640180] binder: 31727:31728 ioctl c0306201 200000c0 returned -22 03:08:41 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 3342.675576] binder: 31727:31728 ioctl c0184900 20000080 returned -22 [ 3342.706374] binder: 31727:31728 ioctl 4020ae46 7fda76f58510 returned -22 03:08:41 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x402) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x309000, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "008c92f199182f7a", "ac5816d9317d8ca328a658d0af3e838f1bbea08fbc6e68972d8100e24bd039ec", "ac46041b", "12e88eac36597290"}, 0x38) r4 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x3a, @rand_addr=0x64010100, 0x4e20, 0x2, 'lc\x00', 0x2, 0x1, 0x1c}, 0x2c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) ioctl$FICLONE(r0, 0x40049409, r5) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) select(0x40, &(0x7f0000000100)={0x228, 0x7, 0x10001, 0xfb7f, 0x3f, 0x8, 0x2, 0x5}, &(0x7f0000000140)={0x3ff, 0x4, 0x1, 0x6a, 0x8, 0x5, 0x1, 0x1}, &(0x7f0000000180)={0xc8be, 0x10001, 0x6, 0x2, 0x6, 0x9, 0x7ff, 0x4}, &(0x7f0000000200)={r6, r7/1000+60000}) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) bind$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x40010, 0xffffffffffffffff, 0x692e0000) 03:08:41 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b47, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 3342.734340] binder: 31727:31728 ioctl 4020ae46 7fda76f58510 returned -22 [ 3342.758389] binder: 31727:31728 ioctl 4020ae46 7fda76f58510 returned -22 [ 3342.776480] binder: 31727:31728 ioctl 4020ae46 7fda76f58510 returned -22 03:08:41 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)={0x28, r5, 0xf20aaac1f6a2385f, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x28}}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)={0x14, r5, 0x100, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x2404c003}, 0x4011) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6bc7acc0"], 0x0, 0x0, 0x0}) ioctl$TCGETA(r3, 0x5405, &(0x7f0000000440)) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x80000, 0x0) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x18) r9 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$VIDIOC_TRY_EXT_CTRLS(r9, 0xc0205649, &(0x7f0000000640)={0x9f0000, 0x5802, 0x401, 0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x9a091d, 0x8, [], @ptr=0x3}}) sendmsg$IPSET_CMD_RENAME(r10, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x5, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000480)={0x2, {0x2, 0x7fff, 0x403, 0x70, 0x6, 0xf}}) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0xfffffffb, 0x17, 0xfffffffe, 0xffffffff, &(0x7f0000000000)="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"}) [ 3342.806009] binder: 31727:31728 ioctl 4020ae46 7fda76f58510 returned -22 [ 3342.839006] binder: 31727:31728 ioctl 4020ae46 7fda76f58510 returned -22 03:08:41 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b48, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 3342.864797] binder: 31727:31728 ioctl 4020ae46 7fda76f58510 returned -22 [ 3342.885611] binder: 31742:31745 unknown command -1062418581 [ 3342.897597] binder: 31727:31728 ioctl 4020ae46 7fda76f58510 returned -22 [ 3342.906979] binder: 31742:31745 ioctl c0306201 200000c0 returned -22 03:08:41 executing program 4: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000040)={0x8, 0x4, 0x80}) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000180)=""/35) ioctl$BLKBSZSET(r2, 0x40081271, &(0x7f0000000080)=0x7) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x3, 0x0, 0x2, 0x1, 0xd7, 0x73}, &(0x7f0000000140)=0x20) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) [ 3342.939233] binder: 31727:31728 ioctl 4020ae46 7fda76f58510 returned -22 [ 3342.953946] binder: 31742:31746 ioctl 5405 20000440 returned -22 [ 3342.967553] binder: 31727:31728 ioctl 4020ae46 7fda76f58510 returned -22 [ 3342.979833] binder: 31742:31745 ioctl c0205649 20000640 returned -22 [ 3342.990842] binder: 31748:31751 ioctl 80284504 20000180 returned -22 [ 3342.996589] binder: 31727:31728 ioctl 4020ae46 7fda76f58510 returned -22 [ 3343.009000] binder: 31727:31728 ioctl 4020ae46 7fda76f58510 returned -22 [ 3343.019823] binder: 31742:31746 ioctl c0205649 20000640 returned -22 [ 3343.031591] binder: 31748:31751 ioctl 40081271 20000080 returned -22 03:08:41 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b4a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 3343.042473] binder: 31727:31728 ioctl 4020ae46 7fda76f58510 returned -22 [ 3343.081500] binder: 31727:31728 ioctl 4020ae46 7fda76f58510 returned -22 03:08:41 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000440)) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="b440e7fd1bd1f6c5c6452b6c2339eb976f66b6c1d4f5292eae818d9c7e7a74a6deaa842aa35f3e893d4ea5868800122d55f66b78f3516beafbdd04888d713502c81e30558debd750a073494216900b50796f7b346ae61c8318ec5bceb9b516e2239e565fe7b7fc1edf8ec2cca08b084c8d22a6829b1bb24bac70029cdd741ec875378c7084fa25f1156d4097f58382b15a56cdbd94657d2aacc7e2a7231c294b34bae1a3713e8c04076371866e6e914394ad1d997deabdb6302be6662a14cd497740294a4519634e4a9e0a5d4ac6d89667b4087b800118fb8cf9c4fedc650c55696bdf2224311671ea4f8f71e8191b521abfdd1e5de98ad464101f7c178c35e7f76516da2d62bb2dc2440387913265ae8375c16d6337824cac794c5e8c99cad411073ed6ba700c69f55d9ad939958cdb7bbc9943904a1f5b56ac76556fd21bb4c58caca520b676ffbc49f200fd993026dbd48ef09cd4fbc012a7df91307ce210b2ea311e36c1a87ed68e782ba4a185a1b635d05d4ac1b34ad015dd022ad61f7feebbd450f5a07ee6f62b03e3bd7e7d50e96ecef6e30bc2a40377e021e459bdbf94f400854f21a2259215241c6bf4a1e436193509e27ac57c6518e42df7eab2a73ffcd785ee14821efeb96e878efd3b88120c7778e9f422c618e0614dd5ea79ea06d5c3e88ba397dd3b96171d77ef143a09d1d93bb44795c845a7271e1f1894c97cbedefcc53cedafe1dc004221dc4b451c09b93676d02cca15d7cd385d8e6bbb0d2b4f86a543d6e21af84760141347508e4da8611936cff6f2c84b2faf53434c55765849fd7858add5de4fea0ec98dc5b527a8677a66b70db0ebeb56bbfeaae567c3d1aac1929ac1053d1403cb1c14517769ac05145ff05700632af7a51848634b3b5f74bd894bf099769c65033c0475765934c7a1618b7ac3fbb39154f381466f1ac45ce2ba5c63184cb9f7b2f0aa372e10286b6c6ca4bb11eee3ded181d7c4838d791dc1df98a40b28e485b8ff373fc9e67f73a0a15f2f8e00554bfcacc5b0bf9f7cfb720ee63733597756d1579bd440d393574d08cd44a51d3d3a39a03b48f4ea754b7a404c9d2bb62e968cb05b297699585be683f21edbc7422a56ee26c3864553ff4fd91f7668203417fe3625d36f16a6d088bd3e62dbdff723c52069b0bc6e70cd9330a8ba46823a3349cba55e0b3394b633874dbdbdf45a677744b1842acc02d6ca35937951b3727d8920ac2e5a283035e144df463a529ca09d96f02659b640677620c8e5b49a3d648c32f3c31fe57eefbfdde5a19d10cb0c381ef1c90222fe557e186047c3b5fbb02a841a5d1afd0a6031dd7b6e0bf7dee97494015d22602f5e2c14ea7b498a1a877f57228dfa54eac4de742a69bae82a0e5bd87f25fb9e3675131f87565a92e312ca7afdaf1f8e95600735b2e9ae147b5bb08f162f"}) [ 3343.093314] binder: 31748:31757 ioctl 40081271 20000080 returned -22 [ 3343.110967] binder: 31727:31728 ioctl 4020ae46 7fda76f58510 returned -22 03:08:41 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b4b, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:08:41 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x3) [ 3343.148947] binder: 31727:31728 ioctl 4020ae46 7fda76f58510 returned -22 [ 3343.168369] binder: 31759:31761 ioctl 80285442 20000440 returned -22 [ 3343.175643] binder: 31727:31728 ioctl 4020ae46 7fda76f58510 returned -22 [ 3343.199702] binder: 31727:31728 ioctl 4020ae46 7fda76f58510 returned -22 [ 3343.207160] binder: 31759:31761 ioctl 80285442 20000440 returned -22 [ 3343.249636] binder: 31727:31728 ioctl 4020ae46 7fda76f58510 returned -22 [ 3343.295748] binder: 31727:31728 ioctl 4020ae46 7fda76f58510 returned -22 [ 3343.315139] binder: 31727:31728 ioctl 4020ae46 7fda76f58510 returned -22 [ 3343.323005] binder: 31727:31728 ioctl 4020ae46 7fda76f58510 returned -22 [ 3343.330909] binder: 31727:31728 ioctl 4020ae46 7fda76f58510 returned -22 [ 3343.339880] binder: 31727:31728 ioctl 4020ae46 7fda76f58510 returned -22 [ 3343.346903] binder: 31727:31728 ioctl 4020ae46 7fda76f58530 returned -22 03:08:41 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, &(0x7f0000000040)) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) r7 = dup2(r6, r5) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r7, 0x80184151, &(0x7f0000000100)={0x0, &(0x7f0000000180)="b892e8f3eb988b3d3a072ad781d3ca7d4785a141257b72c32117672a75fe8c00563a3a8786bab678ad9c151c1591d5bb4bf4e167b936e2d3256e6cfa92ed49db324ee2e973a0db0793ca645ec5cb2c613b2a3e81bed78c185888e7ae48e486eb4646651b1029d5eb39996efa1f595f1227a90d3c0b4719e5a45120a219ae07ecbbedbbfbc1d7723546f7ac33798347db139467be8569b52625886ec5d857636bddde8322d086e2d5f4c298f0dfeed546b549ae49c668de2e77ec9b087fa89fb27f4c7cd87bf15af46761534e6111988259fe2f81fbea3e4b87b2f281cc193a037157539ef41a5536cfd2ca07bcca4d6ae507e566aa96f7f170a301fa6fbb", 0xfe}) r8 = dup2(r4, r3) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) 03:08:41 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b4c, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:08:41 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dlm-monitor\x00', 0x100, 0x0) write$P9_RLERROR(r0, &(0x7f00000004c0)={0xe, 0x7, 0x1, {0x5, '-*,{.'}}, 0xe) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000440)=""/6) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="b440e7fd1bd1f6c5c6452b6c2339eb976f66b6c1d4f5292eae818d9c7e7a74a6deaa842aa35f3e893d4ea5868800122d55f66b78f3516beafbdd04888d713502c81e30558debd750a073494216900b50796f7b346ae61c8318ec5bceb9b516e2239e565fe7b7fc1edf8ec2cca08b084c8d22a6829b1bb24bac70029cdd741ec875378c7084fa25f1156d4097f58382b15a56cdbd94657d2aacc7e2a7231c294b34bae1a3713e8c04076371866e6e914394ad1d997deabdb6302be6662a14cd497740294a4519634e4a9e0a5d4ac6d89667b4087b800118fb8cf9c4fedc650c55696bdf2224311671ea4f8f71e8191b521abfdd1e5de98ad464101f7c178c35e7f76516da2d62bb2dc2440387913265ae8375c16d6337824cac794c5e8c99cad411073ed6ba700c69f55d9ad939958cdb7bbc9943904a1f5b56ac76556fd21bb4c58caca520b676ffbc49f200fd993026dbd48ef09cd4fbc012a7df91307ce210b2ea311e36c1a87ed68e782ba4a185a1b635d05d4ac1b34ad015dd022ad61f7feebbd450f5a07ee6f62b03e3bd7e7d50e96ecef6e30bc2a40377e021e459bdbf94f400854f21a2259215241c6bf4a1e436193509e27ac57c6518e42df7eab2a73ffcd785ee14821efeb96e878efd3b88120c7778e9f422c618e0614dd5ea79ea06d5c3e88ba397dd3b96171d77ef143a09d1d93bb44795c845a7271e1f1894c97cbedefcc53cedafe1dc004221dc4b451c09b93676d02cca15d7cd385d8e6bbb0d2b4f86a543d6e21af84760141347508e4da8611936cff6f2c84b2faf53434c55765849fd7858add5de4fea0ec98dc5b527a8677a66b70db0ebeb56bbfeaae567c3d1aac1929ac1053d1403cb1c14517769ac05145ff05700632af7a51848634b3b5f74bd894bf099769c65033c0475765934c7a1618b7ac3fbb39154f381466f1ac45ce2ba5c63184cb9f7b2f0aa372e10286b6c6ca4bb11eee3ded181d7c4838d791dc1df98a40b28e485b8ff373fc9e67f73a0a15f2f8e00554bfcacc5b0bf9f7cfb720ee63733597756d1579bd440d393574d08cd44a51d3d3a39a03b48f4ea754b7a404c9d2bb62e968cb05b297699585be683f21edbc7422a56ee26c3864553ff4fd91f7668203417fe3625d36f16a6d088bd3e62dbdff723c52069b0bc6e70cd9330a8ba46823a3349cba55e0b3394b633874dbdbdf45a677744b1842acc02d6ca35937951b3727d8920ac2e5a283035e144df463a529ca09d96f02659b640677620c8e5b49a3d648c32f3c31fe57eefbfdde5a19d10cb0c381ef1c90222fe557e186047c3b5fbb02a841a5d1afd0a6031dd7b6e0bf7dee97494015d22602f5e2c14ea7b498a1a877f57228dfa54eac4de742a69bae82a0e5bd87f25fb9e3675131f87565a92e312ca7afdaf1f8e95600735b2e9ae147b5bb08f162f"}) 03:08:41 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x80400) 03:08:41 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000100)={0x7f800, 0x7f}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) dup2(r2, r1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="52f34aade13da22629beaeb2932fb7842962ac2c733fb2f4fd65551737ff10d8ca2014d113a0252a029779a42c526bbaef15802703808748691665b804675c2060f21bd750848c9a5488d78926d58fcf50e3e08c8e394973f0674c92b50401252b9de4873d0b807c489435b681b1ad62f8044a7bff65432a59889fdb7c49834802cd207f9b045f74"], 0x0, 0x0, 0x0}) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="be234be1612a1cd6fe191c22f2c1a6ff1281b5a2ab7ab219c83b7d7bd55a849efc2fcaf74db93859003d01ad6db043fca2bc41de321fcf91ffcc4f23c63fc8e241f1041a83b38d9389a109094d1a9099e3c274a6e2c218e83a1e1dd2078e15e73a753c857d1905b8c8921f981d565d4e6ba28b4da5c3e8929a84e46b3f077a99b19008ce150f084f05032620a76db42fc49ba0d32fb6a5e601a100", 0x9b) ioctl$TIOCCONS(r0, 0x541d) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0xff, 0x1, 0x9, 0x0, 0x0}) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000200)=0xff) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000040)={r6}) ioctl$KDSETMODE(r0, 0x4b71, 0x0) [ 3343.476443] binder: 31779:31781 unknown command -1387596974 [ 3343.480801] binder: 31773:31784 ioctl 8010500d 20000040 returned -22 [ 3343.513147] binder: 31779:31781 ioctl c0306201 200000c0 returned -22 03:08:41 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b4d, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:08:41 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040)) r3 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x400000, 0x14c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000140)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0x7f, @mcast1, 0x8}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e21, 0x5, @empty, 0x8}, @in6={0xa, 0x4e21, 0x38b1, @private0={0xfc, 0x0, [], 0x1}, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e22, 0x400, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x401}, @in6={0xa, 0x4e22, 0x2, @ipv4={[], [], @empty}, 0x5}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0xcc) [ 3343.529821] binder: 31773:31784 ioctl 80184151 20000100 returned -22 [ 3343.536482] binder: 31779:31786 unknown command 0 [ 3343.543860] binder: 31779:31786 ioctl c0306201 200000c0 returned -22 [ 3343.566039] binder: 31773:31784 ioctl 4020ae46 7fda76f58510 returned -22 03:08:41 executing program 3: ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000440)={0x4, 0x8, 0x9e, 0x8000}) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) r1 = dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9a4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xa2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fffffff}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000088}, 0x8004) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) [ 3343.576733] binder: 31779:31781 ioctl c02064b2 20000000 returned -22 [ 3343.593663] binder: 31773:31784 ioctl 4020ae46 7fda76f58510 returned -22 [ 3343.604057] binder: 31779:31781 unknown command -1387596974 [ 3343.617184] binder: 31779:31786 unknown command 0 [ 3343.623464] binder: 31779:31781 ioctl c0306201 200000c0 returned -22 03:08:42 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b4e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 3343.626176] binder: 31788:31791 ioctl 800454cf 20000040 returned -22 [ 3343.633740] binder: 31779:31786 ioctl c0306201 200000c0 returned -22 [ 3343.643559] binder: 31779:31796 ioctl c02064b2 20000000 returned -22 [ 3343.657479] binder: 31773:31784 ioctl 4020ae46 7fda76f58510 returned -22 [ 3343.684050] binder: 31773:31784 ioctl 4020ae46 7fda76f58510 returned -22 [ 3343.720382] binder: 31773:31784 ioctl 4020ae46 7fda76f58510 returned -22 03:08:42 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r4) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) syz_open_dev$tty1(0xc, 0x4, 0x2) r7 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r8 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r3, 0x8818564c, &(0x7f0000000100)) r9 = dup2(r8, r7) r10 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host}, 0x10, 0x800) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000009c0)={0x990000, 0xccf3, 0x10001, r10, 0x0, &(0x7f0000000980)={0x990001, 0x7f, [], @p_u32=&(0x7f0000000940)=0x8}}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$KDSETMODE(r9, 0x4b71, 0x0) fchdir(r0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000000)) 03:08:42 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\t\x00\f@'], 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000440)=""/124) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:42 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4141) [ 3343.745898] binder: 31773:31784 ioctl 4020ae46 7fda76f58510 returned -22 [ 3343.770979] binder: 31773:31784 ioctl 4020ae46 7fda76f58510 returned -22 [ 3343.816265] binder: 31773:31784 ioctl 4020ae46 7fda76f58510 returned -22 [ 3343.831029] binder: 31806:31809 ioctl 8818564c 20000100 returned -22 [ 3343.852032] binder: 31773:31784 ioctl 4020ae46 7fda76f58510 returned -22 [ 3343.861833] binder: 31807:31812 unknown command 1074528265 [ 3343.864977] binder: 31806:31809 ioctl 4b71 0 returned -22 [ 3343.879384] binder: 31807:31812 ioctl c0306201 200000c0 returned -22 [ 3343.889856] binder: 31773:31784 ioctl 4020ae46 7fda76f58510 returned -22 [ 3343.909226] binder: 31806:31814 ioctl 8818564c 20000100 returned -22 [ 3343.913280] binder: 31773:31784 ioctl 4020ae46 7fda76f58510 returned -22 [ 3343.922955] binder: 31807:31812 ioctl 81785501 20000440 returned -22 [ 3343.924010] binder: 31806:31809 ioctl 4b71 0 returned -22 [ 3343.949027] binder: 31773:31784 ioctl 4020ae46 7fda76f58510 returned -22 [ 3343.949133] binder: 31807:31815 unknown command 1074528265 [ 3343.961202] binder: 31807:31812 ioctl 81785501 20000440 returned -22 [ 3343.984157] binder: 31773:31784 ioctl 4020ae46 7fda76f58510 returned -22 [ 3343.985768] binder: 31807:31815 ioctl c0306201 200000c0 returned -22 [ 3344.010964] binder: 31773:31784 ioctl 4020ae46 7fda76f58510 returned -22 [ 3344.031725] binder: 31773:31784 ioctl 4020ae46 7fda76f58510 returned -22 [ 3344.049235] binder: 31773:31784 ioctl 4020ae46 7fda76f58510 returned -22 [ 3344.056433] binder: 31773:31784 ioctl 4020ae46 7fda76f58510 returned -22 [ 3344.072752] binder: 31773:31784 ioctl 4020ae46 7fda76f58510 returned -22 [ 3344.082772] binder: 31773:31784 ioctl 4020ae46 7fda76f58510 returned -22 [ 3344.094064] binder: 31773:31784 ioctl 4020ae46 7fda76f58510 returned -22 [ 3344.112946] binder: 31773:31784 ioctl 4020ae46 7fda76f58510 returned -22 03:08:42 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x6) ioctl$TIOCL_UNBLANKSCREEN(r2, 0x541c, &(0x7f0000000080)) 03:08:42 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b52, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:08:42 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4140) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000200)="5e6f9291c6fc28077316e7d8361bdeea44b529bd874dfe0d25bc852c3e0595008dbcba5dbfdf76f920bd395cd164c547230591fd9e7cfe624792de13049b92a39e9048cb7ac545e8b8a4348af31bdceb92b750835daac10875588e4fb0ded2e9eba8fbe4142a113af6ffbbf87cb7ce7e9b373a95e8c39791940f4507ac747143f064d468048b1258c8520220ce") r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @local, 0x6}]}, &(0x7f0000000180)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000140)=0xfffffeb0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x66, &(0x7f0000000300)={r9, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x90) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000040)={r9, 0x7ff, 0x200}, 0x8) 03:08:42 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000040)={0x12}) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f0000000080)) ioctl$KDSETMODE(r0, 0x4b71, 0x0) 03:08:42 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) lsetxattr$security_selinux(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='security.selinux\x00', &(0x7f00000004c0)='system_u:object_r:gpg_exec_t:s0\x00', 0x20, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) alarm(0x8) [ 3344.125520] binder: 31773:31784 ioctl 4020ae46 7fda76f58510 returned -22 [ 3344.133583] binder: 31773:31784 ioctl 4020ae46 7fda76f58510 returned -22 [ 3344.140872] binder: 31773:31784 ioctl 4020ae46 7fda76f58510 returned -22 [ 3344.148407] binder: 31773:31784 ioctl 4020ae46 7fda76f58530 returned -22 03:08:42 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e730c4c103fa0f2ae2dc7be8335611500d092269dda460fe70caae9767be74ff2c8ab4b58c5007eca6e23b875f826a14f4286077563108bd0d2b9774d20a09cd694cf11dbe8a43e9dc1ed404e07b1d963720d2f1f78e351ddaf4d5011b1bb8526bf322f639b"], 0x0, 0x0, 0x0}) ioctl$KDDELIO(r3, 0x4b35, 0x80) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x17, 0x2, 0x0, &(0x7f0000000000)="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"}) 03:08:42 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b60, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 3344.222235] binder: 31827:31830 ioctl c208ae62 20000080 returned -22 [ 3344.246592] binder: 31828:31834 ioctl 4020ae46 7fda76f58510 returned -22 03:08:42 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) epoll_create(0x1) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x800) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r4) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f00000000c0)={0x100, 0x0, 0x10001, 0x1}) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f0000000100)={0x6, r7}) ioctl$KDSETMODE(0xffffffffffffffff, 0x4bfb, 0x8) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r8, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) getsockopt$IP_VS_SO_GET_VERSION(r8, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40) [ 3344.281620] binder: 31827:31830 ioctl c208ae62 20000080 returned -22 [ 3344.292089] binder: 31828:31834 ioctl 4020ae46 7fda76f58510 returned -22 [ 3344.304789] binder: 31828:31841 ioctl 4004ae99 20000040 returned -22 [ 3344.314291] binder: 31839:31843 unknown command 1275884302 [ 3344.328325] binder: 31828:31834 ioctl 4020ae46 7fda76f58510 returned -22 [ 3344.332292] binder: 31828:31841 ioctl 541c 20000080 returned -22 [ 3344.342478] binder: 31839:31843 ioctl c0306201 200000c0 returned -22 [ 3344.349600] ================================================================== [ 3344.349654] BUG: KASAN: global-out-of-bounds in fbcon_get_font+0x28d/0x5b0 [ 3344.349665] Read of size 28 at addr ffffffff87ad4cd8 by task syz-executor.5/31845 [ 3344.349669] [ 3344.349681] CPU: 0 PID: 31845 Comm: syz-executor.5 Not tainted 4.19.124-syzkaller #0 [ 3344.349689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3344.349693] Call Trace: [ 3344.349712] dump_stack+0x1fc/0x2fe [ 3344.349728] ? fbcon_get_font+0x28d/0x5b0 [ 3344.349744] print_address_description.cold+0x5/0x222 [ 3344.349761] ? fbcon_get_font+0x28d/0x5b0 [ 3344.349774] kasan_report.cold+0x88/0x2b9 [ 3344.349792] memcpy+0x20/0x50 [ 3344.349807] fbcon_get_font+0x28d/0x5b0 [ 3344.349822] ? display_to_var+0x7b0/0x7b0 [ 3344.349837] con_font_op+0x1f7/0x1130 [ 3344.349854] ? con_write+0xe0/0xe0 [ 3344.349873] ? cap_capable+0x1eb/0x250 [ 3344.349890] ? security_capable+0x8e/0xc0 [ 3344.349910] vt_ioctl+0xcd0/0x2500 [ 3344.349926] ? complete_change_console+0x390/0x390 [ 3344.349938] ? avc_has_extended_perms+0x870/0xe90 [ 3344.349964] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3344.349981] ? complete_change_console+0x390/0x390 [ 3344.349999] tty_ioctl+0x7a5/0x1420 [ 3344.350017] ? tty_vhangup+0x30/0x30 [ 3344.350034] ? mark_held_locks+0xf0/0xf0 [ 3344.350053] ? mark_held_locks+0xf0/0xf0 [ 3344.350071] ? debug_check_no_obj_freed+0x1f5/0x3e1 [ 3344.350096] ? tty_vhangup+0x30/0x30 [ 3344.350111] do_vfs_ioctl+0xcda/0x12e0 [ 3344.350128] ? selinux_file_ioctl+0x46c/0x5d0 [ 3344.350144] ? selinux_file_ioctl+0x125/0x5d0 [ 3344.350159] ? check_preemption_disabled+0x41/0x280 [ 3344.350172] ? ioctl_preallocate+0x200/0x200 [ 3344.350190] ? selinux_socket_sock_rcv_skb+0x570/0x570 [ 3344.350205] ? __fget+0x345/0x520 [ 3344.350223] ? ksys_dup3+0x3c0/0x3c0 [ 3344.350244] ? security_file_ioctl+0x6c/0xb0 [ 3344.350261] ksys_ioctl+0x9b/0xc0 [ 3344.350277] __x64_sys_ioctl+0x6f/0xb0 [ 3344.350291] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3344.350307] do_syscall_64+0xf9/0x620 [ 3344.350325] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3344.350338] RIP: 0033:0x45ca29 [ 3344.350355] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3344.350364] RSP: 002b:00007f02cf0ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3344.350379] RAX: ffffffffffffffda RBX: 00000000004e6b40 RCX: 000000000045ca29 [ 3344.350387] RDX: 0000000020000400 RSI: 0000000000004b60 RDI: 0000000000000003 [ 3344.350396] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3344.350405] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 3344.350414] R13: 0000000000000374 R14: 00000000004c605c R15: 00007f02cf0ed6d4 [ 3344.350432] [ 3344.350438] The buggy address belongs to the variable: [ 3344.350452] fontdata_8x16+0xff8/0x1120 [ 3344.350456] [ 3344.350460] Memory state around the buggy address: [ 3344.350473] ffffffff87ad4b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3344.350483] ffffffff87ad4c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3344.350494] >ffffffff87ad4c80: 00 00 00 00 00 00 00 00 00 00 00 00 fa fa fa fa [ 3344.350500] ^ [ 3344.350511] ffffffff87ad4d00: 06 fa fa fa fa fa fa fa 05 fa fa fa fa fa fa fa [ 3344.350523] ffffffff87ad4d80: 06 fa fa fa fa fa fa fa 00 00 03 fa fa fa fa fa [ 3344.350528] ================================================================== [ 3344.350532] Disabling lock debugging due to kernel taint [ 3344.350540] Kernel panic - not syncing: panic_on_warn set ... [ 3344.350540] [ 3344.350555] CPU: 0 PID: 31845 Comm: syz-executor.5 Tainted: G B 4.19.124-syzkaller #0 [ 3344.350563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3344.350566] Call Trace: [ 3344.350582] dump_stack+0x1fc/0x2fe [ 3344.350598] panic+0x26a/0x50e [ 3344.350664] ? __warn_printk+0xf3/0xf3 [ 3344.350680] ? lock_downgrade+0x740/0x740 [ 3344.350697] ? print_shadow_for_address+0xb8/0x114 [ 3344.350711] ? trace_hardirqs_on+0x55/0x210 [ 3344.350727] ? fbcon_get_font+0x28d/0x5b0 [ 3344.350741] kasan_end_report+0x43/0x49 [ 3344.350755] kasan_report.cold+0xa4/0x2b9 [ 3344.350769] memcpy+0x20/0x50 [ 3344.350782] fbcon_get_font+0x28d/0x5b0 [ 3344.350797] ? display_to_var+0x7b0/0x7b0 [ 3344.350810] con_font_op+0x1f7/0x1130 [ 3344.350825] ? con_write+0xe0/0xe0 [ 3344.350841] ? cap_capable+0x1eb/0x250 [ 3344.350857] ? security_capable+0x8e/0xc0 [ 3344.350873] vt_ioctl+0xcd0/0x2500 [ 3344.350888] ? complete_change_console+0x390/0x390 [ 3344.350900] ? avc_has_extended_perms+0x870/0xe90 [ 3344.350920] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3344.350934] ? complete_change_console+0x390/0x390 [ 3344.350950] tty_ioctl+0x7a5/0x1420 [ 3344.350967] ? tty_vhangup+0x30/0x30 [ 3344.350981] ? mark_held_locks+0xf0/0xf0 [ 3344.350997] ? mark_held_locks+0xf0/0xf0 [ 3344.351013] ? debug_check_no_obj_freed+0x1f5/0x3e1 [ 3344.351033] ? tty_vhangup+0x30/0x30 [ 3344.351046] do_vfs_ioctl+0xcda/0x12e0 [ 3344.351061] ? selinux_file_ioctl+0x46c/0x5d0 [ 3344.351076] ? selinux_file_ioctl+0x125/0x5d0 [ 3344.351091] ? check_preemption_disabled+0x41/0x280 [ 3344.351103] ? ioctl_preallocate+0x200/0x200 [ 3344.351118] ? selinux_socket_sock_rcv_skb+0x570/0x570 [ 3344.351131] ? __fget+0x345/0x520 [ 3344.351145] ? ksys_dup3+0x3c0/0x3c0 [ 3344.351162] ? security_file_ioctl+0x6c/0xb0 [ 3344.351174] ksys_ioctl+0x9b/0xc0 [ 3344.351187] __x64_sys_ioctl+0x6f/0xb0 [ 3344.351200] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3344.351213] do_syscall_64+0xf9/0x620 [ 3344.351229] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3344.351239] RIP: 0033:0x45ca29 [ 3344.351252] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3344.351259] RSP: 002b:00007f02cf0ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3344.351271] RAX: ffffffffffffffda RBX: 00000000004e6b40 RCX: 000000000045ca29 [ 3344.351279] RDX: 0000000020000400 RSI: 0000000000004b60 RDI: 0000000000000003 [ 3344.351287] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3344.351294] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 3344.351303] R13: 0000000000000374 R14: 00000000004c605c R15: 00007f02cf0ed6d4 [ 3344.352781] Kernel Offset: disabled [ 3344.962756] Rebooting in 86400 seconds..