0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000480)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, 0x0) 03:34:24 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x400, 0x0) [ 2174.888612][T24523] binder: 24522:24523 ioctl c0306201 20000040 returned -14 [ 2174.928263][T24527] binder: 24525:24527 ioctl c0306201 20000040 returned -14 03:34:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2174.965507][T24530] binder: 24528:24530 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 2174.990077][T24530] binder: 24528:24530 unknown command 0 03:34:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2175.019549][T24530] binder: 24528:24530 ioctl c0306201 20000040 returned -22 03:34:24 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2175.078054][T24594] binder: 24567:24594 ioctl c0306201 20000040 returned -14 [ 2175.086214][T24579] binder: 24571:24579 ioctl c0306201 20000040 returned -14 03:34:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xe630c4000000000, 0x0}) 03:34:24 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000480)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, 0x0) 03:34:24 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/sockstat6\x00') setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000080)={0x7ff, {{0x2, 0x4e22, @loopback}}}, 0x88) 03:34:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2175.204769][T24648] binder: 24647:24648 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER 03:34:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:24 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2175.248656][T24648] binder: 24647:24648 unknown command 0 03:34:24 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) fadvise64(r0, 0x4d, 0xf297, 0x5) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000002c0)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000300)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)=0x0) ioctl$TIOCCONS(r0, 0x541d) r2 = syz_open_procfs(r1, &(0x7f00000003c0)='setgroups\x00') connect$rose(r0, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, 0x1c) sendmsg$nl_netfilter(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x11}, 0x4000000) [ 2175.289824][T24648] binder: 24647:24648 ioctl c0306201 20000040 returned -22 [ 2175.310386][T24658] binder: 24653:24658 ioctl c0306201 20000040 returned -14 03:34:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xf630c4000000000, 0x0}) 03:34:24 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fff8, 0x0, 0x820004, 0x0}, 0x2c) 03:34:24 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2175.346085][T24660] binder: 24656:24660 ioctl c0306201 20000040 returned -14 [ 2175.361527][T24658] binder: 24653:24658 ioctl c0306201 20000040 returned -14 03:34:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2175.433599][T24665] binder: 24663:24665 unknown command 0 [ 2175.453476][T24665] binder: 24663:24665 ioctl c0306201 20000040 returned -22 [ 2175.464315][T24669] QAT: Invalid ioctl 03:34:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2175.493185][T24669] QAT: Invalid ioctl 03:34:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1063084000000000, 0x0}) [ 2175.531588][T24674] binder: 24673:24674 ioctl c0306201 20000040 returned -14 [ 2175.549645][T24690] binder: 24675:24690 ioctl c0306201 20000040 returned -14 03:34:24 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:24 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video35\x00', 0x2, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000140), 0x4) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0xffffffffffffffde, 0xfffffffffffffffe) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000100)) 03:34:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2175.616612][T24728] binder: 24727:24728 unknown command 0 03:34:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2175.660893][T24728] binder: 24727:24728 ioctl c0306201 20000040 returned -22 03:34:24 executing program 2: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000000100000001000000c3a1905b5e2acddb"], 0x18}, 0x0) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 2175.711607][T24787] binder: 24786:24787 ioctl c0306201 20000040 returned -14 [ 2175.736645][T24791] binder: 24790:24791 ioctl c0306201 20000040 returned -14 03:34:24 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1163484000000000, 0x0}) 03:34:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:24 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@generic={0x0, 0x1, 0x101}) 03:34:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2175.900905][T24815] binder: 24804:24815 unknown command 0 [ 2175.923929][T24846] binder: 24799:24846 ioctl c0306201 20000040 returned -14 03:34:25 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2175.945051][T24815] binder: 24804:24815 ioctl c0306201 20000040 returned -22 03:34:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:25 executing program 0: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="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", 0xfc) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xffffffff, 0x4, 0x2}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={r2, 0xff, 0x3, 0x3, 0x7fff, 0x1}, &(0x7f0000000100)=0x14) 03:34:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1200000000000000, 0x0}) [ 2176.020320][T24879] binder: 24850:24879 ioctl c0306201 20000040 returned -14 03:34:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2176.103347][T24915] binder: 24914:24915 ioctl c0306201 20000040 returned -14 [ 2176.124762][T24919] binder: 24916:24919 unknown command 0 [ 2176.133939][T24915] binder: 24914:24915 ioctl c0306201 20000040 returned -14 [ 2176.135554][T24918] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:25 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:25 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8060000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2176.143572][T24919] binder: 24916:24919 ioctl c0306201 20000040 returned -22 [ 2176.183959][T24923] binder: 24922:24923 ioctl c0306201 20000040 returned -14 03:34:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:25 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:25 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net\x00') 03:34:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1263484000000000, 0x0}) 03:34:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:25 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2176.314678][T24934] binder: 24933:24934 ioctl c0306201 20000040 returned -14 [ 2176.345039][T24937] binder: 24936:24937 unknown command 0 03:34:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2176.372343][T24942] binder: 24941:24942 ioctl c0306201 20000040 returned -14 [ 2176.381406][T24937] binder: 24936:24937 ioctl c0306201 20000040 returned -22 03:34:25 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:25 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') splice(r0, &(0x7f0000000080)=0x4b, r0, &(0x7f0000000100), 0x8, 0x4) fsetxattr$security_smack_entry(r0, &(0x7f0000000000)='security.SMACK64IPIN\x00', &(0x7f0000000040)='\x00', 0x1, 0x3) 03:34:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x2000000000000000, 0x0}) 03:34:25 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2176.468177][T24949] binder: 24948:24949 ioctl c0306201 20000040 returned -14 03:34:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2176.516260][T24949] binder: 24948:24949 ioctl c0306201 20000040 returned -14 [ 2176.538556][T24954] binder: 24952:24954 unknown command 0 03:34:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2176.589080][T24963] binder: 24960:24963 ioctl c0306201 20000040 returned -14 [ 2176.596099][T24954] binder: 24952:24954 ioctl c0306201 20000040 returned -22 03:34:25 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:25 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200000, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x5, 0x4) getpid() ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000100)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000140)='net/ip_vs_stats\x00') setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000000)=0x63, 0x2) 03:34:25 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x3f00000000000000, 0x0}) 03:34:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2176.662806][T24966] binder: 24965:24966 ioctl c0306201 20000040 returned -14 03:34:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2176.755599][T24974] binder: 24972:24974 unknown command 0 [ 2176.783733][T24974] binder: 24972:24974 ioctl c0306201 20000040 returned -22 [ 2176.784461][T24981] binder: 24977:24981 ioctl c0306201 20000040 returned -14 03:34:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x4800000000000000, 0x0}) [ 2176.829433][T24985] binder: 24984:24985 ioctl c0306201 20000040 returned -14 03:34:26 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:26 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x400000, 0x0) 03:34:26 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2176.897953][T24989] binder: 24988:24989 unknown command 0 [ 2176.928600][T24989] binder: 24988:24989 ioctl c0306201 20000040 returned -22 03:34:26 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x4c00000000000000, 0x0}) [ 2176.988304][T25000] binder: 24999:25000 ioctl c0306201 20000040 returned -14 03:34:26 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x8, 0x8, 0x0, 0x8001, 0x100000001, 0x5, 0x7e, {0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x3, 0x4, 0x4, 0x0, 0x1}}, &(0x7f0000000200)=0xb0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000240)={r1, @in6={{0xa, 0x4e20, 0x7ff, @dev={0xfe, 0x80, [], 0xd}, 0x7}}}, &(0x7f0000000300)=0x84) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', r0}, 0x10) 03:34:26 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2177.058044][T25004] binder: 25001:25004 ioctl c0306201 20000040 returned -14 [ 2177.084170][T25004] binder: 25001:25004 ioctl c0306201 20000040 returned -14 [ 2177.100665][T25009] binder: 25006:25009 unknown command 0 [ 2177.138716][T25009] binder: 25006:25009 ioctl c0306201 20000040 returned -22 03:34:26 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:26 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000000)=0x1100001, 0x4) 03:34:26 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2177.184124][T25020] binder: 25019:25020 ioctl c0306201 20000040 returned -14 03:34:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x6000000000000000, 0x0}) 03:34:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:26 executing program 0: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='setgroups\x00') fcntl$dupfd(r1, 0x0, r1) connect$netlink(r1, &(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc) [ 2177.300877][T25030] binder: 25029:25030 ioctl c0306201 20000040 returned -14 [ 2177.338794][T25034] binder: 25033:25034 ioctl c0306201 20000040 returned -14 03:34:26 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:26 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) [ 2177.366819][T25037] binder: 25036:25037 unknown command 0 [ 2177.379703][T25037] binder: 25036:25037 ioctl c0306201 20000040 returned -22 03:34:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:26 executing program 0: r0 = fcntl$getown(0xffffffffffffff9c, 0x9) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000040)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x24) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={r2, 0x800003f0}, &(0x7f00000001c0)=0x11b) syz_open_procfs(r0, &(0x7f00000000c0)='\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00') 03:34:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x6800000000000000, 0x0}) 03:34:26 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) [ 2177.494257][T25050] binder: 25049:25050 ioctl c0306201 20000040 returned -14 [ 2177.496975][T25048] binder: 25047:25048 ioctl c0306201 20000040 returned -14 03:34:26 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:26 executing program 0: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000000)=0x0) syz_open_procfs(r0, &(0x7f0000000040)='environ\x00') getgroups(0x8, &(0x7f0000000080)=[0x0, 0x0, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00]) getgroups(0x1, &(0x7f00000000c0)=[r1]) 03:34:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2177.594929][T25057] binder: 25056:25057 unknown command 0 [ 2177.627176][T25057] binder: 25056:25057 ioctl c0306201 20000040 returned -22 03:34:26 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x6c00000000000000, 0x0}) [ 2177.718328][T25068] binder: 25066:25068 ioctl c0306201 20000040 returned -14 [ 2177.757820][T25071] binder: 25069:25071 ioctl c0306201 20000040 returned -14 03:34:26 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:26 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x68, r1, 0x2, 0x70bd27, 0x25dfdbff, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x2, @link='syz1\x00'}}}, ["", "", "", "", "", ""]}, 0x217}, 0x1, 0x0, 0x0, 0x8000}, 0x0) [ 2177.789761][T25075] binder: 25073:25075 unknown command 0 [ 2177.814381][T25075] binder: 25073:25075 ioctl c0306201 20000040 returned -22 03:34:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7400000000000000, 0x0}) 03:34:27 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) [ 2177.883347][T25082] binder: 25081:25082 ioctl c0306201 20000040 returned -14 03:34:27 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:27 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') connect$x25(r0, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) connect$x25(r0, &(0x7f0000000000)={0x9, @remote={[], 0x1}}, 0x12) 03:34:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2177.970793][T25091] binder_thread_write: 12 callbacks suppressed [ 2177.970808][T25091] binder: 25088:25091 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 2177.987227][T25092] binder: 25089:25092 ioctl c0306201 20000040 returned -14 03:34:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:27 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2178.044668][T25091] binder: 25088:25091 unknown command 0 [ 2178.051475][T25101] binder: 25100:25101 ioctl c0306201 20000040 returned -14 [ 2178.073821][T25091] binder: 25088:25091 ioctl c0306201 20000040 returned -22 03:34:27 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x14100) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)) write$FUSE_DIRENT(r1, &(0x7f0000000100)={0xe0, 0x0, 0x8, [{0x5, 0x8000, 0x10, 0xfa94, '/dev/input/mice\x00'}, {0x6, 0x800, 0x5, 0x10000, 'nodev'}, {0x5, 0x101, 0x16, 0x7fff, 'securityself@em0wlan0-'}, {0x0, 0x8, 0x3, 0x17, '&(^'}, {0x1, 0x7fff, 0x1, 0xc6f, '\x00'}, {0x3, 0x7, 0x0, 0x2}]}, 0xe0) 03:34:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7a00000000000000, 0x0}) 03:34:27 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43050000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2178.183332][T25110] binder_transaction: 43 callbacks suppressed [ 2178.183348][T25110] binder: 25105:25110 transaction failed 29189/-22, size 0-0 line 2994 [ 2178.203283][T25114] binder: 25112:25114 transaction failed 29189/-22, size 0-0 line 2994 [ 2178.210032][T25110] binder: 25105:25110 ioctl c0306201 20000040 returned -14 [ 2178.219942][T25115] binder: 25111:25115 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER 03:34:27 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfc, 0x114, 0x35b, {"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"}}, {0x0, "5209669c6571c8a386f929e6c9"}}, &(0x7f0000000240)=""/1, 0x123, 0x1, 0x1}, 0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') [ 2178.244844][T25114] binder: 25112:25114 ioctl c0306201 20000040 returned -14 [ 2178.255259][T25115] binder: 25111:25115 unknown command 0 [ 2178.262716][T25115] binder: 25111:25115 ioctl c0306201 20000040 returned -22 03:34:27 executing program 3: membarrier(0xc, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c6300000b63e60700000000000000000000000000000000000000000000000000000000000000000000000000000069651d2ecd41878e8c81241a0000000000000000000000000000000000463000000000000036a7323beffeb29c7831aec3deda8d0f"], 0x0, 0x0, 0x0}) [ 2178.359968][T25124] binder: 25123:25124 unknown command 132539147 [ 2178.374102][T25124] binder: 25123:25124 ioctl c0306201 20000040 returned -22 03:34:27 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:27 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800e0000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:27 executing program 0: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) sched_setparam(r0, &(0x7f0000000040)=0x5) r1 = socket$l2tp(0x18, 0x1, 0x1) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000100)=""/89, &(0x7f0000000080)=0x59) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x4c201, 0x0) 03:34:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000002c0)={0x6, [0x1000, 0x3, 0x4, 0x8, 0x5, 0x2]}, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x44c80, 0x0) connect$vsock_dgram(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @hyper}, 0x10) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000180)={@my=0x0}) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f00000001c0)=""/148, &(0x7f0000000280)=0x94) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e22, 0xf8c, @mcast2, 0x7}, @in={0x2, 0x4e23, @rand_addr=0xffffffff7fffffff}, @in6={0xa, 0x4e20, 0x9, @loopback, 0x94}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e21, 0x80000000, @mcast2, 0x1f}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e23, @rand_addr=0xffffffffffffffff}, @in6={0xa, 0x4e21, 0x4, @loopback, 0x3}], 0xb0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x50, 0x0, &(0x7f0000000080)=[@dead_binder_done={0x40086310, 0x1}, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) syz_open_dev$media(&(0x7f00000003c0)='/dev/media#\x00', 0x3, 0x8442) [ 2178.848033][T25230] binder: 25228:25230 transaction failed 29189/-22, size 0-0 line 2994 [ 2178.852418][T25232] binder: 25227:25232 transaction failed 29189/-22, size 0-0 line 2994 [ 2178.882451][T25237] binder: 25234:25237 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 2178.890504][T25230] binder: 25228:25230 ioctl c0306201 20000040 returned -14 03:34:28 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80350000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2178.897264][T25232] binder: 25227:25232 ioctl c0306201 20000040 returned -14 [ 2178.919459][T25237] binder: 25234:25237 ERROR: BC_REGISTER_LOOPER called without request 03:34:28 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:28 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='s9\xaf\xa5zB(B\xde\x00') 03:34:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2178.980605][T25237] binder: 25234:25237 unknown command 0 [ 2178.984900][T25245] binder: 25244:25245 transaction failed 29189/-22, size 0-0 line 2994 [ 2178.991582][T25237] binder: 25234:25237 ioctl c0306201 20000040 returned -22 [ 2179.014265][T25245] binder: 25244:25245 ioctl c0306201 20000040 returned -14 03:34:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2179.058027][T25272] binder: 25270:25272 transaction failed 29189/-22, size 0-0 line 2994 [ 2179.137037][T25272] binder: 25270:25272 ioctl c0306201 20000040 returned -14 [ 2179.159989][T25272] binder: 25270:25272 transaction failed 29189/-22, size 0-0 line 2994 [ 2179.173462][T25272] binder: 25270:25272 ioctl c0306201 20000040 returned -14 [ 2179.182618][T25356] binder: 25355:25356 transaction failed 29189/-22, size 0-0 line 2994 [ 2179.210334][T25356] binder: 25355:25356 ioctl c0306201 20000040 returned -14 03:34:28 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:28 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='setgro\xe0\xc76vooGYu~j\xc9\xf2oP\x8aL\x9e\xcb\xaa\x04\x9d\xa3\xf5\xdbC\x8b') 03:34:28 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86ddffff]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:28 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000140)={0x1, 0xa43, 0x8, 0x9}) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x40840, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000180), &(0x7f0000000100)=0xf6) membarrier(0x68, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c6300000b6300002ada37b42fd438c9c1514311b6e1c100000000000000000000000000000000000000000000000000000000020000000000001800000000000000000000000000"], 0x0, 0x0, 0x0}) 03:34:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2179.749630][T25361] binder: 25360:25361 transaction failed 29189/-22, size 0-0 line 2994 [ 2179.754695][T25365] binder: 25364:25365 transaction failed 29189/-22, size 0-0 line 2994 [ 2179.765270][T25369] binder: 25362:25369 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 2179.781819][T25361] binder: 25360:25361 ioctl c0306201 20000040 returned -14 03:34:28 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88470000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:28 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80200, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/107) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000004c0)={0x0, 0x3}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000a00)={0x0, 0x0, 0x3, [0xbe, 0x1, 0x7]}, &(0x7f0000000a40)=0xe) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000a80)=@assoc_id=0x0, &(0x7f0000000ac0)=0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001000)={0xdee8, 0x8, 0x200, 0xffffffffffffffff, 0x0, 0x885, 0x10001, 0x1, 0x0}, &(0x7f0000001040)=0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000017c0)={0x0, 0xffffffffffff1730}, &(0x7f0000001800)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000001840)={0x0, @in6={{0xa, 0x4e22, 0xfc0, @rand_addr="0fad85403f05dae7554ef478a425e262", 0x7}}, [0xfffffffffffffffd, 0x20, 0x1, 0x2, 0x2, 0x1, 0x160b, 0x3, 0x3f, 0x364b000000, 0x7fff, 0x7, 0x7f, 0x100, 0x7]}, &(0x7f0000001940)=0x100) sendmmsg$inet_sctp(r0, &(0x7f0000002b80)=[{&(0x7f0000000140)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="cd7aa93323c372e0d41ebc657b908a0bef61f1d2e1a69aa127f2049266a7e0e9c813993ed78a9b079975393ccb32171c2416627747136414fe8f221bbcd07aa002601f5bd752f5f3a11f243ff5a06e23a08b7b022492fc3092b9987725732a73e16353c13c7b", 0x66}, {&(0x7f0000000200)="b3a92f63bcf81f2594f6752a4b758cef417a7d5d66c4d27ddcd9f4ad57eeab467fcb7d15d1a430083762a482ff6e4bcf64bedc2bc22b30cc8fa12dd5fbd4471f235b37c11e9bd9379b867dc273a9a8837dc7dcf9173b2fc2cf6a36ab7066204b433eff174bab3bd330e877b55ddda0ca6896e6bc68fef78dcb797770d7b16ba0d71e2a6ce11754ab7ea9761172ea9c184f611add72c11b8d94e8783a27ea28b557f8817e2458e341d6b73d29a8d784de83b6e110c9d04f33d24c1c1d7369af13ccc2b92d1eee0b", 0xc7}, {&(0x7f0000000300)="2c066b87d1ab3a1037f1ff7bf49fabcdff110e2c37466ad8d7cb83fca4ed914b0c7f52e63e2b36f9c2dfe49f7b2e547e5b94f990547b80b2a6c92fdac6d9532cf74835a524e1afa7aa2c4f8b886cee8f21a7ef51b0f78e4479f548ff65154c7159d01d1255", 0x65}, {&(0x7f0000000380)="0361f2896bbc8a567c913570da7c8385347a8481f7576f9c3dd20c293b1368901b237d1101d002727144d62e86c8d9b0b347e798f6732182c4023d7fbce8b20cf741473235fb1d1267e3984a4c10f5c10b642631f06723da8ad2e0283cb73fa2c82f09840c49c2ba6915c9dbc5e0a47d616259761c19c5117f9747cd56c9e1c4bf7d878f84e0f0d6d785b9268bb4ebeb3b9e9c3c8ab0db3d2234d5ca6d929206ba23304a750ca3f044e1a803c9309f56c3be9a39c5cbce6dabc76913d5243468571b4ce9c91e97c46fd0", 0xca}], 0x4, &(0x7f0000000540)=[@dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x7ba7}, @sndinfo={0x20, 0x84, 0x2, {0xffff, 0x200, 0x6, 0x2, r2}}, @init={0x18, 0x84, 0x0, {0x5, 0x1d, 0x0, 0x2}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}, @dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x1}}], 0xb0, 0xc0}, {&(0x7f0000000600)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000640)="0e1a0bb915d34d162f1cf0e9c53bb32f22c8e5783a6d5ec1946751e31ab0ced1edce8f57fe800951af85a728475f137664e7cae3bba8d0407cddbf725f42a88076789d8839eb83fbbcf0fd68199a08e0db0b29c363b4", 0x56}, {&(0x7f00000006c0)="356259f0f34ad1a7a49d94ca562953aef9e6406a45b0bc729b3a85f5f4b51902b7cb451c1991ba343680b5c75ab347a7d3b291c82c1cb5e77b74302ba0d6d4ed17a776123e13c9ac3e23b92361293c44d36cdeae84093940373cb546c33f9e986e09b5e978aa52dd7258380c5b6dcf77e560444aba18f174844714d5921140279b92043cea6e4dafa3424b43", 0x8c}, {&(0x7f0000000780)="21749fe2e18346bbc4da816bd1b687a2790e5e3506a19667c44362a40a2525e81f8c0e695aac0cbd4c561971ce6144a6e64c2e45505505b79114525135c5c3db53c9d72c609d36034c714f87af6d1d4623bbafe23cb0f02e99e1f9cbb3be1a4184520b463a38f35cc85d1094fc5b6d48fdfa6fb950cba6ff22233d5fbe80c62f4b2480ae6ae6b55636ced68efbed30b4268f21", 0x93}, {&(0x7f0000000840)="e779ec7c1f47ceb8ae1e2fcb939126c096f21d8dad9ccf8c6b33deeea0095baaf0dc336e0bf8101b77ad59a63d322afd2a4f68487bae69fe9f4c701a9dd971408ac35c7181b1c1e9b483804072d3e588cf6e1177ac1e03dbc91897e0f935697f236f0cc16e10336d57801119cf4e612486e3a01a93d22863a5d496500f572961965f096ef3244543488b245d4c9cce218d094509af1343d98bfc1c2c905ea974550d07bc3f1b3703088d", 0xaa}, {&(0x7f0000000900)="e2badb25c45a612a7c486c523feae12fdbc07598e1abf169b2e25a9ef6ff34e0a0d1f948e405b57e2f627b36b7fe3db5290e7e8f0176d317256749719c65eee434f404fbc9c8089c78cc1d425b979d089a5f39b8a224c525d40f043edf", 0x5d}], 0x5, &(0x7f0000000b00)=[@sndrcv={0x30, 0x84, 0x1, {0x3, 0x7, 0x8005, 0x7fffffff, 0xffffffffffffffc0, 0x3f, 0xffff, 0x9, r3}}, @sndrcv={0x30, 0x84, 0x1, {0x897e, 0x200, 0x1, 0x9, 0x8, 0x5, 0x63e6, 0x550000000, r4}}], 0x60, 0x20000000}, {&(0x7f0000000b80)=@in={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000f80)=[{&(0x7f0000000bc0)="a902e17c71db19c265ca924fd115ae49442f29e5b099cc2829d5679dac6efabd0074b38ac4115e06315cbc2d5d3a6869fd18055d69e64167600c27685a8855886356430ca710d61a3bdb589045e687acf057e99334348afabb8cde1a59d13d90f895256ec96838963c0414744dd4422c4b619be9b0f41a723aba2d5a8213990ae07d7d0734792ac72a096a7b4f1342f49b86229295a7854a63adef25bbf0ee7308ce27636a6a14dccb05a0ca94d83335", 0xb0}, {&(0x7f0000000c80)="687954b2069be9797fdfc53053953182ceddac5082696091522efc00e4eb015f8c53cd6c52626879f67901b527b79bead5eabadeb7c4577b9d723eb5d39e110545dca0fe66f6f74917f7e5229d0962216c01f8bee5e786e228bc459738c940e3dbb2da5b3d32728b005f048205c95548f83312be520bc9f0fa70d5d1a09296c5c2e1ee73f5653bcbaf52a37eb0f5227551fa3808cf71a615d77b9e62e1847f83d46b51842b28439897ac7de98f3942044675ef0fb0be16ed0896a13e90cfe377554989ded078e8f67d262f2fe1234a967b8981ed6257406fab8ae48ed0", 0xdd}, {&(0x7f0000000d80)}, {&(0x7f0000000dc0)="f7bac9a1dd81a1b75db491007506c78aac80142bb58c9d870d30ce9f6c30fdcaa4cc7ef0cbc59ea3dd7114814695d1fc60d352fca0d85ace64297e9120c1c0b27a91", 0x42}, {&(0x7f0000000e40)="a83ab54f890c0fddb647f631f71f4ac5aa6426da392b9956eb031130", 0x1c}, {&(0x7f0000000e80)="5d58e377d10721e568604efbc2fc64568f408f9c5c255344aea7fced6f01e98c170f9b34fdbaa8b58a559d156090481df27d9a100dc349610dd8d9bf86ac852d8dc4b1a428718a3a98f480be200eccfb80efe83a286091ef50888610b17c39ed445794ea4f0be466fcf4b08414e9f6ba9269ac5ac62dbf6327b4e04217388526b49a76915f3e04836d3c66a88f102d341553b88f992dfa28a8ff61cbe94e6e7fa9ca34df6cf12605eb6343075d32952131236828634d0c7b", 0xb8}, {&(0x7f0000000f40)="5185680cf2460f5dda1806c6f30e35993660e1d19364189ae1d028d3af6af689ec6f9a8d7f5622ecf4d944a7fc98553aeb79a59bf94f6bbb7caaea", 0x3b}], 0x7, &(0x7f0000001080)=[@sndrcv={0x30, 0x84, 0x1, {0x1, 0x400, 0x4, 0xfffffffffffffeff, 0x5, 0x7, 0x9, 0xfa, r5}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}], 0x50, 0x400c894}, {&(0x7f0000001100)=@in6={0xa, 0x4e21, 0xff, @remote, 0x401}, 0x1c, &(0x7f0000001700)=[{&(0x7f0000001140)="609083085b5ac69e9423027621256f4831f1d4ca454f2ad99df44bf9e367f637408e4f6f79a237699a5af4845725", 0x2e}, {&(0x7f0000001180)="f071aada56b5c83386752db8dda052b89d8f10c209994a01447ffafbddb19c6ae7e93e4857bf7806d9c9c8108b47c9c2f373692af478764ec6dbfd2be1067ac59b236330ca9831a54246797bf12318313beb853669fe0a4d54c05a9b0c08a88368817483fa8bfae46cec7fee21940f88c09bc6931ede14d3545a86b6303e6ae86f837797d23ecfdeffac7f2318fb5a2626f899be8ad35400870dbe6b78925889635eb5203b09c366ff036159af77d46e99acebf0cd6f567a896d9556a21431302b", 0xc1}, {&(0x7f0000001280)="593ef047df241a2cb1359be6cbced61ddec4309b09644efe55027bf1aaf290e1351a4d4b1a518f3ad2c997babc2c6cbec50d4be76af0cce9cca21f98d17e9ff800b2e8e6d44838dceb10b7a3a5576d9e8adac9b2294108976438", 0x5a}, {&(0x7f0000001300)="01b6c5a24cb183876a3494726e11da6f6a577baf004e88340ddf1bc91ae1f6bd1b1b698cbf62c4bd4584c75fc1736ceba00ec773d2f5643b63779ce31987663db67f2f71bb83735947066af9e720ae4a5c8faa1c30ecdbb6ff5197880264385c7006bd1c0a4daf60d3b1a8a22517af906b1cccd2beb77479", 0x78}, {&(0x7f0000001380)="df95a54536559a0c1c5614e9a5967d3e06cb2c3b91b65b767653f7c01a2985528bc623edef98f9cda5ce71b4606642045c610523870288fdaea5aec8aa5a0361374d4f84a1d311b440e72cf394cb78ba7da63a4050df298975ed91984f1b1c8f3c39415e3d4cace153443262ed810343bed77a515b84dbf07945a881e9f05d397a1733d0ef6d981c6e969c100dabfcf9059299f703805c118c41e0d486fd8b5903baa002ae39b0a7a6899e43d32ef14712015a6f462d95bea0f65abdb9419ca92ff78264dd957b647c3c067cda681c553d35d225f54d7889c8bcbcc7f25342e31b9551089889a5e7699437", 0xeb}, {&(0x7f0000001480)="10dcdf52c558abc69bfa359359148b5efe92af1ceab2d2f39be6640363fabaf273ed0ef8c6e131bc8c030a27a369a9ff318a47af4f94bc063a5601703863ac9917a6e79a4fe489b52c18abbaa1c50ee61c7342c74a74a6fe9a5b3b7d83ad74297e1c5c9274757c3a919b8894e8b3015236f04dd62f9e9f05ff6492395491", 0x7e}, {&(0x7f0000001500)="cc0710a8db0b283d7a51a9bebcd083d7a658f007a6c7ccde342f6a8c87a5041d0e6f15fdfe9fc68a76e19e31a6745caa52fc818443e99362912bda8cfb2516385e229b755d2f1bf876b4f17109349f17bde932992ceee525957189dc2e05f21e88b9e79a28bb4a34053f46ee30bde200808ea4b5", 0x74}, {&(0x7f0000001580)="131bd57940443226e7b4522d6fc172f00454e8b81d6cd2849adaf6c0498273c72f27ba9858165a0f255e532289d553e0ba0fb95a689e5e328f5607955e0397b0ebfebe8e9afdb0b0692b71685e9af14cb05687ed4cee62fd31a0a94cd2ab548f734923f9690299bf8ebf985976dbe0c2cb6c19f3f2fca571145db102d8aaca1647adf29c7d8d497e913dbc7911c155fb7b75b88af96fba210200922afe977304f5e248c35e1e22138734085d", 0xac}, {&(0x7f0000001640)="4fca8cd9dd3236e1a965555cbe999ed1b17aca5e0d91c671ec1728f837c2d422131cd77fbd73db1642a5749863fab2aadbfd4bbae7545f8a38e3d5946483f4b0c9d69fdb190ac61f622c999fecb78a955367a29cdc56fcdcbadc0613279bb8cb83bd9f5cb64ec642be7feb6ff32f1efa2397abde86fbf09ac3cbaddb51308faf0886d01d15551158f6b95555d687666bce45374bbfd642077a88cc8cd9bb5451103ab4bb7b558d51", 0xa8}], 0x9, &(0x7f0000001980)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0xffff}}, @sndinfo={0x20, 0x84, 0x2, {0x5, 0x1, 0x1b0, 0xa8a, r6}}, @authinfo={0x18, 0x84, 0x6, {0xffffffff}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast2}, @sndrcv={0x30, 0x84, 0x1, {0xda45, 0xf564, 0x8008, 0x101, 0x6, 0x7f, 0x4, 0x6, r7}}], 0xa0, 0x800}, {&(0x7f0000001a40)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000002ac0)=[{&(0x7f0000001a80)="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", 0x1000}, {&(0x7f0000002a80)="22192dbbd3816a9ed54f46753831483c881b", 0x12}], 0x2, &(0x7f0000002b00)=[@init={0x18, 0x84, 0x0, {0x6, 0x1}}, @init={0x18, 0x84, 0x0, {0x9, 0x80000001, 0x1, 0x8}}, @dstaddrv6={0x20, 0x84, 0x8, @local}], 0x50, 0x20008001}], 0x5, 0x4) [ 2179.795075][T25369] binder: 25362:25369 unknown command -1271408086 [ 2179.802554][T25365] binder: 25364:25365 ioctl c0306201 20000040 returned -14 [ 2179.803170][T25369] binder: 25362:25369 ioctl c0306201 20000040 returned -22 03:34:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2179.844391][T25365] binder: 25364:25365 ioctl c0306201 20000040 returned -14 03:34:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:29 executing program 0: r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x18}, 0x10) r1 = fcntl$getown(r0, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) r5 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x7, 0x121200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r6, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x29}}, @in6={0xa, 0x4e22, 0x1, @ipv4={[], [], @broadcast}, 0x48e}}}, 0x118) syz_open_procfs(r2, &(0x7f00000000c0)='sht\a\x00oup3\x00') setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000003c0)={r1, r3, r4}, 0xc) 03:34:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getegid() getgroups(0x8, &(0x7f0000000140)=[0xffffffffffffffff, 0xee00, 0xee00, 0xee01, 0x0, 0xee00, 0xee01, 0xffffffffffffffff]) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getgid() getgroups(0x9, &(0x7f00000002c0)=[0xffffffffffffffff, 0xee00, 0x0, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0xee01]) socketpair(0x10, 0xe, 0x7f, &(0x7f0000000400)={0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r7, &(0x7f0000000580)={&(0x7f0000000440), 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, r8, 0x41c, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = getgid() r10 = getgid() r11 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm_plock\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nullb0\x00', 0x4000, 0x0) write$FUSE_IOCTL(r11, &(0x7f0000000380)={0x20, 0xfffffffffffffffe, 0x3, {0x4, 0x0, 0x5, 0x8}}, 0x20) setgroups(0x8, &(0x7f0000000300)=[r1, r2, r3, r4, r5, r6, r9, r10]) [ 2179.923372][T25476] binder: 25453:25476 ioctl c0306201 20000040 returned -14 [ 2179.989734][T25488] binder: 25486:25488 ioctl c0306201 20000040 returned -14 [ 2180.013575][T25476] binder: 25453:25476 ioctl c0306201 20000040 returned -14 [ 2180.020050][T25490] binder: 25489:25490 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 2180.037331][T25490] binder: 25489:25490 unknown command 0 [ 2180.055939][T25490] binder: 25489:25490 ioctl c0306201 20000040 returned -22 [ 2180.074061][T25490] binder: 25489:25490 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 2180.084832][T25490] binder: 25489:25490 unknown command 0 [ 2180.092392][T25490] binder: 25489:25490 ioctl c0306201 20000040 returned -22 03:34:29 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0x40189206, &(0x7f0000000180)) 03:34:29 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88480000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:29 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udplite\x00') fadvise64(r0, 0x2, 0x6, 0x0) accept$netrom(r0, &(0x7f0000000080)={{0x3, @null}, [@null, @default, @default, @bcast, @default, @bcast, @default, @bcast]}, &(0x7f0000000000)=0x48) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@ipv4={[], [], @initdev}, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x8, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_any='access=any'}, {@privport='privport'}, {@version_9p2000='version=9p2000'}, {@msize={'msize', 0x3d, 0x2e}}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'net/udplite\x00'}}, {@nodevmap='nodevmap'}, {@fscache='fscache'}, {@access_any='access=any'}], [{@func={'func', 0x3d, 'FILE_CHECK'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fowner_eq={'fowner', 0x3d, r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'net/udplite\x00'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}]}}) 03:34:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:29 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) [ 2180.613714][T25605] binder: 25604:25605 ioctl c0306201 20000040 returned -14 [ 2180.631393][T25609] binder: 25601:25609 ioctl c0306201 20000040 returned -14 03:34:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @bcast}, [@remote, @default, @default, @remote, @rose, @null, @null]}, &(0x7f0000000100)=0x48, 0x80000) recvfrom(r1, &(0x7f0000000140)=""/127, 0x7f, 0x40012041, 0x0, 0x0) 03:34:29 executing program 0: 03:34:29 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88640000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:29 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0x40189206, &(0x7f0000000180)) [ 2180.782256][T25618] binder: 25615:25618 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER 03:34:30 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) listen(r0, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') 03:34:30 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2180.830166][T25624] binder: 25622:25624 ioctl c0306201 20000040 returned -14 [ 2180.830852][T25618] binder: 25615:25618 unknown command 0 [ 2180.855217][T25627] binder: 25623:25627 ioctl c0306201 20000040 returned -14 [ 2180.863043][T25618] binder: 25615:25618 ioctl c0306201 20000040 returned -22 03:34:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:30 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0x40189206, &(0x7f0000000180)) 03:34:30 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') 03:34:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c6300000b6300000000ff00000000000000000000c436d09fc09196ef6534e73b9f000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000900000c3107c27de52da6977a8e322"], 0x0, 0x0, 0x0}) close(r0) [ 2181.016224][T25740] binder: 25724:25740 ioctl c0306201 20000040 returned -14 [ 2181.030680][T25737] binder: 25730:25737 ioctl c0306201 20000040 returned -14 03:34:30 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:30 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88caffff]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2181.145291][T25747] binder: 25746:25747 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 2181.179597][T25747] binder: 25746:25747 unknown command 16711680 03:34:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:30 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f0000000000)=0x9) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000080)=0xb6) finit_module(r0, &(0x7f0000000040)='\x00', 0x2) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000100)) [ 2181.211846][T25747] binder: 25746:25747 ioctl c0306201 20000040 returned -22 [ 2181.245307][T25757] binder: 25755:25757 ioctl c0306201 20000040 returned -14 03:34:30 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:30 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89060000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = shmget(0x3, 0x3000, 0x1106, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x1000) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0xffffffffffffff01, 0x0) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000100)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f00000000c0)=0x6b4a) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0c6300fb000b6300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001da90631d6e5420000835b254f16cd00f895010a4b9837f7c7273e3e16e37440c297142b2f7b433add4333166c594f2209018c65e0ceb35ed4a0df9b93ef097b0132d0c621b4684348d331b3ebd2e40e09876999e83213358c98a017584261b37ccb794877f3ec564b992171ad7ddca14b0e9585d0c9cfee1f57f748ff537078f9113f463dc3c86fdb7085fc7bff132cf9"], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x7) [ 2181.353711][T25859] binder: 25843:25859 ioctl c0306201 20000040 returned -14 03:34:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2181.499299][T25871] binder: 25869:25871 ioctl c0306201 20000040 returned -14 [ 2181.499806][T25873] binder: 25864:25873 unknown command -83860724 [ 2181.515188][T25868] binder: 25865:25868 ioctl c0306201 20000040 returned -14 03:34:30 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89ffffff]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:30 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') fchmodat(r0, &(0x7f0000000000)='./file0\x00', 0x4) mknodat(r0, &(0x7f0000000100)='./file0\x00', 0xc000, 0x6) [ 2181.548881][T25873] binder: 25864:25873 ioctl c0306201 20000040 returned -22 03:34:30 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@register_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) fgetxattr(r0, &(0x7f0000000080)=@random={'security.', 'cgroup\'\xc7\x00'}, &(0x7f00000000c0)=""/186, 0xba) syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) [ 2181.683010][T25990] binder: 25989:25990 ioctl c0306201 20000040 returned -14 [ 2181.702394][T25995] binder: 25992:25995 ioctl c0306201 20000040 returned -14 03:34:30 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:30 executing program 2: pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) [ 2181.751562][T25990] binder: 25989:25990 ioctl c0306201 20000040 returned -14 03:34:30 executing program 0: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) syz_open_procfs(r0, &(0x7f0000000000)='setgroups\x00') 03:34:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2181.823961][T26003] binder: 26002:26003 ERROR: BC_REGISTER_LOOPER called without request 03:34:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:31 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2181.893057][T26011] binder: 26010:26011 ioctl c0306201 20000040 returned -14 [ 2181.895043][T26003] binder: 26002:26003 ERROR: BC_REGISTER_LOOPER called without request 03:34:31 executing program 0: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x4, 0x101000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000001140)={0x7f, 0x0, 0x0, 0x8000}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000001180)={0x8, r2, 0x0, 0x1}) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="00fb150106eabcc2c15b277e5c0010c1347ece304d996c5d04627a8d0c28a4f36b0e69e4f491a5ff674cb4e68fc4358807cd73611e2d70c36be38f866d83ce04581a66d7839ebe63efbb21e50fdbde08449d938cc981b0c786cf66558e90a9093bc6353a2891f9ddb436e60c5aecac5ebbc93aa568998751825e221a7af07c5e7beeff7464af0ad76fe6f0742c4f101e9c99579bdefc838efb02a7e0cd0577b3682ee25f9897a21573b7b99d2c762dc4d25c90b1ad288fea56c0bf8eec2aa4593bbc361bb8d602e7660740f486014c8811c9804db4874fa4d974e4ee14cf33cbb1988b50c5941e329c6a80fe556785ee9fad6102601f2cd870f5d00e21861732532e2485d38227e47b86f1af22313a341be0299fa777d7b0db35104fd4730ae5abf61b516309b24dea1030f8c39d136a34aacee86696e38386e4623dcd2b4b15fba0b171ff96ed3d7c091a2e3d54f1573f6622274f607d3aa98530760c7e95a452a0de7a39581b985e548662a42c4644fb0953625e23225a62b10c384299e42c91d6debda3d8846eb3a856ddc4894995239a88bf8757983d541b869d80c624a07cd765ef07c983ec92c3bed9463746479038b6dda9af3a24883857cc29fe19d2980187133006e55a7bb4ab7b87ef550124b4fe5a711e55389d5211792378b691e366e2affc847e84c6e9565107a1eeca8943627ce7f8adf4339569d9b63c5bc5bedeecbaedcf2925f43399a3d61ae768935ff6b4834d39ad06f9622adce582782d97647533a9973d13e0509e905115201c45957affa106fa7f882b0db04651568319c2b0c5c88c2736cf6d5008a66fa1fffc22b4d38798ad6e69d19e278f672dea6051deea10bca4b80686403740fd64d59fb35013a6b51ffad8e2938b4920b25264ee47f3042389a617979cfd7721ebfa0538fceb139bf052432ec460938da2af8a720c5d46ba88f8760096795ece683e10632f71b79009bbf9184d69f040810ec673de6ea28def5b6f45b2b9d65dd49bd2a6f0adb85768b89dcf256b044ed0f0232963097bf6c51f8ec73ec83496532a3a01c0ac801379876eca23577e5456f86ca3fa14890d21abec33954fe3012e214e8f99e27cb97fe6b3c286ce7a732225ca7baf8a8534a0b547eee92c286e9442aee418fd834d71b1f7cf646ec41cc6b9a7965a0f1ed3a365008780743635f104e51b23d0f1a0fd1c06de8ed71fd8c3d02382f637fb6b13336018f4d061c3820d1300f855c1c097d9c8565bb34226a85af0f01659c6f3a0302bd1a5319fb3545c214d54ded787aa6e095465c7488c1d8cab763792d95018f96d726b1852eacc08d1b2c16dda80640d29ec0c140f0321091c8a9d888c50ef5e425cbd7ab0343b8b6128d10291fdf0a067a7874b9d03efaa7a904ac832270b100f7b93afb499726a78e2b0baa2b84be0a52b4704edd6132a902a08892f6ca63c4547105a9dc6e58eaf494daa4eae965903b85c9469b5992fa862bfa0c8d73534912f4a75237b98d72324edcee0bed2f2c7c01161e3b951fa245ee19d7b08145b0849d6065c8ea50a1b237e53bd120639ced93dbdd0fbf3cff09f08f2f9179530b6aab5a8be876c23c7d7054370a8720d968af4d953daf119728933a2edffd4772a67e7acc96342eef06bf0b860c173295b3881ec82f5376e1fd1131c6bfebd7adb595c0b37ea8b19ae604abf2b86bf81cb0c99fb7f7fd52c59b09cd1297f386b9369244c1173d8c0bc6c9e443dab4bc840d5e8069a6286a079a91cd6251ba3073803a5fe6d89fdf4e2767b5e6422794e3ed3dc263c5649fddd8540f7742bb1c1e03ca4a6d35612238ebf9bc01a3928a05593b1019a1fd5ab028db8f0373e09069fb57233f23e516cd6990f78f73090d303b79a4ec4f46bbb00862e69c5a6dd60b9058945f836e48cfce40a61b1f58f82252ba0555ab28711ad16380761debef36c642820befe1c415f8a8285ac79fd49f33c782f1ce1ac369e76628b78105eb9fc80b71d47e71c9ffe8b87b6ef5eb1cc468fd5abc88f1cea854b7b0e8b042773b0dcadb82274f91c8943a205bc681bc4586a317ce4fabaaf9ba498462b3fba1f9ac0dcfbbe018de92c51055e92c05901c1ee1d6673bacec9b1d3c66538dedc7799e60687b9efbfa8edcd87f35ecf8aac5b9dcaee8b8a15a96b1a0954ae7c1ce7c1aaec2e11095e1baf9ef21b77d938daaeed51b4aaf45f2fae2c47281109976afc130e6235d6aa37d3d4904aed27df70ae26010f36e1e8cbfc2162419f03419f4e97664ee7375fe49eb140d1221087838c010a761a0b6174b7046e39ce5832d5ca36863e1c4041365bfbc086b6f838c1acc9f892d6582ec5a31f2a4a5ce1ae8f783db29cabb4b8d05b8c4542494a03257a0de19ad799e141fedf2902be04b9b9161d95323a6e9a370e039e3821923ef64cee9a7db31544eabc92369c1c5299d26f0d12ef04501d8186a1e808ef9d4c50aa8f992fd6b01bff7360f3f25e67388368a89be6c9b6a9be34a28b2727ab0737b01bd3897df15ddf7a01e9f2f21c496606b8a901d817a4c40ab6d934db6efee7f35ba56bade735b8cb4c6f1c9ab044cc44d23a632782b51b9b4d7085d45cd1d840e419a9c5bc7623e0f0aab565912e177353256e9934d6cb42777fc66419527f732abea2a531343c6adea8b5fcd3d267bf31a8ddcc2d2fef3452c58873f6f887687c37215df1eb44c413ecf7c5bffed7761efcebd028c4055fb397227bedb4b246128b77911770b85689f50ae926abbd2b0353dad1bb25dd250841daf84d86dfe5b673f0e5c17f484d460b0016df86aa5a750e587cd056a3753e18e3151a9b8c0fe83d2ed0b186bcf8e82c60194d5748d162ace117f3501a8bfa16e3510f337f123e536476e6a02e09b0b1172b4e1eb8145ed3f5fe760de6231c06a65a0ee0a2d037358dfc93c64069a2fc0573958e98a7d057646d3ad16209d0ab02dcf4b105bb6239ad1df64b66ee62b2a864b0d46bbe476cd398846464f168e30885f03e8ab53e41b1f9afdd42e64ccc2e438000132a5f58cfab034ce4da5dfa208e35ae805510e552d22b5cdd1c7c7bd6910a61f49a77de6cf70728bf18545dd91fa42facfd772e33ccb9f4c026c1f43726bc8c0349ac6173aef0fc0e6a975b171b70aa38bf35796ee63230dce294420f322a2251156bf58f3027f8db430dcdc1f84ea033745307e5b1aa96fac2a08975c4c4a913cac184e9e28981e2483d2b76ab1c72d256b3fc837bf9344ef9b4fdd5e70bc8499ca8708ed2101dae32a8e8d2a96a446ba6aedb870a4261c97959b823f8f3e050afe22739dd1a144de151abeba3c0e6392741ff2d14893a44c2fdc3096915771aae56490364c6b580087989da536ce7848691d1e9c4f564de65da5ad624cf5644435e401ac89d73e7f8c080a79d4268f46ecfcb06b7e1bc17304a7994d0d201f2538f740dd58746f82a8c024f3363e2a1d9b420a3286e2b09afc20ac36a4ebba30023e6c767a3853638a5885950783c002d074f06a4e32d66ed134c57ebedd869696712459c1522652fa81cb5062bb28bcd4c8d52811b6bbcee2f059280f7261752713ed80d75aff5ad59c304627976ef26563916015242d76b3e48159d57d99dd5aa8dce3fa0d659563b8ff5226eeaae000f98554f52586bf53da9ffb230149fe0b507575761e5d607913ccd3e9480ef38ed11f8ea64d60d360eb2c438fb08b79bd323162064a3c53fd9e114189c948a5802babfe904f5bf30b990b5297224fce25a86cf5fd1dc87fa6c81b5e40571267c78ec3cad8fdedd89f5c5f43d2bda10c4c53338408844c5e8dc4c568881d8bd558d3d910421ee355bdd3566ff07cea1e94587b8288cd21c7193cb8fb3a8d970e242d4df7644e56b8205d3ccd9518b666085d7fb0af1c708c3e733da8d9a6d2d7a4fbae571f9f33ee2aa7faec067204c02acb8855aaada83114b092537b0a4248e80a40b910136d5b7a290e9c0ef7cc09c87cae706fd61ac6ec7556385478f98d34e187300707db9ee994bc22045c0ff1af59fc87c482d9c79c2ffa24d526389f3e89bb802ee5ba77791070192e8a84ab1bdd6f3816b461f4a62855ee0abcd5f6a98579e1055b29c793daec81fe1e63132c8908dd007b32768198c3a1f6eddcbaabee19111c19b55e1b2907aa8c4552109a4b2ca56c2dcbf2e34e068b423640152c4f348c17acc07c3ace5b66b009b86149e90a158b9a1f6afe4b889d3e78c5532ba2e4cad8d6a38f7cc69ef5f09ed1ccf225c9c7dea2cdd2c03ad700e4245fa352b8b8fddc609f8523d7c03ad8e8dc0bcee5d8f6cb7f21ecbe4f9b211a309f901224fe1f386b38a461c0f7373f254a44774480cae16386e7b3ffbe161fdefaac8ec8d6eca33644ebfbb1f41505db1f900e69404fb23d6ac610a4e51edd2d08d4ba74820e4e7041ccb7f558099746ab6fa32c1a82eb1e309013a95697b09d7cea0ead3d746c343b25d927722b5ba49a209f766973fe6af09d80832d1370990e641cb1ee0e02972a86411183e6b340dbe81b21638f2f698a3e71e80ce0e29b48d0e1a9c9d2f2dcf12cee1f91964bdda00d576db13ac64400ce0a4c0fe52ff8bf488cf5e7aa54d79d2b0409ae1fbf7e36eafb9898e1e8a1565a579814ef5d0306995bc5f0a2c5bc7b6d3f2f8ea9ce85209bf6964cc17218cf2d49f930585854ce24dfa8061b05aed4dfb014bf9bae044f23e89da786ec6a3251d11acc21c4c6336e71b54bf509482bb744f0bd432ec634f30a0e79860923b2836f295acdbbd8b2b48bacb05ae7c62b857e0b90fb90d1fd33a042da2cabf6b1668d4a48c303e98f8369e3d52aa64869aab91235658f7c974566ad2d9d5a770b179b3f5fd6944531cf1226b6607bca09da323ca5317f708aadce0939a280dc5ec6b63b36691c2bd00a71c6b18274e9e0f34ee2012b6b673664be50e1e08754c1975533fdac5311c45982d15eb695f01b9498f6ddfe03930bebc195c2e825974e1eb3d7ab94fd9c38e2c904b9b4fb9dff71736f32a124bf1390d4786b6cc081bf6ebb45bad0d01eaa5cdb2b12547e4284f9eba55fe05200c6080de9bd81a52519c32b38a1ee0463576ad6dd58805d9ff9af187010bcb0a69b8d2aa7d71afbf21c0191777e6997bbc2fc45e698a8e65b3f6433b687d481aa54937bda09a2d9d5193cbb2c20620f58ae520297e49b1327748187f85e3df6d7faaec69e3d302daa673845348a19160e4d99d0d39f62f6c98f4455b1a3e530385d7f58add6902a7f175b725e7855352240078822d29916bc0e44ddafb84b73268c59ac90a579f49c9589b1b8e8514501ebd54e24c28a9acec76f4940ed3263dfec454d11868dac27c61a4e971207189dbf93c58f402d8f2047be5ed5c97444042c93e91e75dc71597040253c7d90054aae4b5e49c1bead8e4cdbf6ae801bf1ba8c65e8a87f009f45eb9a8fe9115952fde584025942402dccc948516c3b5e53036fbf3121b3ea51472d5f6dbfb74feefb94ee52e723345a1b70b5c026981a603df8847e6ea5b5f2df8b87bc9874bcb429a07fa92aaee962ee94a4eabf6b545a9d00254e7cca366c2df396565e3bccafbc23ffb80ec9e4751e57ba571b798d132487c3a2f49622c220245d003e646860ece8a8571ec96c0e360012ec544bbbf587fc7cb37ed4391660f4d158c72f4bb5670bb6ffe50a503316c20b193e503db7f23f892fb52fda25ca2e9df39e82bc448a965cc1172b50bfd8ccf789cf11bfc521d75214a1de06d3ca66a0cb4ab5d3f60ac5af08c2ff691b636aabbb9c72d24e562c8ed2b30b6903e17be93"], 0x1015, 0x2) 03:34:31 executing program 2: pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:31 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2181.946455][T26003] binder: 26002:26003 unknown command 0 [ 2181.952218][T26015] binder: 26014:26015 ioctl c0306201 20000040 returned -14 [ 2181.965944][T26003] binder: 26002:26003 ioctl c0306201 20000040 returned -22 [ 2181.978622][T26015] binder: 26014:26015 ioctl c0306201 20000040 returned -14 03:34:31 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe800000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2182.081392][T26097] binder: 26078:26097 ioctl c0306201 20000040 returned -14 03:34:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x5, 0x101000) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'yam0\x00', 0x200}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:34:31 executing program 2: pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) [ 2182.145525][T26132] binder: 26131:26132 ioctl c0306201 20000040 returned -14 03:34:31 executing program 0: r0 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000000)) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000080)={@empty, @broadcast}, &(0x7f0000000200)=0xc) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000140)=0x2, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') accept$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000240)=0x14) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000180)={r2, @dev={0xac, 0x14, 0x14, 0x1d}, @remote}, 0xfffffffffffffee0) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f00000000c0)={0x5, "b9d8c8df18468039802f602c580647260c1a3311772cb3f1cc64b1493ea0f049", 0x10, 0x2, 0x80, 0x4, 0x5}) 03:34:31 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:31 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfec00000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:31 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) [ 2182.191991][T26132] binder: 26131:26132 ioctl c0306201 20000040 returned -14 [ 2182.220656][T26138] binder: 26137:26138 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER 03:34:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2182.273861][T26138] binder: 26137:26138 unknown command 0 03:34:31 executing program 0: gettid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) r1 = getpid() r2 = syz_open_procfs(r1, &(0x7f0000000100)='loginuid\x00') getpgid(r0) mount(&(0x7f00000000c0)=@md0='/dev/md0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x1081, &(0x7f00000001c0)='loginuid\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000000)={0x220d, 0x9, 0x200, {}, 0xd6, 0x80}) [ 2182.314472][T26138] binder: 26137:26138 ioctl c0306201 20000040 returned -22 [ 2182.316585][T26149] binder: 26144:26149 ioctl c0306201 20000040 returned -14 03:34:31 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2182.367380][T26181] binder: 26151:26181 ioctl c0306201 20000040 returned -14 03:34:31 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:31 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$TCFLSH(r0, 0x540b, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x2, 0x101000) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000100)=0x24) 03:34:31 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:31 executing program 0: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000000)) r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)=0x5) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) syz_open_procfs(r1, &(0x7f0000000080)='cpuset\x00') ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) fsetxattr$security_smack_entry(r0, &(0x7f0000000100)='security.SMACK64EXEC\x00', &(0x7f0000000140)=')\x00', 0x2, 0x2) [ 2182.495606][T26263] binder: 26262:26263 ioctl c0306201 20000040 returned -14 [ 2182.569877][T26263] binder: 26262:26263 ioctl c0306201 20000040 returned -14 [ 2182.572632][T26273] binder: 26268:26273 ioctl c0306201 20000040 returned -14 [ 2182.583316][T26274] binder: 26272:26274 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 2182.595922][T26274] binder: 26272:26274 unknown command 0 03:34:31 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffa888]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:31 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) [ 2182.615554][T26274] binder: 26272:26274 ioctl c0306201 20000040 returned -22 03:34:31 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2182.681309][T26273] binder: 26268:26273 ioctl c0306201 20000040 returned -14 03:34:31 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='setgroups\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) 03:34:31 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffca88]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:31 executing program 3: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x40, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)="63d007755e55f7e8877af601a7b5e6621df44fee4d858f7ee87a6f", 0x1b, 0xfffffffffffffffd) r2 = add_key(&(0x7f0000000240)='.dead\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)="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", 0x1000, 0xfffffffffffffff9) keyctl$instantiate(0xc, r1, &(0x7f0000000180)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', '/dev/qat_adf_ctl\x00', 0x20, 0x101}, 0x3b, r2) [ 2182.735874][T26355] binder: 26351:26355 ioctl c0306201 20000040 returned -14 [ 2182.770200][T26355] binder: 26351:26355 ioctl c0306201 20000040 returned -14 03:34:32 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2182.840409][T26396] binder: 26394:26396 ioctl c0306201 20000040 returned -14 [ 2182.849795][T26397] binder: 26395:26397 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER 03:34:32 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='sett\xa7\x0e\bps\x00', 0xffffffffffffffff}, 0x30) syz_open_procfs(r0, &(0x7f0000000200)='net/dev_mcast\x00') 03:34:32 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}], 0x1, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:32 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffdd86]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2182.886383][T26397] binder: 26395:26397 unknown command 0 [ 2182.918170][T26397] binder: 26395:26397 ioctl c0306201 20000040 returned -22 03:34:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2182.938530][T26402] binder: 26401:26402 ioctl c0306201 20000040 returned -14 03:34:32 executing program 0: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x80080, 0x0) munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') write$P9_ROPEN(r0, &(0x7f0000000000)={0x18, 0x71, 0x2, {{0x4, 0x3, 0x7}, 0x4}}, 0x18) [ 2182.988615][T26402] binder: 26401:26402 ioctl c0306201 20000040 returned -14 03:34:32 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:32 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}], 0x1, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) [ 2183.048321][T26503] binder: 26496:26503 ioctl c0306201 20000040 returned -14 03:34:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xf, 0x0, &(0x7f00000001c0), 0x13f, 0x0, 0x0}) 03:34:32 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2183.102142][T26503] binder: 26496:26503 ioctl c0306201 20000040 returned -14 03:34:32 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff89]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:32 executing program 0: openat$vfio(0xffffffffffffff9c, &(0x7f0000001180)='/dev/vfio/vfio\x00', 0x101000, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00000011c0)='/dev/usbmon#\x00', 0x9b86, 0x2) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000001200)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='oom\xc2%\xfd\xff\x00\x00\x00\a\xebc\xf8#f\xb4\a\xb8') recvfrom$ax25(r2, &(0x7f0000000100)=""/4096, 0x1000, 0x40000000, &(0x7f0000001100)={{0x3, @null, 0x4}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @bcast, @null, @null, @default]}, 0xffffff77) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f00000000c0)=0x40, 0x4) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) 03:34:32 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2183.190932][T26522] binder_transaction: 36 callbacks suppressed [ 2183.190949][T26522] binder: 26521:26522 transaction failed 29189/-22, size 0-0 line 2994 [ 2183.205026][T26525] binder: 26523:26525 unknown command 0 [ 2183.223294][T26525] binder: 26523:26525 ioctl c0306201 20000040 returned -22 03:34:32 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}], 0x1, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = msgget$private(0x0, 0x20) getresuid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100)) r3 = getgid() lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000400)) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000440)) r6 = fcntl$getown(r5, 0x9) r7 = getpgrp(r6) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f00000003c0)=r7) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getpgid(0xffffffffffffffff) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000340)={{0x6, r2, r3, r4, r8, 0x112, 0x100000000}, 0x1, 0xdf, 0x10000, 0x0, 0x7a, 0x7, r9}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c6300000b6300000000f83110e400000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 2183.286264][T26530] binder: 26528:26530 transaction failed 29189/-22, size 0-0 line 2994 [ 2183.323562][T26522] binder: 26521:26522 ioctl c0306201 20000040 returned -14 [ 2183.341114][T26530] binder: 26528:26530 ioctl c0306201 20000040 returned -14 [ 2183.377398][T26543] binder: 26542:26543 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER 03:34:32 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:32 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2183.414607][T26543] binder: 26542:26543 unknown command 838336512 [ 2183.433912][T26543] binder: 26542:26543 ioctl c0306201 20000040 returned -22 [ 2183.461560][T26550] binder: 26549:26550 transaction failed 29189/-22, size 2-0 line 2994 03:34:32 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffffffffff]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:32 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000040)=0xc08a) getpgrp(0xffffffffffffffff) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f00000000c0)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r1}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x80000000}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000300)={r2, 0x101, 0x30, 0x43, 0xacfd}, &(0x7f0000000340)=0x18) accept4$rose(r0, &(0x7f0000000200)=@short={0xb, @dev, @netrom, 0x1, @rose}, &(0x7f0000000240)=0x1c, 0x800) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) r3 = getpgrp(0xffffffffffffffff) r4 = syz_open_procfs(r3, &(0x7f0000000080)='setgroups\x00') setsockopt$RDS_FREE_MR(r4, 0x114, 0x3, &(0x7f0000000380)={{0x5, 0xdace}, 0x20}, 0x10) [ 2183.516554][T26550] binder: 26549:26550 ioctl c0306201 20000040 returned -14 [ 2183.519844][T26590] binder: 26567:26590 transaction failed 29189/-22, size 0-0 line 2994 [ 2183.547446][T26590] binder: 26567:26590 ioctl c0306201 20000040 returned -14 03:34:32 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c6300000b63000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000"], 0x0, 0x0, 0x0}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x220000, 0x0) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000240)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) timerfd_settime(r2, 0x1, &(0x7f0000000100)={{0x77359400}}, &(0x7f00000002c0)) add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'\xff\xff\xff'}, &(0x7f0000000a00)="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", 0x4c1, r3) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000280)={0x5}, 0xfdd6) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f00000000c0)={'dummy0\x00', {0x2, 0x4e20, @empty}}) [ 2183.571384][T26550] binder: 26549:26550 transaction failed 29189/-22, size 2-0 line 2994 [ 2183.580700][T26550] binder: 26549:26550 ioctl c0306201 20000040 returned -14 03:34:32 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:32 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:32 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:32 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000180)) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x7fff, 0x3fffff) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000100)={0x3, 0xaf7, 0x5}) [ 2183.700760][T26667] binder: 26665:26667 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 2183.737083][T26671] binder: 26670:26671 transaction failed 29189/-22, size 0-0 line 2994 03:34:32 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2183.763571][T26667] binder: 26665:26667 unknown command 0 [ 2183.769118][T26671] binder: 26670:26671 ioctl c0306201 20000040 returned -14 [ 2183.786954][T26667] binder: 26665:26667 ioctl c0306201 20000040 returned -22 [ 2183.798758][T26675] binder: 26674:26675 transaction failed 29189/-22, size 3-0 line 2994 03:34:33 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2183.831814][T26675] binder: 26674:26675 ioctl c0306201 20000040 returned -14 03:34:33 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:33 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x40, 0x8201) setsockopt$inet6_dccp_buf(r0, 0x21, 0xf, &(0x7f0000000040)="4969c9c7ca0f6481f08617f058be0009f0fe38362efff96ea305d25a9925a4d878d684d2a83a9674db46c5", 0x2b) recvfrom$ax25(r0, &(0x7f0000000080)=""/63, 0x3f, 0x40000021, &(0x7f0000000180)={{0x3, @bcast, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default]}, 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') pipe(&(0x7f0000000140)) 03:34:33 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(0x0, 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x80100000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2183.941495][T26790] binder: 26788:26790 transaction failed 29189/-22, size 0-0 line 2994 03:34:33 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2184.003610][T26790] binder: 26788:26790 ioctl c0306201 20000040 returned -14 [ 2184.010892][T26800] binder: 26799:26800 transaction failed 29189/-22, size 4-0 line 2994 [ 2184.037830][T26800] binder: 26799:26800 ioctl c0306201 20000040 returned -14 03:34:33 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') ioctl$CAPI_INSTALLED(r0, 0x80024322) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="db6b15ede8edf6fe9bdbabfeabc864fa124a745df4b47e43cff4460decb18ebe", 0x20) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x5, 0x4) vmsplice(r0, &(0x7f0000002400)=[{&(0x7f0000000180)="e0dc356c3d123a7b393de998f4eabe41f60c4bcae48c000bd5450eebebd7ee29e6de7de95083c0c4da4425865154dec1a4c096cb6e6e2df1d7c661a9dc7bb04ff837057dca0d62355868baf9f4925418f549e07e89e6c33f6099d4d24c30183c56414a5b683433a6e354843d1a7014", 0x6f}, {&(0x7f0000000200)="b49f5043b630b316a8191bfcf1b41a7f4e42216ff740b3894b33331a77ac37f5e576b586485ab4920c34e50fdad3ae22c76b5fcd4b6d143304ca5e3a6cad47e77a270336d2dc348a0ff2c03453070c33682f0c6a43950b9a7a10cc1c2ff9f5052e298e4b039ad76f4ab290b396416c98002e8e9541b1d4e66771ed90839ae5661b3005ece0d8c1e3d6ac74cf396c48e963cf9dec878cbbc40c5024565899413a755b11158b10000be5242e68c60507b8ca55b8885653ea681c7839148397a2542158acf7d3d3673800a5f6b7b7bfea15130f20175afd89945a8bbeabfe2d30c35f6e0c43a4d589df", 0xe8}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000002300)="154b49f6002f5a766996a3d9c2d9b186a03718fdc4505dbe1d3f7dcfb085801ad7b059015ca9e82efa670981e7c8c132cd92cac1424006396c1e390ceede00e789e67301bdc11728a0b7c0da16a56f43358e182139fa2d8bda5a545095e0ea0de2b129b7ad13e1bc7209a279982757fb254699e981a95952e6c54c7bf17f74990803dd6cc267460b07e8a46ad8630b76d8cd8eb2e69e3047ef131e4117ad74d184141dfa48637bc3ac8988a824f2b812851dfb348bb71d4683ead13b9d4f0ab0e2c60febc4bdb8a83d85874a90cc195a4f7af08bfbc7aaebe1a08daf055df32822ac82992fc76899b70a", 0xea}], 0x5, 0x4) sync_file_range(r0, 0x3cffffffffffffff, 0x101, 0x3) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000002480)={0xff, 0x6, 0x200, 0x2}, 0x10) splice(r0, &(0x7f00000024c0)=0x5, r0, &(0x7f0000002500), 0x20, 0xf) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)) 03:34:33 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2184.049530][T26802] binder: 26801:26802 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 2184.065970][T26800] binder: 26799:26800 transaction failed 29189/-22, size 4-0 line 2994 [ 2184.083900][T26802] binder: 26801:26802 unknown command 0 [ 2184.086571][T26800] binder: 26799:26800 ioctl c0306201 20000040 returned -14 [ 2184.119120][T26802] binder: 26801:26802 ioctl c0306201 20000040 returned -22 03:34:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:33 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:33 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="0010000000000000f7ffffffffffffff020000000600000008000000000000003f000000000000000100000000000000f7ffffffffffffff00000000000000000000000000000000843a00000000000000000000000000000700000000000000ff03000000000000000200000000000000000000000000000000000000000000002000000000000000000000000000001f0000000000000009000000000000000008000000000000000000000000000000000000000000090000000000000000000000000000000002000000000000000200000000000000b92e00000000000000000000000000000000000000000000040000000000000000000000000000000600000000000000070000000000000001800000000000000000000000000000000000000000000001000000000000000000000000000000200000000000000000000000000000000300000000000000000000000000000000000000000000000008000000000000000000000000000009ff0000000000004ec8000000000000010000000000000000000000000000000000000000000000802000000000000000000000000000000100010000000000030000000000000000800000000000000000000000000000000000000000000000020000000000000000000000000000"]) ioctl$RTC_PIE_OFF(r0, 0x7006) [ 2184.159881][T26810] binder: 26809:26810 ioctl c0306201 20000040 returned -14 03:34:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f00000000c0)=0x80a) 03:34:33 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2184.226190][T26814] binder: 26813:26814 ioctl c0306201 20000040 returned -14 [ 2184.290128][T26822] binder: 26820:26822 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 2184.319262][T26822] binder: 26820:26822 unknown command 0 03:34:33 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2184.334068][T26824] binder: 26823:26824 ioctl c0306201 20000040 returned -14 [ 2184.362392][T26822] binder: 26820:26822 ioctl c0306201 20000040 returned -22 03:34:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:33 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:33 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000040)={0x2, 0x1ff}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000000)=ANY=[@ANYBLOB="018000000000000004000000000000000100000000000000", @ANYRES32=r0, @ANYBLOB="00000000010000000100000000000000002000000000000000000000"]) 03:34:33 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(0x0, 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:33 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:33 executing program 3: r0 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x40, 0x2100) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x2400, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000180)=0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x280001, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x8, 0x20000) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffff9c, 0xae01, 0x0) syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x8, 0x200) fchmodat(r0, &(0x7f00000003c0)='./file0\x00', 0x8) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffff9c, 0xae41, 0x0) r3 = fcntl$getown(r2, 0x9) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, 0xffffffffffffffff, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x5}) r5 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x7fe) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0xc5, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0cc789000b63000000000002faffffffffffffff030000000000000000000000000000000000000000000e0000000000000000000000000000007b51bc883ba79e440eb10b706509a3ee5266f2ac50a00a5c52458d0bd4d51b9b044c65bac8cd7c31c8b58f14317d61132ccc2efeece4a5e68d90a5de80e158fa67061fb8f4bd54b6edd176f40696df9fea1f4737e69add5bb2b6991dbd5127d09fcf10ec1400f8c8163976ed6540589b230dc1b5599a2dd7788255d217ea5c39bb0b6020ffd8c906351499"], 0x0, 0x0, 0x0}) [ 2184.790295][T26946] binder: 26943:26946 ioctl c0306201 20000040 returned -14 [ 2184.815853][T26952] binder: 26942:26952 ioctl c0306201 20000040 returned -14 03:34:34 executing program 0: r0 = accept(0xffffffffffffff9c, &(0x7f0000000000)=@nl, &(0x7f0000000080)=0x80) ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f0000000100)) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') 03:34:34 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x806000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x1, 0x6e445fa6c9749559) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000080)={'hwsim0\x00', 0xfffffffffffffffc}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:34:34 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2184.944630][T27074] binder: 27071:27074 ioctl c0306201 20000040 returned -14 [ 2184.957451][T27077] binder: 27076:27077 ioctl c0306201 20000040 returned -14 03:34:34 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') getsockname(r0, &(0x7f00000001c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000240)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', r1}) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) 03:34:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2185.030196][T27083] binder: 27081:27083 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 2185.066561][T27083] binder: 27081:27083 unknown command 0 [ 2185.094029][T27083] binder: 27081:27083 ioctl c0306201 20000040 returned -22 [ 2185.151859][T27149] binder: 27140:27149 ioctl c0306201 20000040 returned -14 [ 2185.161331][T27153] binder: 27152:27153 ioctl c0306201 20000040 returned -14 03:34:34 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(0x0, 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:34 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:34 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') r0 = gettid() syz_open_procfs(r0, &(0x7f0000000000)='net/softnet_stat\x00') 03:34:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x105040, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00\vc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00^\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xffffffffffffff92, 0x0, 0x0}) 03:34:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2185.688436][T27218] binder: 27209:27218 ioctl c0306201 20000040 returned -14 [ 2185.696021][T27216] binder: 27211:27216 ioctl c0306201 20000040 returned -14 [ 2185.696839][T27219] binder: 27210:27219 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER 03:34:34 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:34 executing program 0: io_setup(0x5, &(0x7f0000000000)=0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x40000, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x280, 0x0) getpeername$inet(r2, &(0x7f0000001180)={0x2, 0x0, @remote}, &(0x7f00000011c0)=0x10) io_cancel(r0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x1, 0x1, r1, &(0x7f0000000100)="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", 0x1000, 0x7, 0x0, 0x2, r2}, &(0x7f0000001140)) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') [ 2185.760468][T27219] binder: 27210:27219 unknown command 0 [ 2185.770809][T27219] binder: 27210:27219 ioctl c0306201 20000040 returned -22 03:34:35 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2900000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2185.831368][T27229] binder: 27227:27229 ioctl c0306201 20000040 returned -14 [ 2185.845108][T27230] binder: 27228:27230 ioctl c0306201 20000040 returned -14 03:34:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2185.943534][T27340] binder: 27321:27340 ioctl c0306201 20000040 returned -14 03:34:35 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:35 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:35 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x9, 0x10500) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x5, 0x4000000fffe) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000100)={0x7002, &(0x7f0000000040), 0xc, r1, 0x8}) r2 = gettid() syz_open_procfs(r2, &(0x7f0000000080)='mountinfo\x00') 03:34:35 executing program 3: r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0xffd, 0x40008) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000080)={0x709e9fcd69d7885a, 0x0, {0x2, 0x8, 0x8, 0x1}}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 03:34:35 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b00000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2186.509988][T27346] binder: 27344:27346 ioctl c0306201 20000040 returned -14 [ 2186.538774][T27352] binder: 27348:27352 ioctl c0306201 20000040 returned -14 03:34:35 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') socket$inet6_sctp(0xa, 0x5, 0x84) 03:34:35 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:35 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c00000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:35 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xfffffff2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0c6300000b635a0000000000000000e5ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000bdd0541ededa32dbba802d2716510000000000000000000000000000"], 0x28c, 0x0, 0x0}) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x200101, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x10}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/autofs\x00', 0x1fc, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000600)={&(0x7f0000000140)=@in6={0xa, 0x4e24, 0x80, @dev={0xfe, 0x80, [], 0x10}, 0x7}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000380)="8ce0d4b8821bb1cb157bc6283fedc75378f9392ee29869914ac28d72e5beb0d99a5af07717d5353cec7807d37024cc3ccc323f2400e42a3fbdf808ecffe9feb113687782193fe0d340011d57685e7900c78e86d4fa3511db991a7f7159f1e062144a0d99902c1d239256ce93d94bf85c8bb782e81c597cb733978f2a1722b2ba415c7501a6ca5e07b71f6790a8c6c9c5802fbb28347c790f75d8ac", 0x9b}, {&(0x7f0000000440)="c86e140ef8714553038a1c4aa19808cf3ce571083ccd93dd3672eba5ea569eaa9e7cebdd3a19d01dcad2666ddfe1838aa0557a98b55e50011ff7f3bda6e7e006e53829ca1d0088047665bf48cf3d8f9c7b30d249a549eb75c87fb0db072ad6adb1f41e5201433bc7c7a92fd61cc9e1e3fa0841838a8e195609fef610d4c4", 0x7e}, {&(0x7f00000004c0)="3eea2fb0ffb02447ac516f76208048c493f59da31b2ccb88e67475431d8ed197cd687beb51db26543319e0a4450bba690bc7ee25545753e1032954ae554e749ddba7423595f998ed47f8c15f2d53b1294674c041197ce924c1cfa29b0761ed22da206bba5c0a96f0515d21a7bdfcb2d9907d2239978f99fea002f2d15c121661f6b34313618eb48fe9d7830e3b239c1b03b7f436f16230a55ee011eb5f06a20e62", 0xa1}, {&(0x7f0000000580)="078a63315551c5d8c5111ed7c6923c7e1d504876a1133058d22be89cdeca47269857ff3117110033e847ba4c790525966a9b17b39c1171d49012b711b51299fea3765952429d6d1ff8dd066cf94285a8db6b377518db", 0x56}], 0x4, 0x0, 0x0, 0x80}, 0x4001) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f00000000c0)={0x4, 0x6c6, 0x5f5f}) ioctl$TIOCGPTPEER(r2, 0x5441, 0x5a) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f00000001c0)="b960d4ed4c2bfb59fee1fab47796b7b7c68241af43c024b3930e6305e21c02492ab4b3b3b13889cb15ba6072002bafb911b6257008da23ab3c1eba800c16dbbcdcd43aa2235613ac38f70c3e62a67ba60f259eb8361d2745aee258376612abf70ce259f7a4ab104439ce14d6e2c4df02d9227997d5a5ee102dd19ab7dec3e0dc228ef23341fb3bb2f5816e9b2cedc2e4a6657f1370c80e368e5c5f9c3b48df28f8f0eb515a55f5a1be6d") openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x8000, 0x0) [ 2186.670280][T27466] binder: 27445:27466 ioctl c0306201 20000040 returned -14 [ 2186.732581][T27469] binder: 27468:27469 ioctl c0306201 20000040 returned -14 [ 2186.771066][T27472] binder: 27471:27472 unknown command 5923595 [ 2186.801526][T27472] binder: 27471:27472 ioctl c0306201 20000040 returned -22 03:34:36 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:36 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000001640)=0x1000008000000003, 0xfffffddb) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x2, 0x10000) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x40000000000002f, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000200)={0x0, 0x0, 0x6, 0x0, [], [{0x8, 0x766, 0x7fff, 0x5, 0x1, 0xfffffffffffffffd}, {0x1, 0xffff, 0x80000000, 0xffffffffffff0756, 0x2, 0x100000000}], [[], [], [], [], [], []]}) socket$rxrpc(0x21, 0x2, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') socket$rxrpc(0x21, 0x2, 0xa) 03:34:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:36 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3300000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:36 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x7, 0x80001) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000140)=0xff, 0x4) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x40, 0x0) r2 = mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000006, 0x50, 0xffffffffffffff9c, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={r2}) r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000005d40)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000000880)=@newlink={0x48, 0x10, 0xd07, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0xc, @mcast1={0xff, 0x1, [0xc, 0xf0ffff]}}]}}}]}, 0x48}}, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2187.409417][T27581] binder: 27580:27581 ioctl c0306201 20000040 returned -14 [ 2187.417766][T27587] binder: 27585:27587 ioctl c0306201 20000040 returned -14 [ 2187.434243][T27588] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 2187.446073][T27581] binder: 27580:27581 ioctl c0306201 20000040 returned -14 03:34:36 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a00000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2187.463906][T27588] binder: 27582:27588 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 2187.492542][T27588] binder: 27582:27588 unknown command 0 03:34:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2187.510864][T27588] binder: 27582:27588 ioctl c0306201 20000040 returned -22 03:34:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:36 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2187.595241][T27617] binder: 27612:27617 ioctl c0306201 20000040 returned -14 03:34:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffe8c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c6300000b630000000000000000000000000000000000000000853345ec048ac4a16500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xfffffffffffffed2, 0x0, 0x0}) socket$isdn_base(0x22, 0x3, 0x0) 03:34:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2187.650156][T27690] binder: 27662:27690 ioctl c0306201 20000040 returned -14 [ 2187.782491][T27710] binder: 27708:27710 ioctl c0306201 20000000 returned -14 [ 2187.783447][T27711] binder: 27706:27711 ioctl c0306201 20000040 returned -14 [ 2187.809055][T27710] binder: 27708:27710 ioctl c0306201 20000000 returned -14 03:34:37 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:37 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:37 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x4e24, @empty}}, {{0x2, 0x4e20, @empty}}}, 0x108) 03:34:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x80000001, 0x2) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r3 = request_key(&(0x7f0000000240)='cifs.spnego\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)='/dev/binder#\x00', 0xfffffffffffffffd) keyctl$negate(0xd, r2, 0x80, r3) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000080)=0x0) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f00000000c0)=r4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c6300000b6300000000000000010000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000296188fd97dbbe9f"], 0x0, 0x0, 0x0}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000340)={&(0x7f0000000300)='./file0\x00', r1}, 0x10) [ 2188.271147][T27825] binder_transaction: 24 callbacks suppressed [ 2188.271163][T27825] binder: 27824:27825 transaction failed 29189/-22, size 104-0 line 2994 [ 2188.292830][T27827] binder: 27820:27827 transaction failed 29189/-22, size 768-0 line 2994 [ 2188.293015][T27823] binder: 27821:27823 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 2188.313500][T27823] binder: 27821:27823 unknown command 0 03:34:37 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7fffffff, 0x4000) ioctl$KDSKBLED(r0, 0x4b65, 0x7fffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') 03:34:37 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2188.328276][T27823] binder: 27821:27823 ioctl c0306201 20000040 returned -22 [ 2188.328570][T27827] binder: 27820:27827 ioctl c0306201 20000040 returned -14 [ 2188.361623][T27825] binder: 27824:27825 ioctl c0306201 20000040 returned -14 03:34:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2188.392090][T27825] binder: 27824:27825 transaction failed 29189/-22, size 104-0 line 2994 03:34:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x40010, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=ANY=[], 0xd0, 0x0, 0x0}) 03:34:37 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800e000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2188.444444][T27825] binder: 27824:27825 ioctl c0306201 20000040 returned -14 [ 2188.466011][T27943] binder: 27941:27943 transaction failed 29189/-22, size 1280-0 line 2994 03:34:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2188.529357][T27943] binder: 27941:27943 ioctl c0306201 20000040 returned -14 [ 2188.534563][T27946] binder: 27945:27946 ioctl c0306201 20000040 returned -14 [ 2188.584896][T27952] binder: 27949:27952 transaction failed 29189/-22, size 108-0 line 2994 [ 2188.600706][T27952] binder: 27949:27952 ioctl c0306201 20000040 returned -14 [ 2188.610097][T27952] binder: 27949:27952 transaction failed 29189/-22, size 108-0 line 2994 [ 2188.619439][T27952] binder: 27949:27952 ioctl c0306201 20000040 returned -14 03:34:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:38 executing program 0: r0 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs(r0, &(0x7f00000000c0)='setgroups\x00') 03:34:38 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8035000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:38 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x48000000005) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2189.169199][T28064] binder: 28062:28064 transaction failed 29189/-22, size 1536-0 line 2994 [ 2189.171815][T28065] binder: 28059:28065 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 2189.183188][T28066] binder: 28063:28066 transaction failed 29189/-22, size 116-0 line 2994 03:34:38 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:38 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/175, &(0x7f0000000100)=0xaf) [ 2189.222327][T28064] binder: 28062:28064 ioctl c0306201 20000040 returned -14 [ 2189.240291][T28066] binder: 28063:28066 ioctl c0306201 20000040 returned -14 [ 2189.250903][T28065] binder: 28059:28065 unknown command 0 03:34:38 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:38 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86ddffff00000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2189.275118][T28065] binder: 28059:28065 ioctl c0306201 20000040 returned -22 03:34:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0xfffffffffffff08b, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x5, 0x1, 0x95a, 0x0, 0x5}, 0xc) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000100)) 03:34:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2189.423757][T28084] binder: 28082:28084 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 2189.434048][T28085] binder: 28080:28085 transaction failed 29189/-22, size 1792-0 line 2994 [ 2189.454119][T28084] binder: 28082:28084 unknown command 0 [ 2189.459951][T28085] binder: 28080:28085 ioctl c0306201 20000040 returned -14 03:34:38 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x5, 0x0) ioctl(r0, 0x6, &(0x7f0000000100)="7a8640586c92c04a668b916ef95f9c6c4e65381f5679e73548d44a47738f3326ce35d1b1488d3682c29690681a980d96e9ebdf5dd28e037cc09e07cf8e951c189a9c096c0abb7c5faa2d5b3d1c128940d94ec772e6e28e7c9ad0fe8853428d71c4b054b09a64d27a87496753182d010f1153f37a59d3e2e7ce41adbf5a9bc3b3e167b2e340d7407488cbefec8e92c7d69558685fc00a61e89a3a5ea88debaae1458bbf0e3f5edad7d7a3c8a71084396a72ac0654d91e3d872ab6eef42bc429224721315021a8b9cbad417fdb0ff48bf7dba44678d7b866105b83") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) 03:34:38 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8847000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:38 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) [ 2189.466030][T28087] binder: 28086:28087 transaction failed 29189/-22, size 122-0 line 2994 [ 2189.468965][T28084] binder: 28082:28084 ioctl c0306201 20000040 returned -22 [ 2189.510559][T28087] binder: 28086:28087 ioctl c0306201 20000040 returned -14 03:34:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2189.543333][T28087] binder: 28086:28087 ioctl c0306201 20000040 returned -14 03:34:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2189.614502][T28193] binder: 28177:28193 ioctl c0306201 20000040 returned -14 03:34:38 executing program 3: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3, 0x200000) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000140)={0x7, 0x0, [{0x2ad, 0x0, 0x8}, {0x832}, {0x3fb, 0x0, 0xffffffffffffffe1}, {}, {0xe5f, 0x0, 0x80}, {0xafa, 0x0, 0x7}, {0x0, 0x0, 0xff}]}) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)=0x5, 0x4) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000240)={0x0, 0x0, {0xffffffffffffffff, 0x3, 0x4142, 0x2, 0xd83}}) r2 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x7f, 0x80) ioctl$KVM_PPC_GET_SMMU_INFO(r2, 0x8250aea6, &(0x7f0000000100)) 03:34:38 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8848000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2189.662701][T28193] binder: 28177:28193 ioctl c0306201 20000040 returned -14 03:34:38 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40000, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000200)=""/70) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000040)={0xa, 0x5, 0xd, 0x101}, 0xa) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000080)=0xf000) 03:34:38 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) [ 2189.709377][T28203] binder: 28201:28203 ioctl c0306201 20000040 returned -14 [ 2189.732242][T28203] binder: 28201:28203 ioctl c0306201 20000040 returned -14 03:34:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:38 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8864000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2189.760690][T28206] binder: 28205:28206 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 2189.807474][T28206] binder: 28205:28206 unknown command 0 [ 2189.820799][T28206] binder: 28205:28206 ioctl c0306201 20000040 returned -22 03:34:39 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') ioctl$SCSI_IOCTL_SYNC(r0, 0x4) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'netdevsim0\x00', 0x400}) [ 2189.860325][T28224] binder: 28220:28224 ioctl c0306201 20000040 returned -14 [ 2189.870379][T28227] binder: 28208:28227 ioctl c0306201 20000040 returned -14 03:34:39 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:39 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff00000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:39 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x40000, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000280)) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x40000, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) mq_timedsend(r2, &(0x7f00000000c0)="709b78307f9e9dccbf3e1f6726ef0cb262a5e4860c79609ab2308697be0e7d08cb5b", 0x22, 0xff, &(0x7f0000000180)={r3, r4+10000000}) pipe2$9p(&(0x7f0000000080), 0x800) 03:34:39 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88caffff00000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2190.037291][T28332] binder: 28326:28332 ioctl c0306201 20000040 returned -14 [ 2190.065893][T28334] binder: 28333:28334 ioctl c0306201 20000040 returned -14 [ 2190.078750][T28337] binder: 28336:28337 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER 03:34:39 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:39 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x100, 0x5, 0x8, 0x8ef, 0x1}, &(0x7f0000000040)=0x14) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r1, 0x7fffffff}, 0x8) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000003c0)={r1, 0xd3, "022853aec2668caedbadc7a48e5a05636150db1e25fe7eefa8d0e4bf2dfdb27cbf1af1925709f5f0c1cea0b71e28e73be2999eddd7ee916a6ceb3d6ac1de8034d8e5a7606c8b29194dbfe3244193a70628a02f0d251c463597b15d567c144b95a82fa822c15cf723362ede26cbad763b77fae48c435a34e94e4ed29f18b7c2617795ac540e1a878474601cd6fdd6f155b159c27ff915b826e41040bca6deb81f77c094eaadd2152a009d6b8266f458a683a7f15be62ebc1b689dfdcaffe3a037d7377f2f49870d5e42a9af92c02ecb17ee7e77"}, &(0x7f00000004c0)=0xdb) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, r2, 0x230, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xce20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffff801}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x871}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x800}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x41a87845c4aaf84d}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r2, 0x210, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x10a2ac33c4b83d4c}, 0x0) 03:34:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2190.100998][T28337] binder: 28336:28337 unknown command 0 [ 2190.138760][T28337] binder: 28336:28337 ioctl c0306201 20000040 returned -22 03:34:39 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:39 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:39 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8906000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2190.236705][T28434] binder: 28433:28434 ioctl c0306201 20000040 returned -14 [ 2190.249853][T28440] binder: 28410:28440 ioctl c0306201 20000040 returned -14 03:34:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:34:39 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa0000000}, 0xc, &(0x7f0000000040)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 03:34:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:39 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:39 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:39 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89ffffff00000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2190.399616][T28460] binder: 28458:28460 ioctl 80087601 20000000 returned -22 [ 2190.437135][T28460] binder: 28458:28460 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 2190.461941][T28464] binder: 28461:28464 ioctl c0306201 20000040 returned -14 [ 2190.481305][T28469] binder: 28468:28469 ioctl c0306201 20000040 returned -14 [ 2190.485612][T28460] binder: 28458:28460 unknown command 0 [ 2190.509165][T28469] binder: 28468:28469 ioctl c0306201 20000040 returned -14 03:34:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:39 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='setgroups\x00') 03:34:39 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f00000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:39 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) [ 2190.532585][T28460] binder: 28458:28460 ioctl c0306201 20000040 returned -22 [ 2190.561337][T28460] binder: 28458:28460 ioctl 80087601 20000000 returned -22 03:34:39 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2190.627951][T28478] binder: 28477:28478 ioctl c0306201 20000040 returned -14 03:34:39 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc00000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2190.693534][T28568] binder: 28548:28568 ioctl c0306201 20000040 returned -14 03:34:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c6300000b6300000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073b7006358570db4143086b7725e572d4bae69b9f5f85de8309a354b141e3b02caeb7fa26b2dc7a4e570b3aa9d186a52472958f6fe2be460c21ac768632d17f0f25f13b5780bbacb0a2b623fd0c4aedf1d789f4f5d73c1631bfb05994e8068f144c4330adcb8453b97649a0226b3bf7efd0e75834d6472b2d23721e5247c315a8b0c"], 0x0, 0x0, 0x0}) 03:34:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:39 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:39 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') getsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000100)=""/4096, &(0x7f0000000000)=0x1000) 03:34:39 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2190.840885][T28594] binder: 28592:28594 ioctl c0306201 20000040 returned -14 [ 2190.859325][T28596] binder: 28595:28596 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 2190.879519][T28596] binder: 28595:28596 unknown command 0 03:34:40 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfec0000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:40 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) [ 2190.906973][T28596] binder: 28595:28596 ioctl c0306201 20000040 returned -22 [ 2190.947031][T28603] binder: 28602:28603 ioctl c0306201 20000040 returned -14 03:34:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0c6300000b630000000000000000000000000000000000040000000000000000000000000000000000000000001ff4010000000000000000000000000000000000000000000000000000f37ccbc08262d3bf1ffba9cf6caca1d549e4847bb1ffe60d582e9d187ab5be5aa1d96220ce772a88bfd90dfdf2176c87be455400000000000000"], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() sched_rr_get_interval(r3, &(0x7f0000000100)) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000140)=0x3) ioctl$NBD_DISCONNECT(r2, 0xab08) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000000c0)) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000240)={{0x1, 0x0, 0xfff, 0xfff, '\x00', 0x6c}, 0x1, [0xe9, 0x80, 0xe5, 0x0, 0x5a97, 0xb2, 0x0, 0x7fff, 0x5, 0x1f, 0x3, 0x9, 0x805, 0x2, 0x9, 0x0, 0x6, 0x1, 0x3, 0x2, 0x3ff, 0x101, 0x1, 0x798, 0x8, 0xffffffffffffffe0, 0x80000000, 0x7ff, 0x8, 0x9, 0x3, 0x1, 0x1, 0x20, 0x4, 0xcb, 0x3, 0xfffffffffffffffc, 0x4d6, 0xc9b, 0x6f, 0x0, 0x3, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x9, 0x3, 0xefa, 0x80, 0x7, 0x7, 0x10000, 0x7ff, 0x401, 0x6, 0x80, 0x1050, 0x200, 0x6, 0xff, 0x0, 0xf74, 0xffffffffffffff2c, 0x8, 0x81, 0x97, 0x2d35, 0x4, 0x7, 0x8001, 0x800, 0x20, 0xd68, 0x0, 0xffffffff, 0x100000000, 0x7fffffff, 0x9, 0xe7c, 0x0, 0x0, 0x3, 0x93e7, 0x1, 0x4ca, 0x400, 0x9, 0x1, 0x1, 0x2, 0x3f, 0x9, 0x6, 0x4, 0x4, 0x4, 0x6, 0x3, 0x80000001, 0x1, 0x8, 0xf845, 0x9, 0x1f, 0x2, 0x2, 0x4, 0xffffffff, 0x6, 0x8, 0x18000000000, 0x7, 0x1, 0x3, 0x8, 0xfffffffffffffff8, 0xffffffffffff9d79, 0x10001, 0x1, 0x0, 0xee, 0x86, 0x3, 0x1f, 0x6]}) 03:34:40 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') r0 = shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000040)=""/172) 03:34:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:40 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:40 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) [ 2191.074896][T28614] binder: 28612:28614 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 2191.094695][T28616] binder: 28615:28616 ioctl c0306201 20000040 returned -14 03:34:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:40 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=""/194, &(0x7f0000000000)=""/147, &(0x7f0000000200)=""/213, 0x3006}) [ 2191.166750][T28614] binder: 28612:28614 unknown command 0 [ 2191.172755][T28614] binder: 28612:28614 ioctl c0306201 20000040 returned -22 [ 2191.179027][T28625] binder: 28620:28625 ioctl c0306201 20000040 returned -14 03:34:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:40 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:40 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0x40189206, &(0x7f0000000180)) [ 2191.279785][T28715] binder: 28713:28715 ioctl c0306201 20000040 returned -14 03:34:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x0, 0x280c42) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x5, 0x102110, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000180)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000300)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x18, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {{0x3, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0)=[0x18, 0x68, 0x18, 0x20]}, 0x10000}}, @acquire={0x40046305, 0x1}, @reply={0x40406301, {0x3, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@fda={0x66646185, 0x4, 0x1, 0x2}, @flat={0x776a2a85, 0x1, r2, 0x4}], &(0x7f0000000380)=[0x70, 0x78, 0x40, 0x0]}}, @release={0x40046306, 0x3}], 0xaa, 0x0, 0x0}) r3 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x810001, 0x3d) ioctl$TIOCSBRK(r3, 0x5427) 03:34:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2191.344350][T28736] binder: 28733:28736 ioctl c0306201 20000040 returned -14 03:34:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:40 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') write$P9_RREAD(r0, &(0x7f0000000100)={0x100b, 0x75, 0x2, {0x1000, "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"}}, 0x100b) write$P9_RLINK(r0, &(0x7f0000000000)={0x7, 0x47, 0x1}, 0x7) 03:34:40 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0x40189206, &(0x7f0000000180)) [ 2191.450565][T28743] binder: 28742:28743 got transaction to invalid handle [ 2191.489522][T28743] binder: 28742:28743 ioctl c0306201 20000040 returned -14 03:34:40 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2191.501305][T28747] binder: 28745:28747 ioctl c0306201 20000040 returned -14 [ 2191.536365][T28752] binder: 28751:28752 ioctl c0306201 20000040 returned -14 03:34:40 executing program 0: r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000040)={{0x2, 0x9}, {0x7, 0x6}, 0x8, 0x1, 0x3db}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={0x0, 0xf86}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x400, 0x1, 0x2, 0x6, r1}, &(0x7f0000000200)=0x10) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f00000001c0)={0x0, @aes256}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') 03:34:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:40 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0x40189206, &(0x7f0000000180)) 03:34:40 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2191.600530][T28752] binder: 28751:28752 ioctl c0306201 20000040 returned -14 [ 2191.654627][T28863] binder: 28862:28863 ioctl c0306201 20000040 returned -14 03:34:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x46, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c6300000b6300001c0000000000000000000000000000000000000000000000000000000000000043c10000000000b5a2a09a000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 03:34:40 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, 0x0) [ 2191.695519][T28863] binder: 28862:28863 ioctl c0306201 20000040 returned -14 [ 2191.697851][T23596] binder: undelivered TRANSACTION_ERROR: 29201 03:34:40 executing program 0: getpid() gettid() r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000180)={0xb3}) sendto$packet(r0, &(0x7f0000000100)="64b14e8faefd4ab4af1a146b327a55f22d0836f8b76bd82aa6c9c46b59c5fbd2f8a95008bead224de3b0a2b979085b6dff3872ead8e43f68d5073fcdedf68a13c2452a684f88c5afb4db19a7f17405654bd6cce1", 0x54, 0x40, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0xa, &(0x7f0000000040)='setgroups\x00'}, 0x30) r2 = syz_open_procfs(r1, &(0x7f0000000000)='fdinfo/3\x00') ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f00000001c0)) ioctl$sock_netdev_private(r2, 0x89f7, &(0x7f0000000240)="f4edf3bc8c6795f00dbc44307657c9c4ad3874593dcfba69a496952e0946c9e48bcffae1906e14dd032a88d69541970533c6c6a29aa789a1b660a4a083e391ec68071b82aa34117ed545b4e1e3678ead499d84ebecb29fae7c7df5edf58bc8eff8190ffeadac9a22e800a9013d6849aae104cfa567bf44b8ac211eff8db0") bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e22, @multicast1}, 0x10) 03:34:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:40 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2191.778593][T28872] binder: 28870:28872 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 2191.811161][T28874] binder: 28873:28874 ioctl c0306201 20000040 returned -14 [ 2191.838400][T28872] binder: 28870:28872 unknown command 28 03:34:41 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:41 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, 0x0) 03:34:41 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x81, 0x2100) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r0, 0x400454cc, r1) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000200)=0x1000) openat$vfio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vfio/vfio\x00', 0x20800, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)=0x0) syz_open_procfs(r2, &(0x7f00000000c0)='setgroups\x00') 03:34:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2191.879577][T28872] binder: 28870:28872 ioctl c0306201 20000040 returned -22 [ 2191.916070][T28883] binder: 28882:28883 ioctl c0306201 20000040 returned -14 03:34:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = fcntl$getown(r0, 0x9) prctl$PR_SET_PTRACER(0x59616d61, r1) 03:34:41 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffff9c, 0x0, 0xa, &(0x7f0000000000)='setgroups\x00'}, 0x30) r0 = socket$isdn(0x22, 0x3, 0x10) connect(r0, &(0x7f00000016c0)=@ipx={0x4, 0x8000, 0x1, "84370e94e727", 0xffffffff}, 0x80) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000013c0)={0x0, 0x0, 0x0}, &(0x7f0000001400)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001440)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000001540)=0xe8) syz_mount_image$f2fs(&(0x7f0000000100)='f2fs\x00', &(0x7f0000000140)='./file0\x00', 0xa3b, 0x4, &(0x7f0000001340)=[{&(0x7f0000000180)="62438895376b6708a641a1a58214cfbc3e3e4f45878d51caa6bef9e783086e9bf8d26f17d6d3e3f3d7c0e2b3d055a2707ad347838e513acb0a8d0da0f982806f9b05eedbc1dd7b95b201f6721e96e2ae79ea180c2a24c7596405d83ce282fd97ee220eb630a499c9ed77a6a165fa1ba2746fde94b72c41d7d2492c52586e8a1671ca7b1b9f011c5a91938dbb9300c23c4895b89af96975c28c8ff7d4fa9a23c15021e57b3cb7aef0988d3b5fc9ce96a50ca320f961df7c3d08fefcfc01bc9cbfba78b0e1604a2a7f2a5633d9ef43d0c96b58a8490d285d91fdfd68d50d212bb27c70b095ca0a15df1ae9ca9c8797", 0xee, 0x2}, {&(0x7f0000000280)="a21c3c3cb3686679e4bf45a7ff06b2", 0xf, 0xff}, {&(0x7f00000002c0)="e3897abf576ca68a4c088a04ede5123a147cfe3b332c430113f4e6bbb37b3e18f95f3860a50ae37013a29d5d7b5677e1d99b6b5405a341641ebf4ea90eb796768fc31875cecbb57d5b85043769619a13a17a749be2f2348ed459d8d7394b8c1dc6e98c4437c092a21d5739786af49c8e5a85e4", 0x73, 0x1ff}, {&(0x7f0000000340)="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", 0x1000, 0x1000}], 0x2000, &(0x7f0000001580)={[{@two_active_logs='active_logs=2'}, {@resgid={'resgid', 0x3d, r1}}, {@user_xattr='user_xattr'}, {@noheap='noheap'}, {@jqfmt_vfsold='jqfmt=vfsold'}], [{@obj_type={'obj_type', 0x3d, '&{keyringvmnet0user1'}}, {@uid_lt={'uid<', r2}}, {@subj_user={'subj_user', 0x3d, '+'}}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x63, 0x0, 0x0, 0x61, 0x62, 0x30, 0x38], 0x2d, [0x31, 0x77, 0x73], 0x2d, [0x62, 0x0, 0x77, 0x62], 0x2d, [0x30, 0x36, 0x67, 0x37], 0x2d, [0x36, 0x35, 0x37, 0x32, 0x73, 0x62, 0x30, 0x39]}}}, {@smackfsroot={'smackfsroot', 0x3d, 'vboxnet0loem1:/:vmnet1*eth1proc\xa4'}}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x75, 0x36, 0x77, 0x7f, 0x36, 0x39, 0x62], 0x2d, [0x7f, 0x61, 0x63, 0x7d], 0x2d, [0x37, 0x39, 0x7f, 0x35], 0x2d, [0x36, 0x66, 0x34, 0x7f], 0x2d, [0x37, 0x0, 0x36, 0x76, 0x7f, 0x77, 0x79, 0x34]}}}, {@context={'context', 0x3d, 'user_u'}}]}) r3 = accept4(r0, &(0x7f0000001840)=@xdp, &(0x7f00000018c0)=0x80, 0x0) bind$x25(r3, &(0x7f0000001900)={0x9, @remote={[], 0x2}}, 0x12) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)=0x0) clock_adjtime(0x6, &(0x7f0000001740)={0x0, 0x80, 0x9, 0x5, 0x8, 0x8, 0x6, 0x7, 0x800, 0x8, 0x2, 0x0, 0xfff, 0x89800, 0x1, 0xfa, 0x8, 0xffffffff, 0x8000, 0x1, 0x3, 0xfff, 0x8, 0xcef, 0x2, 0xbb8}) syz_open_procfs(r4, &(0x7f00000000c0)='setgroups\x00') [ 2192.037808][T28889] binder: 28887:28889 ioctl c0306201 20000040 returned -14 [ 2192.041101][T28897] binder: 28893:28897 ioctl c0306201 20000040 returned -14 [ 2192.077865][T28901] binder: 28896:28901 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER 03:34:41 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:41 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, 0x0) 03:34:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2192.122706][T28901] binder: 28896:28901 unknown command 0 [ 2192.152961][T28901] binder: 28896:28901 ioctl c0306201 20000040 returned -22 [ 2192.240571][T28942] binder: 28940:28942 ioctl c0306201 20000040 returned -14 03:34:41 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x401, 0x4) 03:34:41 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) close(r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 03:34:41 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2192.281182][T28981] binder: 28943:28981 ioctl c0306201 20000040 returned -14 03:34:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:41 executing program 3: r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x9, 0x20443) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000140)={r1, &(0x7f0000000240)=""/4096}) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = epoll_create(0x200) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r2) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000001240)={{0x3e0, 0x100000000}, 0x0, 0x3ff, 0x1, {0x7, 0x2d}, 0x7ff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c6300000b630000000000000000000000000000000000000000000000000000000000000000000000001c00000000000000000000400800000000000000000000"], 0x0, 0x0, 0x0}) [ 2192.365840][T28981] binder: 28943:28981 ioctl c0306201 20000040 returned -14 03:34:41 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2192.423665][T29030] binder: 29023:29030 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 2192.439084][T29028] binder: 29026:29028 ioctl c0306201 20000040 returned -14 [ 2192.456155][T29028] binder: 29026:29028 ioctl c0306201 20000040 returned -14 03:34:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:41 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') socket$inet_tcp(0x2, 0x1, 0x0) [ 2192.475259][T29030] binder: 29023:29030 unknown command 0 [ 2192.504916][T29030] binder: 29023:29030 ioctl c0306201 20000040 returned -22 03:34:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2192.555196][T29140] binder: 29135:29140 ioctl c0306201 20000040 returned -14 03:34:41 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:41 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) [ 2192.597902][T29190] binder: 29176:29190 ioctl c0306201 20000040 returned -14 03:34:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:41 executing program 0: r0 = openat$cgroup_subtree(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) r1 = getegid() setfsgid(r1) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') 03:34:41 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x42, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:34:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:41 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) [ 2192.777621][T29254] binder: 29249:29254 ioctl c0306201 20000040 returned -14 [ 2192.808290][T29258] binder: 29255:29258 unknown command 0 03:34:42 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2192.828917][T29260] binder: 29259:29260 ioctl c0306201 20000040 returned -14 [ 2192.829779][T29258] binder: 29255:29258 ioctl c0306201 20000040 returned -22 03:34:42 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:34:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:42 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000), 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') [ 2192.934365][T29267] binder: 29266:29267 ioctl c0306201 20000040 returned -14 03:34:42 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2193.038213][T29278] binder: 29275:29278 ioctl c0306201 20000040 returned -14 [ 2193.050401][T29278] binder: 29275:29278 ioctl c0306201 20000040 returned -14 [ 2193.053006][T29277] binder: 29273:29277 unknown command 0 03:34:42 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:42 executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x40}, 0x10) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x101, 0x1, 0x5}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000200)={r2, 0x9}, &(0x7f0000000240)=0x8) bind$tipc(r1, 0x0, 0xfffffffffffffe1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x30, r4, 0x101, 0x0, 0x0, {{}, 0x0, 0x5, 0x0, {0x14}}}, 0x30}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') 03:34:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:42 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2193.117977][T29277] binder: 29273:29277 ioctl c0306201 20000040 returned -22 [ 2193.143240][T29285] binder: 29283:29285 ioctl c0306201 20000040 returned -14 03:34:42 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2193.224122][T29293] binder: 29288:29293 ioctl c0306201 20000040 returned -14 03:34:42 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:42 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) modify_ldt$write(0x1, &(0x7f00000000c0)={0x9, 0x101000, 0xffffffffffffffff, 0x6, 0x6, 0x1, 0x5, 0x8, 0x80, 0xffffffffffff7fff}, 0x10) 03:34:42 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') fchmod(r0, 0x60) [ 2193.398959][T29305] binder_transaction: 46 callbacks suppressed [ 2193.398989][T29305] binder: 29303:29305 transaction failed 29189/-22, size 83886080-0 line 2994 [ 2193.437671][T29310] binder: 29304:29310 transaction failed 29189/-22, size 536870912-0 line 2994 03:34:42 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:42 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) [ 2193.470659][T29313] binder: 29311:29313 unknown command 0 [ 2193.477061][T29313] binder: 29311:29313 ioctl c0306201 20000040 returned -22 [ 2193.481859][T29310] binder: 29304:29310 ioctl c0306201 20000040 returned -14 [ 2193.502620][T29305] binder: 29303:29305 ioctl c0306201 20000040 returned -14 [ 2193.507459][T29313] binder: 29311:29313 unknown command 0 03:34:42 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)='setgroups\x00', 0x0}, 0x30) r3 = syz_open_procfs(r0, &(0x7f00000000c0)='setgroups\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r0, r1, 0x0, 0xa, &(0x7f0000000100)='setgroups\x00', r2}, 0x30) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000080)={0x105000, 0x119000}) [ 2193.536893][T29313] binder: 29311:29313 ioctl c0306201 20000040 returned -22 03:34:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:42 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:42 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x400000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2193.672716][T29425] binder: 29424:29425 transaction failed 29189/-22, size 1056964608-0 line 2994 [ 2193.697673][T29427] binder: 29426:29427 transaction failed 29189/-22, size 100663296-0 line 2994 03:34:42 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000100)={r0, r0, 0xfff, 0x97, &(0x7f0000000000)="83402a1e9d033bc33ea8c8ead53d41a1305dd7369bc8a5a2403476a4d1502be62f1403af3faac485298dae5e617ac9f4a69144f2dc49bdff6ff8e5384bf3e38b33c7412075256476568f6fab61bf0706a36f5d581dfe0e8481bed89b3eba7fcb11c8c2d90740a52888e31466c406b4c79255495ec0c170ce31bbbf7e52ed10058d0485fa7922ecd546810367cdbf99639959f1abdf7905", 0xbe0, 0x5, 0x3f, 0x1, 0x0, 0x2, 0x81e, 'syz0\x00'}) 03:34:42 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:42 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) [ 2193.765787][T29425] binder: 29424:29425 ioctl c0306201 20000040 returned -14 [ 2193.778591][T29427] binder: 29426:29427 ioctl c0306201 20000040 returned -14 03:34:43 executing program 3: getitimer(0x3, &(0x7f0000000080)) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x1, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c6300000b63000000000000000000000000000000000000000000000000000000000000000000000000000000000000000051ad148300000000"], 0x0, 0x0, 0x0}) [ 2193.808791][T29425] binder: 29424:29425 transaction failed 29189/-22, size 1056964608-0 line 2994 [ 2193.843905][T29425] binder: 29424:29425 ioctl c0306201 20000040 returned -14 03:34:43 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:43 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:43 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) r1 = socket$caif_seqpacket(0x25, 0x5, 0x1) ioctl$VIDIOC_DBG_G_CHIP_INFO(r0, 0xc0c85666, &(0x7f0000000080)={{0x1, @addr=0x80000000}, "c67fce04c3a783790357122b2aaeb368f5976fa9e0de9a19302d51224065184e", 0x2}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8012, r1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\xab\xcaggroup\xe1\x80\x0e\vl\x18\xebs\x00\aCJ\xb9\xed\v\xaf\xb14\xb4') 03:34:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:43 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) [ 2193.940294][T29448] binder: 29445:29448 unknown command 0 [ 2193.957895][T29448] binder: 29445:29448 ioctl c0306201 20000040 returned -22 [ 2193.990677][T29453] binder: 29449:29453 transaction failed 29189/-22, size 117440512-0 line 2994 [ 2194.029360][T29461] binder: 29459:29461 transaction failed 29189/-22, size 1207959552-0 line 2994 03:34:43 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:43 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) [ 2194.062708][T29453] binder: 29449:29453 ioctl c0306201 20000040 returned -14 [ 2194.076810][T29461] binder: 29459:29461 ioctl c0306201 20000040 returned -14 03:34:43 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x4000, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000140)=0x1800000000) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000240)=""/131, 0x83, 0x3111, &(0x7f0000000340)={r2, r3+30000000}) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000180)="ca54f4abfdcbf808931c8eca8412a390322ac8af5bcd964c50182ae3c8b47c4ed6f3f613952fe5de078d6b63f0c0ab66", 0x30) r4 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffb, 0x1) setsockopt$RDS_RECVERR(r4, 0x114, 0x5, &(0x7f00000000c0)=0x1, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:34:43 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2194.136991][T29461] binder: 29459:29461 transaction failed 29189/-22, size 1207959552-0 line 2994 03:34:43 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') r1 = getpgid(0xffffffffffffffff) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000040)={r0, r0}) 03:34:43 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2194.197936][T29461] binder: 29459:29461 ioctl c0306201 20000040 returned -14 [ 2194.226608][T29568] binder_thread_write: 5 callbacks suppressed [ 2194.226617][T29568] binder: 29567:29568 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 2194.277286][T29571] binder: 29570:29571 transaction failed 29189/-22, size 301989888-0 line 2994 [ 2194.279847][T29568] binder: 29567:29568 unknown command 0 [ 2194.299848][T29571] binder: 29570:29571 ioctl c0306201 20000040 returned -14 03:34:43 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1cd}, 0x2) [ 2194.328787][T29578] binder: 29577:29578 transaction failed 29189/-22, size 1275068416-0 line 2994 [ 2194.352505][T29568] binder: 29567:29568 ioctl c0306201 20000040 returned -22 [ 2194.372199][T29578] binder: 29577:29578 ioctl c0306201 20000040 returned -14 03:34:43 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:43 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:43 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:43 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2194.433918][T29632] binder: 29631:29632 ioctl c0306201 20000040 returned -14 [ 2194.453927][T29632] binder: 29631:29632 ioctl c0306201 20000040 returned -14 [ 2194.566362][T29692] binder: 29691:29692 ioctl c0306201 20000040 returned -14 [ 2194.586546][T29694] binder: 29693:29694 ioctl c0306201 20000040 returned -14 03:34:44 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000040)=0x4) 03:34:44 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x101000, 0x0) sendmsg$tipc(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="233930d0fd3b4a868d11180e2dcbcd42d423dabadc511ac58db11e794f2a6cfa76826c1e2aec8de3a9e32b3d81c73f9bd0308783567234461ac476dc78393dda3afbd80b6c85e52e8436dadcab14c324faf1321ff0abfdcbfa7b401bfb3c8dae34ba959a", 0x64}, {&(0x7f0000000240)="35400cc42b417be83eea0bda2b23502ce9d0c3fb0fc1d011b0e914fee31c9889e40281f01b75b9f6f0effb92a008b058910cc5f880904a98bb866c28e722a5814e44ed9f4a6dc2bafd6eccf6b1305f9e2409aab0474faaad65403bf3728806299f8765927070bc7b15d70205d84d135ccce64f60caf26769c666a1b5f5c8843fa7f6f2de495761e0d807529318319e404613fb12a2854a7d6cafbd18b895e8e28da7865d96eade", 0xa7}], 0x2, &(0x7f0000000300)="20916efb53802a69187510288bddbcf7e0b37f71683892b5ae41a230b078393976a1692f6e1a8e4e57ddb4f055e64ef8dd15ce31c9a6e5e8fa2bf4fe458d9d846883dd948b58a869", 0x48, 0x4001}, 0x4000) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x4000000000003) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:34:44 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:44 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x543]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:44 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2195.012329][T29700] binder: 29699:29700 ioctl c0306201 20000040 returned -14 [ 2195.030813][T29705] binder: 29697:29705 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 2195.039943][T29704] binder: 29698:29704 ioctl c0306201 20000040 returned -14 03:34:44 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='s\x05\x00\x00\xa7\x00\xc0\x8b\xfb\x06 \xf7\xce\x01\x04M\xa7:\xf5\xac\xb6@\xc8\xe30\x03q\xccI\xc6\xab\xdc\x92!A\xeb\xd9\x9a\x9a\x81\xa7\xb6LQ\xbb{9\x81(G\x0e\x9c\xc4d\xc1\xcc\xe8D\xf4t\xc4') ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000140)={0x5, 0x18b, 0x9, 0x30dc5caf, 0xfffffffffffffbff}) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'L-', 0x9}, 0x28, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0xfff, 0x5, 0x4, 0x70000, {0x0, 0x7530}, {0x5, 0x0, 0xffff, 0xfffffffffffffffc, 0x8000, 0x1000, "1bb0d4fe"}, 0xd13, 0x7, @offset=0x7fff, 0x4}) ioctl$KVM_SMI(r0, 0xaeb7) fcntl$setsig(r0, 0xa, 0x11) 03:34:44 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:44 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2195.071571][T29705] binder: 29697:29705 unknown command 0 [ 2195.098747][T29705] binder: 29697:29705 ioctl c0306201 20000040 returned -22 [ 2195.163827][T29755] binder: 29732:29755 ioctl c0306201 20000040 returned -14 [ 2195.177344][T29775] binder: 29764:29775 ioctl c0306201 20000040 returned -14 03:34:44 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x608]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:44 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm-monitor\x00', 0x101400, 0x0) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r1 = getpid() socket$netlink(0x10, 0x3, 0xe) get_robust_list(r1, &(0x7f0000000600)=&(0x7f00000005c0)={&(0x7f0000000580)={&(0x7f0000000540)}}, &(0x7f0000000640)=0x18) r2 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) sendmsg$rds(r2, &(0x7f0000000500)={&(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)=""/28, 0x1c}, {&(0x7f0000000100)=""/124, 0x7c}, {&(0x7f0000000180)=""/130, 0x82}, {&(0x7f0000000240)=""/193, 0xc1}], 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="58d900000000000000010000f80a0000000000001200000094b8fc21971eeea31330707bfd4c3ff073f68c6fcde1dd", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB='q\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000800000000000000100000001000000010400000000000000000000000000006d4f00000000000030000000000000001401000003000000", @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="1900000000000000", @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="01000000000000001800000000000000140100000c0000000500000000000000"], 0xa0, 0x4040}, 0x44800) ioctl$FICLONE(r2, 0x40049409, r2) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') 03:34:44 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2195.213756][T29755] binder: 29732:29755 ioctl c0306201 20000040 returned -14 03:34:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = semget(0x1, 0x3, 0x104) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000080)) [ 2195.343725][T29829] binder: 29828:29829 ioctl c0306201 20000040 returned -14 [ 2195.363678][T29832] binder: 29830:29832 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 2195.378931][T29829] binder: 29828:29829 ioctl c0306201 20000040 returned -14 [ 2195.387141][T29832] binder: 29830:29832 unknown command 0 [ 2195.400613][T29832] binder: 29830:29832 ioctl c0306201 20000040 returned -22 03:34:45 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:45 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:45 executing program 0: ioperm(0x7f, 0x3, 0x1) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x5, 0x2100) r1 = accept$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @bcast}, [@null, @remote, @rose, @bcast, @bcast, @bcast, @rose, @rose]}, &(0x7f0000000100)=0x48) tee(r0, r1, 0xfff, 0xd) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') 03:34:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x10000, 0x4) write$P9_RLCREATE(r1, &(0x7f00000000c0)={0x18, 0xf, 0x40, {{0x12, 0x1}, 0x9}}, 0x18) syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x2) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xfffffffffffffe96, 0x0, &(0x7f0000000100)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1e1, 0x0, 0x0}) 03:34:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:45 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x806]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2195.909047][T29945] binder: 29943:29945 ioctl c0306201 20000040 returned -14 [ 2195.919998][T29946] binder: 29939:29946 ioctl c0306201 20000040 returned -14 [ 2195.928948][T29944] binder: 29940:29944 ioctl c0306201 20000040 returned -14 03:34:45 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x20001, 0x0) fcntl$getflags(r0, 0x40b) 03:34:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c6300000b63000000000000000058c7840e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b0000000000000000"], 0x0, 0x0, 0x0}) [ 2196.062432][T30060] binder: 30057:30060 ioctl c0306201 20000040 returned -14 [ 2196.097587][T30062] binder: 30061:30062 ioctl c0306201 20000040 returned -14 [ 2196.105031][T30060] binder: 30057:30060 ioctl c0306201 20000040 returned -14 03:34:45 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2196.126432][T30066] binder: 30065:30066 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 2196.151251][T30066] binder: 30065:30066 unknown command 0 [ 2196.165547][T30066] binder: 30065:30066 ioctl c0306201 20000040 returned -22 03:34:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2196.200279][T30071] binder: 30070:30071 ioctl c0306201 20000040 returned -14 [ 2196.284057][T30077] binder: 30075:30077 ioctl c0306201 20000040 returned -14 03:34:45 executing program 2: syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0x40189206, &(0x7f0000000180)) 03:34:45 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0xffffffffffffffff, 0x3, 0x4, 0x3, 0x8}) 03:34:45 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000100)=0x44) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x8000, 0x26) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000280)={0x6e5, 0x1d, 0x8, 0x4, "6268c6ce5565be271b186ac07719c87aaf77def375d8c1b8f4be588fb0e68676"}) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000140)={'ipvs\x00'}, &(0x7f0000000180)=0x1e) 03:34:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:45 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe80]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2196.785925][T30085] binder: 30080:30085 ioctl c0306201 20000040 returned -14 [ 2196.799395][T30087] binder: 30082:30087 ioctl c0306201 20000040 returned -14 03:34:46 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:46 executing program 2: syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0x40189206, &(0x7f0000000180)) [ 2196.838130][T30085] binder: 30080:30085 ioctl c0306201 20000040 returned -14 03:34:46 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000380)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x2f8}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000580)={0x3, 0x0, &(0x7f0000000540)}) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) accept$netrom(r0, &(0x7f0000000240)={{0x3, @default}, [@remote, @bcast, @netrom, @netrom, @default, @remote, @rose, @default]}, &(0x7f00000002c0)=0x48) r2 = syz_open_dev$cec(&(0x7f0000000540)='/dev/cec#\x00', 0x2, 0x2) openat(r0, &(0x7f0000000300)='./file0\x00', 0x2002, 0x4) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080), &(0x7f0000000340)=0x14) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000100)=""/233) ioctl$SIOCAX25NOUID(r2, 0x89e3, &(0x7f0000000040)=0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/xfrm_stat\x00') ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 03:34:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:46 executing program 3: r0 = eventfd(0x2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f0000000180)=0xa3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c6300000b6300000000000000000000000000000000000000001000f5e58479910000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) r3 = getpgrp(0x0) ptrace$pokeuser(0x6, r3, 0x0, 0xfffffffffffff800) [ 2196.947007][T30189] binder: 30188:30189 ioctl c0306201 20000040 returned -14 03:34:46 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:46 executing program 2: syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0x40189206, &(0x7f0000000180)) [ 2197.021524][T30206] binder: 30203:30206 ioctl c0306201 20000040 returned -14 [ 2197.081809][T30209] binder: 30207:30209 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 2197.095956][T30206] binder: 30203:30206 ioctl c0306201 20000040 returned -14 03:34:46 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='setgroups\x00\x99\xc9X\x82H\xd5G\xaf\xd2\xbcyC\x8c\x06\xdejb\x05dT\xff\xe4%\xd5\xe6\xdf\x11\xd1\x81[\xf6\xda\x1a\xc0kF\nUl\xb8\x11)u\xea\x87\xe7\'&\xf8\t\xe1)\xca\xcd\xd2\xc4}\xde\xf2\x11\xb9\xa7\xb2\x17\xd9\xcd\x96\xb6\xedK\xff\x18_t\x05\xeb\xb9\x11@\x01\x84\xf2\xf04#+\xc1}\xd4\xbd\x88=:\x03yu\x87\xf9\x97d\x0f\x19\xbd5\rC\x85\xe1\xf66L') 03:34:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:46 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2900]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2197.132130][T30209] binder: 30207:30209 unknown command 0 [ 2197.137233][T30215] binder: 30214:30215 ioctl c0306201 20000040 returned -14 [ 2197.155523][T30215] binder: 30214:30215 ioctl c0306201 20000040 returned -14 [ 2197.171735][T30209] binder: 30207:30209 ioctl c0306201 20000040 returned -22 03:34:46 executing program 2: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:46 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') sendfile(r0, r0, &(0x7f0000000040), 0xfff) [ 2197.269329][T30232] binder: 30227:30232 ioctl c0306201 20000040 returned -14 [ 2197.287286][T30259] binder: 30229:30259 ioctl c0306201 20000040 returned -14 03:34:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x420000, 0x0) accept4$tipc(r1, &(0x7f00000000c0), &(0x7f0000000100)=0xd, 0x80800) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f0000000140)={0x1}) 03:34:46 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b00]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:46 executing program 0: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000240)='sJ=\xae\xefs\xca') ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000040)={0x7fff, 0x4, 0xe9f, 0x40, 0x3b76, 0x6}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = getpid() r6 = fcntl$getown(r2, 0x9) setpgid(r5, r6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = socket$inet6(0xa, 0x5, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') signalfd4(r8, &(0x7f0000000200)={0xf2}, 0x8, 0x80000) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0x400040, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000080)={r8, 0x10001}) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r8, 0x81785501, &(0x7f0000000100)=""/196) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f0000000000)=""/42) 03:34:46 executing program 2: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) [ 2197.447713][T30336] binder: 30335:30336 ioctl c0306201 20000040 returned -14 [ 2197.480115][T30342] binder: 30340:30342 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER 03:34:46 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c00]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2197.504630][T30345] binder: 30343:30345 ioctl c0306201 20000040 returned -14 [ 2197.519893][T30342] binder: 30340:30342 unknown command 0 [ 2197.540703][T30342] binder: 30340:30342 ioctl c0306201 20000040 returned -22 03:34:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:46 executing program 2: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:46 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2197.655675][T30380] binder: 30350:30380 ioctl c0306201 20000040 returned -14 03:34:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2197.723185][T30437] binder: 30414:30437 ioctl c0306201 20000040 returned -14 [ 2197.747125][T30437] binder: 30414:30437 ioctl c0306201 20000040 returned -14 03:34:46 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3300]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xfffffffffffffffa, 0x40000) write$P9_RFSYNC(r1, &(0x7f00000000c0)={0x7, 0x33, 0x2}, 0x7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c6300000b6300000000000000000000000000000000000000000000000200000000000000000000007f000040000000000000000000000000000000000000000009000000000000"], 0x0, 0x0, 0x0}) 03:34:47 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(0x0, 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:47 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2197.874390][T30467] binder: 30466:30467 ioctl c0306201 20000040 returned -14 [ 2197.934756][T30474] binder: 30471:30474 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 2197.968421][T30477] binder: 30476:30477 ioctl c0306201 20000040 returned -14 [ 2197.984504][T30474] binder: 30471:30474 unknown command 0 [ 2198.008424][T30474] binder: 30471:30474 ioctl c0306201 20000040 returned -22 03:34:47 executing program 0: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:47 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3580]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:47 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f00000001c0)=[@enter_looper, @acquire], 0x0, 0x0, 0x0}) [ 2198.425176][T30589] binder: 30587:30589 Acquire 1 refcount change on invalid ref 0 ret -22 [ 2198.426807][T30590] binder_transaction: 35 callbacks suppressed [ 2198.426829][T30590] binder: 30586:30590 transaction failed 29189/-22, size 1297036692682702848-0 line 2994 [ 2198.449857][T30591] binder: 30585:30591 transaction failed 29189/-22, size 504403158265495552-0 line 2994 [ 2198.467370][T30591] binder: 30585:30591 ioctl c0306201 20000040 returned -14 03:34:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:34:47 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a00]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2198.474853][T30590] binder: 30586:30590 ioctl c0306201 20000040 returned -14 03:34:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:47 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2198.535625][T30596] binder: 30595:30596 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 2198.545094][T30596] binder: 30595:30596 unknown command 0 [ 2198.551298][T30596] binder: 30595:30596 ioctl c0306201 20000040 returned -22 03:34:47 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2198.631525][T30679] binder: 30672:30679 transaction failed 29189/-22, size 1297036692682702848-0 line 2994 [ 2198.647759][T30688] binder: 30665:30688 transaction failed 29189/-22, size 2305843009213693952-0 line 2994 [ 2198.657807][T30679] binder: 30672:30679 ioctl c0306201 20000040 returned -14 [ 2198.661879][T30679] binder: 30672:30679 transaction failed 29189/-22, size 1297036692682702848-0 line 2994 [ 2198.688763][T30679] binder: 30672:30679 ioctl c0306201 20000040 returned -14 [ 2198.698919][T30688] binder: 30665:30688 ioctl c0306201 20000040 returned -14 03:34:47 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(0x0, 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x240, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000000c0)={0x2, [0xffff, 0x9c9]}, &(0x7f0000000100)=0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2198.789357][T30712] binder: 30710:30712 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 2198.814769][T30712] binder: 30710:30712 unknown command 0 [ 2198.823727][T30712] binder: 30710:30712 ioctl c0306201 20000040 returned -22 03:34:48 executing program 0: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:48 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:48 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x222100, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f00000000c0)={0x2, 0x8, 0x800}) [ 2199.285244][T30819] binder: 30818:30819 transaction failed 29189/-22, size 2305843009213693952-0 line 2994 [ 2199.302272][T30823] binder: 30822:30823 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 2199.311068][T30819] binder: 30818:30819 ioctl c0306201 20000040 returned -14 [ 2199.322925][T30824] binder: 30816:30824 transaction failed 29189/-22, size 4539628424389459968-0 line 2994 03:34:48 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:48 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2199.333176][T30824] binder: 30816:30824 ioctl c0306201 20000040 returned -14 [ 2199.342192][T30823] binder: 30822:30823 unknown command 0 [ 2199.367296][T30823] binder: 30822:30823 ioctl c0306201 20000040 returned -22 03:34:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2199.401314][T30830] binder: 30828:30830 transaction failed 29189/-22, size 4539628424389459968-0 line 2994 03:34:48 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4788]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2199.449208][T30830] binder: 30828:30830 ioctl c0306201 20000040 returned -14 [ 2199.468480][T30904] binder: 30895:30904 transaction failed 29189/-22, size 5188146770730811392-0 line 2994 [ 2199.488326][T30830] binder: 30828:30830 transaction failed 29189/-22, size 4539628424389459968-0 line 2994 03:34:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x88, 0x0, &(0x7f0000000100)=[@reply={0x40406301, {0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, &(0x7f0000000080), &(0x7f00000000c0)=[0x78, 0x28, 0x28, 0x30, 0x28, 0x38, 0x20]}}, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xffffffffffffffd1, 0x0, 0x0}) [ 2199.488697][T30904] binder: 30895:30904 ioctl c0306201 20000040 returned -14 [ 2199.522316][T30830] binder: 30828:30830 ioctl c0306201 20000040 returned -14 [ 2199.534025][T30904] binder: 30895:30904 ioctl c0306201 20000040 returned -14 [ 2199.563326][T30938] binder: 30936:30938 got reply transaction with no transaction stack [ 2199.583753][T30938] binder: 30936:30938 ioctl c0306201 20000040 returned -14 [ 2199.601387][T23596] binder: undelivered TRANSACTION_ERROR: 29201 03:34:48 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(0x0, 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:48 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2199.707613][T30943] binder: 30942:30943 ioctl c0306201 20000040 returned -14 03:34:49 executing program 0: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:49 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4888]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 03:34:49 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:49 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6488]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:49 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2200.152309][T30955] binder: 30950:30955 ioctl c0306201 20000040 returned -14 [ 2200.152776][T30953] binder: 30949:30953 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 2200.169094][T30954] binder: 30948:30954 ioctl c0306201 20000040 returned -14 [ 2200.185890][T30953] binder: 30949:30953 unknown command 0 [ 2200.191858][T30954] binder: 30948:30954 ioctl c0306201 20000040 returned -14 [ 2200.205717][T30953] binder: 30949:30953 ioctl c0306201 20000040 returned -22 03:34:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:49 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800e]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2200.262086][T30990] binder: 30972:30990 ioctl c0306201 20000040 returned -14 [ 2200.300788][T30990] binder: 30972:30990 ioctl c0306201 20000040 returned -14 03:34:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c6300000b63000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 2200.327887][T31065] binder: 31051:31065 ioctl c0306201 20000040 returned -14 [ 2200.440352][T31072] binder: 31069:31072 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 2200.457157][T31072] binder: 31069:31072 unknown command 0 [ 2200.462802][T31072] binder: 31069:31072 ioctl c0306201 20000040 returned -22 03:34:49 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2200.562356][T31078] binder: 31077:31078 ioctl c0306201 20000040 returned -14 03:34:50 executing program 0: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:50 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:50 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 03:34:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:50 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8035]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) timer_create(0x5, &(0x7f0000000140)={0x0, 0x3f, 0x2, @thr={&(0x7f0000000080)="1da54eecd430a94e07c467f273f3e9feae844d102f98a85c98125892feb5c5fe379239f79e2044cb95f6e8a58b3e3cd7a56deca6671940e4d28c702c5b603ee2ab8d706c", &(0x7f0000000100)="893a0774b4094fbafdef7e110cee074529ce58d34374dac070427f8fffd21d8ba2a56a74bd5b74522a0997cdb39684d6e7719b962e"}}, &(0x7f0000000180)=0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x101200, 0x0) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000280)) timer_delete(r1) getegid() 03:34:50 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80fe]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2201.025261][T31085] binder: 31081:31085 ioctl c0306201 20000040 returned -14 [ 2201.033957][T31086] binder: 31082:31086 ioctl c0306201 20000040 returned -14 03:34:50 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2201.153539][T31096] binder: 31093:31096 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 2201.164080][T31097] binder: 31092:31097 ioctl c0306201 20000040 returned -14 [ 2201.185598][T31100] binder: 31099:31100 ioctl c0306201 20000040 returned -14 [ 2201.191358][T31096] binder: 31093:31096 unknown command 0 03:34:50 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2201.203088][T31096] binder: 31093:31096 ioctl c0306201 20000040 returned -22 03:34:50 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:50 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2201.388745][T31210] binder: 31207:31210 ioctl c0306201 20000040 returned -14 [ 2201.397470][T31209] binder: 31206:31209 ioctl c0306201 20000040 returned -14 03:34:50 executing program 0: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:50 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x30040, 0x0) bind$isdn_base(r0, &(0x7f00000000c0)={0x22, 0x0, 0x3ff, 0xd6, 0xef000}, 0x6) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0}) 03:34:50 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8847]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:50 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2201.855494][T31220] binder: 31219:31220 ioctl c0306201 20000040 returned -14 [ 2201.859244][T31221] binder: 31216:31221 ioctl c0306201 20000040 returned -14 03:34:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:51 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8848]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2201.983859][T31329] binder: 31312:31329 ioctl c0306201 20000040 returned -14 [ 2202.000090][T31331] binder: 31328:31331 ioctl c0306201 20000040 returned -14 [ 2202.061350][T31335] binder: 31334:31335 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 2202.079519][T31335] binder: 31334:31335 unknown command 0 [ 2202.113650][T31335] binder: 31334:31335 ioctl c0306201 20000040 returned -22 03:34:51 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:51 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8864]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2202.265119][T31443] binder: 31440:31443 ioctl c0306201 20000040 returned -14 03:34:51 executing program 0: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') 03:34:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:51 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8906]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2202.720454][T31453] binder: 31447:31453 ioctl c0306201 20000040 returned -14 [ 2202.720844][T31449] binder: 31448:31449 ioctl c0306201 20000040 returned -14 [ 2202.751215][T31454] binder: 31452:31454 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER 03:34:51 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f00]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:52 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2202.773928][T31454] binder: 31452:31454 unknown command 0 [ 2202.801077][T31454] binder: 31452:31454 ioctl c0306201 20000040 returned -22 [ 2202.807948][T31460] binder: 31458:31460 ioctl c0306201 20000040 returned -14 03:34:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2202.885018][T31527] binder: 31526:31527 ioctl c0306201 20000040 returned -14 [ 2202.924323][T31571] binder: 31564:31571 ioctl c0306201 20000040 returned -14 03:34:52 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:52 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0fe]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:52 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x400, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x78, r1, 0x28, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x80000001}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 03:34:52 executing program 0: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:52 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:52 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:52 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) [ 2203.202232][T31671] binder: 31670:31671 ioctl c0306201 20000040 returned -14 [ 2203.213036][T31684] binder: 31664:31684 ioctl c0306201 20000040 returned -14 03:34:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c6300000b6300800000000000000000000000000000000000000000000000000000000000000000000000000000edbb000000000000000000e30000000000000000000000000000"], 0x0, 0x0, 0x0}) 03:34:52 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc00]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2203.256444][T31684] binder: 31664:31684 ioctl c0306201 20000040 returned -14 [ 2203.272495][T31671] binder: 31670:31671 ioctl c0306201 20000040 returned -14 03:34:52 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:52 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:52 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2203.325552][T31697] binder: 31696:31697 unknown command -2147458293 [ 2203.346590][T31697] binder: 31696:31697 ioctl c0306201 20000040 returned -22 03:34:52 executing program 0: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) [ 2203.446857][T31752] binder_transaction: 30 callbacks suppressed [ 2203.446887][T31752] binder: 31741:31752 transaction failed 29189/-22, size 0-18 line 2994 [ 2203.452749][T31763] binder: 31740:31763 transaction failed 29189/-22, size 0-7 line 2994 [ 2203.483560][T31763] binder: 31740:31763 ioctl c0306201 20000040 returned -14 03:34:52 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) [ 2203.493637][T31752] binder: 31741:31752 ioctl c0306201 20000040 returned -14 03:34:52 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfec0]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:52 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f00000000c0)={0x0, 0xfffffffffffffffe}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xffffff34, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c6300000b630000000000000000000000000000000000000000000000000e000000000000009c7d0231c905c1a751ce0000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 03:34:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:52 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2203.655365][T31826] binder: 31815:31826 transaction failed 29189/-22, size 0-18 line 2994 [ 2203.664393][T31825] binder: 31823:31825 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 2203.687170][T31824] binder: 31822:31824 transaction failed 29189/-22, size 0-72 line 2994 03:34:52 executing program 0: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:52 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:52 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2203.704447][T31826] binder: 31815:31826 ioctl c0306201 20000040 returned -14 [ 2203.712135][T31825] binder: 31823:31825 unknown command 0 [ 2203.723360][T31824] binder: 31822:31824 ioctl c0306201 20000040 returned -14 [ 2203.730689][T31825] binder: 31823:31825 ioctl c0306201 20000040 returned -22 03:34:53 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2203.829628][T31924] binder: 31915:31924 transaction failed 29189/-22, size 0-72 line 2994 03:34:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:34:53 executing program 0: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0x40189206, &(0x7f0000000180)) 03:34:53 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) [ 2203.883310][T31924] binder: 31915:31924 ioctl c0306201 20000040 returned -14 [ 2203.915397][T31924] binder: 31915:31924 transaction failed 29189/-22, size 0-72 line 2994 [ 2203.952572][T31944] binder: 31942:31944 transaction failed 29189/-22, size 0-76 line 2994 [ 2203.959951][T31924] binder: 31915:31924 ioctl c0306201 20000040 returned -14 [ 2203.991045][T31949] binder: 31941:31949 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER 03:34:53 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:53 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:53 executing program 0: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0x40189206, &(0x7f0000000180)) [ 2203.993163][T31944] binder: 31942:31944 ioctl c0306201 20000040 returned -14 [ 2204.005200][T31949] binder: 31941:31949 unknown command 0 [ 2204.033741][T31949] binder: 31941:31949 ioctl c0306201 20000040 returned -22 03:34:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = accept$alg(0xffffffffffffff9c, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xfdc2, 0x0, &(0x7f00000002c0)=[@enter_looper, @transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x7, 0x2, 0x39}], &(0x7f0000000100)=[0x0, 0x78, 0x0, 0x58, 0x38]}}, @transaction_sg={0x40486311, {{0x3, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@fda={0x66646185, 0x0, 0x1, 0x12}, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x27}], &(0x7f0000000180)=[0x30, 0x0]}, 0x7fffffff}}, @register_looper, @enter_looper], 0x0, 0x0, 0x0}) 03:34:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:53 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2204.201914][T31962] binder: 31959:31962 transaction failed 29189/-22, size 0-76 line 2994 [ 2204.239564][T31966] binder: 31964:31966 transaction failed 29189/-22, size 0-96 line 2994 03:34:53 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:53 executing program 0: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0x40189206, &(0x7f0000000180)) [ 2204.243098][T31965] binder: 31963:31965 got transaction to invalid handle [ 2204.251692][T31962] binder: 31959:31962 ioctl c0306201 20000040 returned -14 [ 2204.263806][T31965] binder: 31963:31965 transaction failed 29201/-22, size 0-0 line 2994 [ 2204.275338][T31966] binder: 31964:31966 ioctl c0306201 20000040 returned -14 03:34:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:53 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2204.327096][T31966] binder: 31964:31966 ioctl c0306201 20000040 returned -14 03:34:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c6300000b63000000000000000000000000000000000000000000000000000000000000000000000000b334da9aebe1732400000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)=0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x80, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000180)=0xffff, 0x4) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x4000, 0x0) syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0xffff, 0x80682) r3 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x1f, 0x80000) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000002c0)=0x0) kcmp(r1, r4, 0x0, r0, r0) 03:34:53 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:53 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2204.416587][T23596] binder: undelivered TRANSACTION_ERROR: 29201 [ 2204.447427][T32078] binder: 32077:32078 ioctl c0306201 20000040 returned -14 03:34:53 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2204.517394][T32087] binder: 32083:32087 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER 03:34:53 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2204.563692][T32087] binder: 32083:32087 unknown command 0 [ 2204.574447][T32092] binder: 32090:32092 ioctl c0306201 20000040 returned -14 [ 2204.593241][T32087] binder: 32083:32087 ioctl c0306201 20000040 returned -22 03:34:53 executing program 0: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:53 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:53 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) [ 2204.680197][T32199] binder: 32195:32199 ioctl c0306201 20000040 returned -14 03:34:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x139, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:34:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:54 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) [ 2204.821190][T32310] binder: 32307:32310 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER 03:34:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2204.865033][T32310] binder: 32307:32310 unknown command 0 [ 2204.890881][T32310] binder: 32307:32310 ioctl c0306201 20000080 returned -22 [ 2204.904384][T32316] binder: 32312:32316 ioctl c0306201 20000040 returned -14 03:34:54 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:54 executing program 0: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) [ 2204.913217][T32317] binder: 32315:32317 ioctl c0306201 20000040 returned -14 03:34:54 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x2080, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x2, 0x0, 0x1, 0x5}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000240)={0x8, r1, 0x10001, 0x101}) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r2], 0xfffffffffffffcd7, 0x0, 0x0}) pread64(r2, &(0x7f0000000080)=""/225, 0xe1, 0x2) 03:34:54 executing program 2: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0x40189206, &(0x7f0000000180)) 03:34:54 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:54 executing program 0: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) [ 2205.082020][T32329] binder: 32325:32329 unknown command 808464432 03:34:54 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:54 executing program 2: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0x40189206, &(0x7f0000000180)) [ 2205.129604][T32334] binder: 32332:32334 ioctl c0306201 20000040 returned -14 [ 2205.133336][T32329] binder: 32325:32329 ioctl c0306201 20000040 returned -22 [ 2205.158849][T32336] binder: 32331:32336 ioctl c0306201 20000040 returned -14 03:34:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:54 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:54 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:54 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8060000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:54 executing program 2: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0x40189206, &(0x7f0000000180)) 03:34:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x80, 0x0) getsockopt$inet_dccp_buf(r1, 0x21, 0xe, &(0x7f00000000c0)=""/210, &(0x7f0000000240)=0xd2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2205.323063][T32437] binder: 32436:32437 ioctl c0306201 20000040 returned -14 [ 2205.376544][T32451] binder: 32449:32451 ioctl c0306201 20000040 returned -14 03:34:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:54 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:54 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2205.439100][T32457] binder: 32455:32457 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER 03:34:54 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:54 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, 0x0) [ 2205.502325][T32457] binder: 32455:32457 unknown command 0 [ 2205.517434][T32464] binder: 32463:32464 ioctl c0306201 20000040 returned -14 [ 2205.526303][T32457] binder: 32455:32457 ioctl c0306201 20000040 returned -22 [ 2205.571373][T32484] binder: 32459:32484 ioctl c0306201 20000040 returned -14 03:34:54 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:54 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:54 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, 0x0) 03:34:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c6300000b630000000000000000000000000000000000000000000000008fe86436d8d24a13517a5b43c60000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80000) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000000c0)) 03:34:54 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2205.751327][T32579] binder: 32578:32579 ioctl c0306201 20000040 returned -14 [ 2205.758040][T32582] binder: 32580:32582 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 2205.759156][T32581] binder: 32577:32581 ioctl c0306201 20000040 returned -14 [ 2205.787301][T32582] binder: 32580:32582 unknown command 0 03:34:55 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) [ 2205.805450][T32579] binder: 32578:32579 ioctl c0306201 20000040 returned -14 [ 2205.807095][T32582] binder: 32580:32582 ioctl c0306201 20000040 returned -22 03:34:55 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:55 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:55 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, 0x0) 03:34:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:55 executing program 3: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000080)=0x0) capset(&(0x7f00000000c0)={0x19980330, r0}, &(0x7f0000000100)={0x2, 0x8, 0x7fff, 0x0, 0x5364}) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:34:55 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) [ 2205.995323][T32699] binder: 32694:32699 ioctl c0306201 20000040 returned -14 [ 2206.014406][T32698] binder: 32697:32698 ioctl c0306201 20000040 returned -14 03:34:55 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:55 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:55 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2206.065908][T32703] binder: 32702:32703 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 2206.084531][T32703] binder: 32702:32703 unknown command 0 [ 2206.093723][T32703] binder: 32702:32703 ioctl c0306201 20000040 returned -22 03:34:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:55 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2206.226156][ T328] binder: 32762:328 ioctl c0306201 20000040 returned -14 [ 2206.234537][ T313] binder: 309:313 ioctl c0306201 20000040 returned -14 03:34:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000240)) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f00000000c0)={{0x6, 0x7, 0x1, 0x100, 0xffffffffffffffe1, 0xffff}, 0x7f, 0xf08, 0x83f}) 03:34:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:55 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:55 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2206.355833][ T357] binder: 355:357 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 2206.390372][ T361] binder: 358:361 ioctl c0306201 20000040 returned -14 [ 2206.399019][ T357] binder: 355:357 unknown command 0 03:34:55 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2206.419475][ T357] binder: 355:357 ioctl c0306201 20000040 returned -22 [ 2206.427570][ T361] binder: 358:361 ioctl c0306201 20000040 returned -14 [ 2206.434393][ T365] binder: 363:365 ioctl c0306201 20000040 returned -14 03:34:55 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2206.571766][ T472] binder: 470:472 ioctl c0306201 20000040 returned -14 03:34:56 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:56 executing program 2: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x800, 0x100) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:34:56 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:56 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2206.959694][ T475] binder: 474:475 ioctl c0306201 20000040 returned -14 [ 2206.990679][ T479] binder: 477:479 ioctl c0306201 20000040 returned -14 [ 2206.997538][ T482] binder: 481:482 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER 03:34:56 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:56 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2207.011261][ T475] binder: 474:475 ioctl c0306201 20000040 returned -14 [ 2207.025554][ T482] binder: 481:482 unknown command 0 [ 2207.038199][ T479] binder: 477:479 ioctl c0306201 20000040 returned -14 [ 2207.043169][ T482] binder: 481:482 ioctl c0306201 20000040 returned -22 03:34:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:56 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:56 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = semget$private(0x0, 0x5, 0x12) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000080)=""/187) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2207.179241][ T565] binder: 553:565 ioctl c0306201 20000040 returned -14 [ 2207.201293][ T577] binder: 576:577 ioctl c0306201 20000040 returned -14 [ 2207.317819][ T604] binder: 602:604 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 2207.328136][ T604] binder: 602:604 unknown command 0 [ 2207.334523][ T604] binder: 602:604 ioctl c0306201 20000040 returned -22 03:34:56 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:56 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:56 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43050000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c6300000b6300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff000000000000000000"], 0x0, 0x0, 0x0}) [ 2207.838157][ T712] binder: 709:712 ioctl c0306201 20000040 returned -14 [ 2207.850016][ T714] binder: 710:714 ioctl c0306201 20000040 returned -14 [ 2207.854471][ T715] binder: 708:715 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 2207.879693][ T715] binder: 708:715 unknown command 0 03:34:57 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800e0000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2207.885596][ T715] binder: 708:715 ioctl c0306201 20000040 returned -22 [ 2207.892691][ T712] binder: 709:712 ioctl c0306201 20000040 returned -14 03:34:57 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) getcwd(&(0x7f0000000080)=""/224, 0xe0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000300)=0x383) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x200001, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x68) fcntl$notify(r0, 0x402, 0x13) getsockname$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000280)=0x1c) 03:34:57 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:57 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80350000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2208.029191][ T725] binder: 724:725 ioctl c0306201 20000040 returned -14 [ 2208.038044][ T729] binder: 726:729 ioctl c0306201 20000040 returned -14 [ 2208.039244][ T728] binder: 723:728 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER 03:34:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2208.097943][ T728] binder: 723:728 unknown command 0 [ 2208.117027][ T728] binder: 723:728 ioctl c0306201 20000040 returned -22 [ 2208.164218][ T750] binder: 749:750 ioctl c0306201 20000040 returned -14 03:34:57 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:57 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:57 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x102, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x9) [ 2208.697237][ T843] binder_transaction: 35 callbacks suppressed [ 2208.697254][ T843] binder: 841:843 transaction failed 29189/-22, size 0-26624 line 2994 [ 2208.714106][ T847] binder: 844:847 unknown command 0 [ 2208.722583][ T843] binder: 841:843 ioctl c0306201 20000040 returned -14 [ 2208.722645][ T848] binder: 845:848 transaction failed 29189/-22, size 0-26624 line 2994 03:34:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2208.742941][ T847] binder: 844:847 ioctl c0306201 20000040 returned -22 [ 2208.754933][ T847] binder: 844:847 unknown command 0 [ 2208.760575][ T847] binder: 844:847 ioctl c0306201 20000040 returned -22 [ 2208.769619][ T848] binder: 845:848 ioctl c0306201 20000040 returned -14 [ 2208.782422][ T848] binder: 845:848 transaction failed 29189/-22, size 0-26624 line 2994 [ 2208.798515][ T848] binder: 845:848 ioctl c0306201 20000040 returned -14 03:34:58 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:58 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86ddffff]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:58 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2208.860360][ T940] binder: 939:940 transaction failed 29189/-22, size 0-27648 line 2994 [ 2208.869049][ T940] binder: 939:940 ioctl c0306201 20000040 returned -14 [ 2208.883016][ T940] binder: 939:940 transaction failed 29189/-22, size 0-27648 line 2994 [ 2208.892039][ T940] binder: 939:940 ioctl c0306201 20000040 returned -14 03:34:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2208.974405][ T960] binder: 958:960 transaction failed 29189/-22, size 0-29696 line 2994 [ 2209.003023][ T963] binder: 959:963 transaction failed 29189/-22, size 0-27648 line 2994 03:34:58 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88470000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2209.027032][ T960] binder: 958:960 ioctl c0306201 20000040 returned -14 [ 2209.028342][ T967] binder: 964:967 unknown command 0 [ 2209.034268][ T963] binder: 959:963 ioctl c0306201 20000040 returned -14 [ 2209.062351][ T967] binder: 964:967 ioctl c0306201 20000040 returned -22 03:34:58 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88480000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:58 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:58 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:58 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000080)=""/189) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:34:58 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88640000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2209.591342][ T977] binder: 976:977 transaction failed 29189/-22, size 0-31232 line 2994 [ 2209.599845][ T974] binder: 973:974 transaction failed 29189/-22, size 0-29696 line 2994 [ 2209.637431][ T974] binder: 973:974 ioctl c0306201 20000040 returned -14 [ 2209.646070][ T977] binder: 976:977 ioctl c0306201 20000040 returned -14 [ 2209.658759][ T974] binder: 973:974 transaction failed 29189/-22, size 0-29696 line 2994 [ 2209.670491][ T974] binder: 973:974 ioctl c0306201 20000040 returned -14 03:34:58 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:58 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:58 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:58 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={0x264, r1, 0x220, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xe0, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x24}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2690}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff80000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}]}, @TIPC_NLA_MEDIA={0x60, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x548241a7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xacf}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6cf}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}, @TIPC_NLA_BEARER={0xa4, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1, @remote, 0xfad9}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'syzkaller1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1d4}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xdd2a}]}]}, 0x264}}, 0x20004010) r2 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, &(0x7f00000000c0)) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f00000001c0)={0x26, 0x3, 0x0, {0x5, 0x5, 0x0, 'GPL{['}}, 0x26) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000080)=0xa9b, 0x8) r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0c6300000b63000000000000000000220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000252009b36b981c0be5e6c0dcb1d4bbf6697c204707ecb2df8552d21c16eb9a3cd67e899728534c3f1d39fdd48e1f814e677dafce50de14137c304c3004f531beb11c55d66b1575926162e42067cc7795a26d83642e8faf06a373e8c5d927a0c31fe8de77d128800ccce4e79d3ff1b0eb4224bb32c30def289dc5618497f7603422aa86c0cf08e1a9d615b85f296b4b6914cfb61652f43357c2eb1a821d5c045ec962924ba8"], 0x0, 0x0, 0x0}) [ 2209.844081][ T1101] binder: 1100:1101 ioctl c0306201 20000040 returned -14 [ 2209.861329][ T1103] binder: 1102:1103 ioctl c0306201 20000040 returned -14 [ 2209.876972][ T1107] binder_thread_write: 3 callbacks suppressed [ 2209.876982][ T1107] binder: 1098:1107 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER 03:34:59 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88caffff]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2209.917409][ T1107] binder: 1098:1107 unknown command 0 [ 2209.930963][ T1107] binder: 1098:1107 ioctl c0306201 20000040 returned -22 [ 2209.992981][ T1147] binder: 1126:1147 ioctl c0306201 20000040 returned -14 [ 2210.033044][ T1147] binder: 1126:1147 ioctl c0306201 20000040 returned -14 03:34:59 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:34:59 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89060000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x4000000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:34:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2210.486721][ T1232] binder: 1227:1232 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 2210.497005][ T1235] binder: 1229:1235 ioctl c0306201 20000040 returned -14 [ 2210.498528][ T1233] binder: 1228:1233 ioctl c0306201 20000040 returned -14 [ 2210.511768][ T1232] binder: 1227:1232 unknown command 0 [ 2210.517865][ T1232] binder: 1227:1232 ioctl c0306201 20000040 returned -22 [ 2210.549467][ T1233] binder: 1228:1233 ioctl c0306201 20000040 returned -14 03:34:59 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:34:59 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89ffffff]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f0000000080)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x6400, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x18) 03:34:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:34:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2210.741479][ T1245] binder: 1240:1245 ioctl c0306201 20000040 returned -14 [ 2210.748273][ T1248] binder: 1244:1248 ioctl c0306201 20000040 returned -14 [ 2210.750852][ T1249] binder: 1243:1249 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER 03:34:59 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:34:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2210.791217][ T1249] binder: 1243:1249 unknown command 0 [ 2210.808498][ T1249] binder: 1243:1249 ioctl c0306201 20000040 returned -22 [ 2210.886937][ T1308] binder: 1273:1308 ioctl c0306201 20000040 returned -14 03:35:00 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:35:00 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:35:00 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:35:00 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xa58, 0x101000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f00000000c0)) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2211.333121][ T1363] binder: 1362:1363 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 2211.350608][ T1367] binder: 1364:1367 ioctl c0306201 20000040 returned -14 [ 2211.352257][ T1368] binder: 1366:1368 ioctl c0306201 20000040 returned -14 [ 2211.366305][ T1363] binder: 1362:1363 unknown command 0 [ 2211.372905][ T1367] binder: 1364:1367 ioctl c0306201 20000040 returned -14 [ 2211.385303][ T1363] binder: 1362:1363 ioctl c0306201 20000040 returned -22 03:35:00 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:35:00 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe800000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:35:00 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:35:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f00000000c0)=[@request_death={0x400c630e, 0x4, 0x2}, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2211.603956][ T1477] binder: 1475:1477 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4 [ 2211.632781][ T1482] binder: 1476:1482 ioctl c0306201 20000040 returned -14 [ 2211.639742][ T1477] binder: 1475:1477 ERROR: BC_REGISTER_LOOPER called without request 03:35:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:35:00 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfec00000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2211.643080][ T1484] binder: 1480:1484 ioctl c0306201 20000040 returned -14 [ 2211.653203][ T1477] binder: 1475:1477 unknown command 0 [ 2211.660678][ T1477] binder: 1475:1477 ioctl c0306201 20000000 returned -22 [ 2211.783255][ T1493] binder: 1492:1493 ioctl c0306201 20000040 returned -14 03:35:01 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:35:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = msgget(0x2, 0x8) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfff, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xbf, @mcast1, 0x81}, r3}}, 0x30) msgctl$MSG_INFO(r1, 0xc, &(0x7f00000003c0)=""/158) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 03:35:01 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:01 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:35:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2212.223910][ T1501] binder: 1498:1501 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 2212.235269][ T1502] binder: 1499:1502 ioctl c0306201 20000040 returned -14 [ 2212.244011][ T1504] binder: 1500:1504 ioctl c0306201 20000040 returned -14 [ 2212.248688][ T1501] binder: 1498:1501 unknown command 0 [ 2212.271421][ T1501] binder: 1498:1501 ioctl c0306201 20000040 returned -22 03:35:01 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:35:01 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:35:01 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:35:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x1, 0x0) [ 2212.503566][ T1624] binder: 1623:1624 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 2212.514074][ T1628] binder: 1627:1628 ioctl c0306201 20000040 returned -14 [ 2212.527591][ T1630] binder: 1622:1630 ioctl c0306201 20000040 returned -14 [ 2212.539816][ T1630] binder: 1622:1630 ioctl c0306201 20000040 returned -14 [ 2212.541090][ T1624] binder: 1623:1624 unknown command 0 03:35:01 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffa888]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:01 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:35:01 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) [ 2212.561222][ T1628] binder: 1627:1628 ioctl c0306201 20000040 returned -14 [ 2212.577436][ T1624] binder: 1623:1624 ioctl c0306201 20000040 returned -22 03:35:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:35:01 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2212.706764][ T1745] binder: 1744:1745 ioctl c0306201 20000040 returned -14 03:35:01 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffca88]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) setxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:systemd_logind_exec_t:s0\x00', 0x2b, 0x1) 03:35:01 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) [ 2212.755294][ T1747] binder: 1746:1747 ioctl c0306201 20000040 returned -14 [ 2212.789007][ T1745] binder: 1744:1745 ioctl c0306201 20000040 returned -14 03:35:01 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffdd86]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:02 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2212.837092][ T1754] binder: 1752:1754 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER 03:35:02 executing program 0: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0x40189206, &(0x7f0000000180)) 03:35:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2212.886195][ T1754] binder: 1752:1754 unknown command 0 [ 2212.924016][ T1754] binder: 1752:1754 ioctl c0306201 20000040 returned -22 [ 2212.924400][ T1761] binder: 1760:1761 ioctl c0306201 20000040 returned -14 03:35:02 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:35:02 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2212.978015][ T1784] binder: 1783:1784 ioctl c0306201 20000040 returned -14 03:35:02 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:35:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:35:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xfffffffffffffeda, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\fc\x00\x00\vc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x8000, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x0, 0x0) renameat2(r1, &(0x7f00000000c0)='./file0\x00', r2, &(0x7f0000000180)='./file0\x00', 0x1) 03:35:02 executing program 0: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0x40189206, &(0x7f0000000180)) [ 2213.093195][ T1875] binder: 1874:1875 ioctl c0306201 20000040 returned -14 03:35:02 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:35:02 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff89]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:02 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2213.204880][ T1884] binder: 1879:1884 ioctl c0306201 20000040 returned -14 03:35:02 executing program 0: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0x40189206, &(0x7f0000000180)) 03:35:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:35:02 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x4, 0x1) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000000c0)={'icmp\x00'}, &(0x7f0000000100)=0x1e) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0}) [ 2213.345765][ T1992] binder: 1983:1992 ioctl c0306201 20000040 returned -14 03:35:02 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2213.413317][ T1999] binder: 1996:1999 ioctl c0306201 20000040 returned -14 03:35:02 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, 0x0) 03:35:02 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffffffffff]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2213.504961][ T2037] binder: 2020:2037 ioctl c0306201 20000040 returned -14 [ 2213.534461][ T2037] binder: 2020:2037 ioctl c0306201 20000040 returned -14 03:35:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2213.585298][ T2109] binder: 2108:2109 ioctl c0306201 20000040 returned -14 [ 2213.678957][ T2115] binder: 2113:2115 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 2213.714621][ T2115] binder: 2113:2115 unknown command 0 [ 2213.736157][ T2115] binder: 2113:2115 ioctl c0306201 20000040 returned -22 03:35:03 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:35:03 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:35:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:35:03 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:03 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, 0x0) 03:35:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = fcntl$getown(r0, 0x9) ptrace$setregset(0x4205, r1, 0x201, &(0x7f00000000c0)={&(0x7f0000000080)="172da54541b2b2ce39ce988bdb3b453a92843b067084e05bc106889e8a77693c9c4eac2eb59fe3f8fe7aef9c8e625cbc44", 0x31}) [ 2214.090123][ T2126] binder: 2121:2126 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 2214.092088][ T2127] binder_transaction: 34 callbacks suppressed [ 2214.092104][ T2127] binder: 2119:2127 transaction failed 29189/-22, size 0-1946157056 line 2994 [ 2214.114130][ T2125] binder: 2124:2125 transaction failed 29189/-22, size 0-1275068416 line 2994 [ 2214.120544][ T2126] binder: 2121:2126 unknown command 0 [ 2214.130599][ T2125] binder: 2124:2125 ioctl c0306201 20000040 returned -14 03:35:03 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, 0x0) 03:35:03 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2214.143515][ T2127] binder: 2119:2127 ioctl c0306201 20000040 returned -14 [ 2214.153390][ T2126] binder: 2121:2126 ioctl c0306201 20000040 returned -22 03:35:03 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:35:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:35:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f00000000c0)={@local, 0x0}, &(0x7f0000000240)=0x14) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000280)={r2, 0x1, 0xfffffffffffffff7, 0x1, 0xfffffffffffffbeb, 0xff, 0x8}) 03:35:03 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x2, 0x0) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0x100000073) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@ipv4={[], [], @empty}, 0x0, 0x3, 0x0, 0x1, 0x101, 0x101}, &(0x7f0000000140)=0x20) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000000180)={'nr0\x00', 0x3f, 0x18000}) ioctl$SG_GET_PACK_ID(r1, 0x2286, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000280)=0x0) timer_create(0x4, &(0x7f00000002c0)={0x0, 0x14, 0x0, @tid=r2}, &(0x7f0000000300)) [ 2214.312493][ T2240] binder: 2238:2240 transaction failed 29189/-22, size 0-2046820352 line 2994 [ 2214.312604][ T2239] binder: 2236:2239 transaction failed 29189/-22, size 0-1610612736 line 2994 [ 2214.331284][ T2240] binder: 2238:2240 ioctl c0306201 20000040 returned -14 [ 2214.375652][ T2244] binder: 2242:2244 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 2214.385595][ T2244] binder: 2242:2244 unknown command 0 [ 2214.391618][ T2244] binder: 2242:2244 ioctl c0306201 20000040 returned -22 [ 2214.401360][ T2244] binder: 2242:2244 unknown command 0 [ 2214.407520][ T2244] binder: 2242:2244 ioctl c0306201 20000040 returned -22 [ 2214.414912][ T2239] binder: 2236:2239 ioctl c0306201 20000040 returned -14 [ 2214.439615][ T2239] binder: 2236:2239 transaction failed 29189/-22, size 0-1610612736 line 2994 [ 2214.475922][ T2239] binder: 2236:2239 ioctl c0306201 20000040 returned -14 03:35:04 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:35:04 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:35:04 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x2, 0x0) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0x100000073) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@ipv4={[], [], @empty}, 0x0, 0x3, 0x0, 0x1, 0x101, 0x101}, &(0x7f0000000140)=0x20) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000000180)={'nr0\x00', 0x3f, 0x18000}) ioctl$SG_GET_PACK_ID(r1, 0x2286, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000280)=0x0) timer_create(0x4, &(0x7f00000002c0)={0x0, 0x14, 0x0, @tid=r2}, &(0x7f0000000300)) 03:35:04 executing program 3: futex(&(0x7f0000000080)=0xfffffffffffffffe, 0x84, 0xfffffffffffffffe, &(0x7f00000000c0), &(0x7f0000000140)=0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x2, 0x0) 03:35:04 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2214.983669][ T2354] binder: 2353:2354 transaction failed 29189/-22, size 0-1744830464 line 2994 [ 2214.993182][ T2357] binder: 2350:2357 transaction failed 29189/-22, size 0-72057594037927936 line 2994 [ 2214.999168][ T2358] binder_thread_write: 1 callbacks suppressed [ 2214.999178][ T2358] binder: 2351:2358 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 2215.018927][ T2354] binder: 2353:2354 ioctl c0306201 20000040 returned -14 [ 2215.023455][ T2357] binder: 2350:2357 ioctl c0306201 20000040 returned -14 03:35:04 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:04 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x2, 0x0) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0x100000073) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@ipv4={[], [], @empty}, 0x0, 0x3, 0x0, 0x1, 0x101, 0x101}, &(0x7f0000000140)=0x20) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000000180)={'nr0\x00', 0x3f, 0x18000}) ioctl$SG_GET_PACK_ID(r1, 0x2286, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000280)=0x0) timer_create(0x4, &(0x7f00000002c0)={0x0, 0x14, 0x0, @tid=r2}, &(0x7f0000000300)) 03:35:04 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2215.049625][ T2358] binder: 2351:2358 unknown command 0 [ 2215.067001][ T2358] binder: 2351:2358 ioctl c0306201 20000040 returned -22 03:35:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:35:04 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2215.160435][ T2453] binder: 2435:2453 transaction failed 29189/-22, size 0-1811939328 line 2994 [ 2215.184043][ T2470] binder: 2462:2470 transaction failed 29189/-22, size 0-144115188075855872 line 2994 03:35:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x2, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './file0', [{0x20, 'trusted'}, {0x20, '/dev/binder#\x00'}], 0xa, "a23a9b2b12f4c2ce25ed9982e2b9a4dd48fc8ddd0131e7fbfb1998a9b1e7b1d09d2257c6926a376e14df3ab1e1466b2c3339e0b05265e5b2e0445e029539680e76f146e340853a68761faf5f60534bf7de054a6c4ff6dbf23977b668d37401bfcf344f1ad242b73fb9fbaf9220e26d16fe375e31f6f8d6bbdcb3c451134cc5cb7df5902138a2ae451b319f9e4e6219800a8b85dc3fe73d6bf2958c5408929eea1b7760c834ff3c2dbae7d2f3c9241941064e0e88fd0fb8678e3d7bffcecb9b139ebf4974359fa5a7f75a2a9de43dfe634c8362cfa6e3167da584dbb79c403476ff10a0681e6929e5c4"}, 0x10a) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1d, &(0x7f0000000300)={@remote, r2}, 0x14) r3 = mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x180830, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000700)={0xffffffffffffffbb, 0x0, &(0x7f0000000880)=[@acquire_done={0x40106309, r3, 0x2}, @dead_binder_done={0x40086310, 0x3}, @release={0x40046306, 0x1}, @reply_sg={0x40486312, {{0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@fda={0x66646185, 0x2, 0x0, 0x33}, @flat={0x73682a85, 0x101, r3, 0x3}, @fd={0x66642a85, 0x0, r0, 0x0, 0x1}], &(0x7f0000000840)=[0x30]}, 0x7ff}}], 0x277, 0x0, 0x0}) [ 2215.217003][ T2470] binder: 2462:2470 ioctl c0306201 20000040 returned -14 [ 2215.221554][ T2453] binder: 2435:2453 ioctl c0306201 20000040 returned -14 [ 2215.270793][ T2477] binder: 2475:2477 ioctl c0306201 20000700 returned -14 03:35:05 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0x40189206, &(0x7f0000000180)) 03:35:05 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x2, 0x0) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0x100000073) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@ipv4={[], [], @empty}, 0x0, 0x3, 0x0, 0x1, 0x101, 0x101}, &(0x7f0000000140)=0x20) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000000180)={'nr0\x00', 0x3f, 0x18000}) ioctl$SG_GET_PACK_ID(r1, 0x2286, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000280)) 03:35:05 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:35:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:35:05 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:05 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f00000000c0)={0x80000, 0x0, [0x917, 0x4, 0x56, 0x17, 0x1, 0x4, 0x5, 0x5]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) epoll_create1(0x80000) [ 2215.880673][ T2598] binder: 2590:2598 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 2215.890132][ T2599] binder: 2593:2599 transaction failed 29189/-22, size 0-216172782113783808 line 2994 [ 2215.904603][ T2600] binder: 2591:2600 ioctl c0306201 20000040 returned -14 [ 2215.921933][ T2598] binder: 2590:2598 unknown command 0 03:35:05 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:05 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0x40189206, &(0x7f0000000180)) 03:35:05 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x2, 0x0) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0x100000073) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@ipv4={[], [], @empty}, 0x0, 0x3, 0x0, 0x1, 0x101, 0x101}, &(0x7f0000000140)=0x20) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000000180)={'nr0\x00', 0x3f, 0x18000}) ioctl$SG_GET_PACK_ID(r1, 0x2286, 0x0) [ 2215.934802][ T2599] binder: 2593:2599 ioctl c0306201 20000040 returned -14 [ 2215.946619][ T2598] binder: 2590:2598 ioctl c0306201 20000040 returned -22 03:35:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:35:05 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:35:05 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x48, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c6300000b630000000000000000000000000000000000000000000020000000008da91904555201d1e6e5e76603000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) socketpair(0x3, 0x0, 0x0, &(0x7f0000000100)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x1, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x400, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000180)) 03:35:05 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x806000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:05 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x2, 0x0) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0x100000073) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@ipv4={[], [], @empty}, 0x0, 0x3, 0x0, 0x1, 0x101, 0x101}, &(0x7f0000000140)=0x20) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000000180)={'nr0\x00', 0x3f, 0x18000}) [ 2216.121962][ T2723] binder: 2711:2723 ioctl c0306201 20000040 returned -14 [ 2216.123641][ T2722] binder: 2721:2722 ioctl c0306201 20000040 returned -14 03:35:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:35:05 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0x40189206, &(0x7f0000000180)) [ 2216.200539][ T2726] binder: 2725:2726 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 2216.248830][ T2726] binder: 2725:2726 unknown command 0 03:35:05 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:35:05 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2216.272060][ T2726] binder: 2725:2726 ioctl c0306201 20000040 returned -22 [ 2216.279383][ T2733] binder: 2731:2733 ioctl c0306201 20000040 returned -14 03:35:05 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:35:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2216.349971][ T2759] binder: 2745:2759 ioctl c0306201 20000040 returned -14 03:35:05 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x2, 0x0) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0x100000073) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@ipv4={[], [], @empty}, 0x0, 0x3, 0x0, 0x1, 0x101, 0x101}, &(0x7f0000000140)=0x20) 03:35:05 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:05 executing program 3 (fault-call:3 fault-nth:0): r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:35:05 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2216.461402][ T2848] binder: 2842:2848 ioctl c0306201 20000040 returned -14 03:35:05 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) [ 2216.536045][ T2855] binder: 2852:2855 ioctl c0306201 20000040 returned -14 03:35:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:35:05 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x2, 0x0) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0x100000073) 03:35:05 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:35:05 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:05 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:35:05 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) [ 2216.697000][ T2864] binder: 2863:2864 ioctl c0306201 20000040 returned -14 03:35:05 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2900000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:35:06 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x2, 0x0) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0x100000073) 03:35:06 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x2, &(0x7f0000000180)) [ 2216.793116][ T2877] binder: 2872:2877 ioctl c0306201 20000040 returned -14 03:35:06 executing program 2: pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:35:06 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:35:06 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b00000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2216.922098][ T2886] binder: 2882:2886 ioctl c0306201 20000040 returned -14 03:35:06 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x5421, &(0x7f0000000180)) 03:35:06 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x2, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0x100000073) 03:35:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2217.011266][ T2893] binder: 2892:2893 ioctl c0306201 20000040 returned -14 03:35:06 executing program 2: pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:35:06 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:35:06 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c00000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:06 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x5450, &(0x7f0000000180)) [ 2217.142301][ T2906] binder: 2902:2906 ioctl c0306201 20000040 returned -14 03:35:06 executing program 2: pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:35:06 executing program 0: write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x100000073) 03:35:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2217.267415][ T2914] binder: 2909:2914 ioctl c0306201 20000040 returned -14 03:35:06 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:35:06 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:06 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x5451, &(0x7f0000000180)) [ 2217.339945][ T2920] binder: 2919:2920 ioctl c0306201 20000040 returned -14 03:35:06 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:35:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2217.429633][ T2926] binder: 2925:2926 ioctl c0306201 20000040 returned -14 03:35:06 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3300000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:06 executing program 0: write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x100000073) [ 2217.488068][ T2926] binder: 2925:2926 ioctl c0306201 20000040 returned -14 03:35:06 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x5452, &(0x7f0000000180)) 03:35:06 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2217.543087][ T2939] binder: 2934:2939 ioctl c0306201 20000040 returned -14 03:35:06 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:35:06 executing program 0: write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x100000073) 03:35:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:35:06 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a00000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:06 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x5460, &(0x7f0000000180)) [ 2217.791717][ T2952] binder: 2949:2952 ioctl c0306201 20000040 returned -14 [ 2217.799767][ T2953] binder: 2950:2953 ioctl c0306201 20000040 returned -14 03:35:07 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:35:07 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9201, &(0x7f0000000180)) 03:35:07 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0x100000073) 03:35:07 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2217.896380][ T2952] binder: 2949:2952 ioctl c0306201 20000040 returned -14 03:35:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:35:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:35:07 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9204, &(0x7f0000000180)) 03:35:07 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0x100000073) 03:35:07 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:07 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9205, &(0x7f0000000180)) [ 2218.081370][ T2973] binder: 2972:2973 ioctl c0306201 20000040 returned -14 [ 2218.102227][ T2978] binder: 2975:2978 ioctl c0306201 20000040 returned -14 03:35:07 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}], 0x1, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:35:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:35:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:35:07 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0x100000073) 03:35:07 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:07 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f0000000180)) 03:35:07 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}], 0x1, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) [ 2218.294603][ T2994] binder: 2991:2994 ioctl c0306201 20000040 returned -14 [ 2218.316248][ T2993] binder: 2992:2993 ioctl c0306201 20000040 returned -14 03:35:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:35:07 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0x100000073) 03:35:07 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}], 0x1, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:35:07 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800e000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:35:07 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40049409, &(0x7f0000000180)) [ 2218.467732][ T3007] binder: 3006:3007 ioctl c0306201 20000040 returned -14 03:35:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:35:07 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0x100000073) [ 2218.568621][ T3017] binder: 3016:3017 ioctl c0306201 20000040 returned -14 03:35:07 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8035000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:07 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:35:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:35:07 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x4018920a, &(0x7f0000000180)) [ 2218.637152][ T3023] binder: 3022:3023 ioctl c0306201 20000040 returned -14 03:35:07 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:35:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:35:07 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0x100000073) 03:35:07 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2218.746510][ T3034] binder: 3033:3034 ioctl c0306201 20000040 returned -14 [ 2218.765588][ T3034] binder: 3033:3034 ioctl c0306201 20000040 returned -14 03:35:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:35:08 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x4020940d, &(0x7f0000000180)) [ 2218.865882][ T3045] binder: 3040:3045 ioctl c0306201 20000040 returned -14 03:35:08 executing program 0: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x100000073) 03:35:08 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86ddffff00000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:08 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) [ 2218.917431][ T3049] binder: 3048:3049 ioctl c0306201 20000040 returned -14 03:35:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x100000000000000, &(0x7f0000000240)='-'}) 03:35:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:35:08 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8847000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:08 executing program 0: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x100000073) 03:35:08 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x80089203, &(0x7f0000000180)) 03:35:08 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(0x0, 0x40000ffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:35:08 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8848000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2219.107345][ T3069] binder_transaction: 31 callbacks suppressed [ 2219.107363][ T3069] binder: 3065:3069 transaction failed 29189/-22, size 0-6917529027641081856 line 2994 [ 2219.135846][ T3070] binder: 3068:3070 transaction failed 29189/-22, size 0-0 line 2994 03:35:08 executing program 0: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x100000073) [ 2219.195980][ T3070] binder: 3068:3070 ioctl c0306201 20000040 returned -14 [ 2219.210018][ T3069] binder: 3065:3069 ioctl c0306201 20000040 returned -14 03:35:08 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0045878, &(0x7f0000000180)) 03:35:08 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8864000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x9, 0x100000000000000, &(0x7f0000000240)='-'}) 03:35:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:35:08 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0045878, &(0x7f0000000180)) 03:35:08 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x2, 0x0) write$binfmt_elf64(r0, 0x0, 0x0) 03:35:08 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff00000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2219.396568][ T3097] binder: 3093:3097 transaction failed 29189/-22, size 0-0 line 2994 [ 2219.421568][ T3097] binder: 3093:3097 ioctl c0306201 20000040 returned -14 03:35:08 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000180)) 03:35:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x25, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2219.473734][ T3106] binder: 3103:3106 transaction failed 29189/-22, size 0-7493989779944505344 line 2994 [ 2219.496311][ T3106] binder: 3103:3106 ioctl c0306201 20000040 returned -14 [ 2219.604963][ T3117] binder: 3115:3117 transaction failed 29189/-22, size 0-0 line 2994 [ 2219.618240][ T3117] binder: 3115:3117 ioctl c0306201 20000040 returned -14 03:35:09 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(0x0, 0x40000ffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:35:09 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x2, 0x0) write$binfmt_elf64(r0, 0x0, 0x0) 03:35:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:35:09 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88caffff00000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x100000000000000, &(0x7f0000000240)='-'}) 03:35:09 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x2, 0x0) write$binfmt_elf64(r0, 0x0, 0x0) [ 2220.075351][ T3126] binder: 3123:3126 transaction failed 29189/-22, size 0-0 line 2994 [ 2220.096117][ T3128] binder: 3124:3128 transaction failed 29189/-22, size 0-7782220156096217088 line 2994 [ 2220.112804][ T3126] binder: 3123:3126 ioctl c0306201 20000040 returned -14 03:35:09 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8906000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x63, 0x100000000000000, &(0x7f0000000240)='-'}) 03:35:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2220.148703][ T3128] binder: 3124:3128 ioctl c0306201 20000040 returned -14 03:35:09 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89ffffff00000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2220.251335][ T3141] binder: 3138:3141 transaction failed 29189/-22, size 0-0 line 2994 [ 2220.288564][ T3141] binder: 3138:3141 ioctl c0306201 20000040 returned -14 [ 2220.291323][ T3145] binder: 3143:3145 transaction failed 29189/-22, size 0-8358680908399640576 line 2994 [ 2220.326658][ T3145] binder: 3143:3145 ioctl c0306201 20000040 returned -14 03:35:09 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f00000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:09 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0189436, &(0x7f0000000180)) 03:35:10 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(0x0, 0x40000ffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:35:10 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x80089203, &(0x7f0000000180)) 03:35:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:35:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x300, 0x100000000000000, &(0x7f0000000240)='-'}) 03:35:10 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc00000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:10 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc020660b, &(0x7f0000000180)) [ 2220.950811][ T3293] binder: 3288:3293 transaction failed 29189/-22, size 0-0 line 2994 [ 2220.965286][ T3296] binder: 3286:3296 ioctl c0306201 20000040 returned -14 03:35:10 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)={0x0, 0x0, 0x0}) 03:35:10 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:10 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x80089203, &(0x7f0000000180)) [ 2221.003255][ T3293] binder: 3288:3293 ioctl c0306201 20000040 returned -14 [ 2221.010687][ T3296] binder: 3286:3296 ioctl c0306201 20000040 returned -14 03:35:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x1000000, &(0x7f0000000240)='-'}) 03:35:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x396, 0x100000000000000, &(0x7f0000000240)='-'}) 03:35:10 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x80089203, &(0x7f0000000180)) [ 2221.162422][ T3315] binder: 3313:3315 ioctl c0306201 20000040 returned -14 [ 2221.185734][ T3317] binder: 3314:3317 ioctl c0306201 20000040 returned -14 03:35:10 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:35:10 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfec0000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3ac, 0x100000000000000, &(0x7f0000000240)='-'}) 03:35:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x1000000, &(0x7f0000000240)='-'}) 03:35:10 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x80089203, &(0x7f0000000180)) 03:35:11 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x80089203, &(0x7f0000000180)) [ 2221.838613][ T3335] binder: 3333:3335 ioctl c0306201 20000040 returned -14 [ 2221.839802][ T3337] binder: 3325:3337 ioctl c0306201 20000040 returned -14 03:35:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x9, 0x1000000, &(0x7f0000000240)='-'}) 03:35:11 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)={0x0, 0x0, 0x0}) 03:35:11 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3c1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:35:11 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x80089203, &(0x7f0000000180)) [ 2222.026769][ T3446] binder: 3445:3446 ioctl c0306201 20000040 returned -14 [ 2222.032521][ T3451] binder: 3448:3451 ioctl c0306201 20000040 returned -14 03:35:11 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:11 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:35:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7ffffff2, 0x100000000000000, &(0x7f0000000240)='-'}) 03:35:11 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x80089203, &(0x7f0000000180)) 03:35:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x25, 0x1000000, &(0x7f0000000240)='-'}) 03:35:11 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2222.692924][ T3461] binder: 3459:3461 ioctl c0306201 20000040 returned -14 [ 2222.716522][ T3464] binder: 3462:3464 ioctl c0306201 20000040 returned -14 03:35:11 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x80089203, &(0x7f0000000180)) 03:35:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x1000000, &(0x7f0000000240)='-'}) [ 2222.846899][ T3474] binder: 3473:3474 ioctl c0306201 20000040 returned -14 03:35:12 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:12 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)={0x0, 0x0, 0x0}) 03:35:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7ffffff8, 0x100000000000000, &(0x7f0000000240)='-'}) 03:35:12 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x80089203, &(0x7f0000000180)) 03:35:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x63, 0x1000000, &(0x7f0000000240)='-'}) [ 2222.959316][ T3584] binder: 3581:3584 ioctl c0306201 20000040 returned -14 [ 2222.971537][ T3586] binder: 3582:3586 ioctl c0306201 20000040 returned -14 03:35:12 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:35:12 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7ffffff9, 0x100000000000000, &(0x7f0000000240)='-'}) 03:35:12 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0x80089203, &(0x7f0000000180)) 03:35:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x300, 0x1000000, &(0x7f0000000240)='-'}) 03:35:12 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:12 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0x80089203, &(0x7f0000000180)) [ 2223.580882][ T3597] binder: 3595:3597 ioctl c0306201 20000040 returned -14 [ 2223.594081][ T3601] binder: 3596:3601 ioctl c0306201 20000040 returned -14 [ 2223.608617][ T3597] binder: 3595:3597 ioctl c0306201 20000040 returned -14 03:35:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x396, 0x1000000, &(0x7f0000000240)='-'}) [ 2223.715177][ T3609] binder: 3608:3609 ioctl c0306201 20000040 returned -14 03:35:13 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)={0x0, 0x0, 0x0}) 03:35:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000002, &(0x7f0000000240)='-'}) 03:35:13 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:13 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0x80089203, &(0x7f0000000180)) [ 2223.860898][ T3724] binder: 3721:3724 ioctl c0306201 20000040 returned -14 03:35:13 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0x40189206, &(0x7f0000000180)) 03:35:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3ac, 0x1000000, &(0x7f0000000240)='-'}) 03:35:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000003, &(0x7f0000000240)='-'}) 03:35:13 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:13 executing program 0: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x80089203, &(0x7f0000000180)) [ 2224.451860][ T3735] binder_transaction: 18 callbacks suppressed [ 2224.451891][ T3735] binder: 3730:3735 transaction failed 29189/-22, size 0-0 line 2994 [ 2224.454466][ T3736] binder: 3734:3736 transaction failed 29189/-22, size 0-0 line 2994 [ 2224.490338][ T3735] binder: 3730:3735 ioctl c0306201 20000040 returned -14 03:35:13 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:13 executing program 0: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x80089203, &(0x7f0000000180)) 03:35:13 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)={0x0, 0x0, 0x0}) [ 2224.520861][ T3736] binder: 3734:3736 ioctl c0306201 20000040 returned -14 03:35:13 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0x40189206, &(0x7f0000000180)) 03:35:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000004, &(0x7f0000000240)='-'}) 03:35:13 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:13 executing program 0: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x80089203, &(0x7f0000000180)) 03:35:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3c1, 0x1000000, &(0x7f0000000240)='-'}) 03:35:13 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)={0x0, 0x0, 0x0}) [ 2224.722187][ T3753] binder: 3750:3753 transaction failed 29189/-22, size 0-0 line 2994 [ 2224.760093][ T3759] binder: 3754:3759 transaction failed 29189/-22, size 0-0 line 2994 03:35:13 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0x40189206, &(0x7f0000000180)) [ 2224.766294][ T3753] binder: 3750:3753 ioctl c0306201 20000040 returned -14 03:35:13 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x80089203, &(0x7f0000000180)) 03:35:14 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000005, &(0x7f0000000240)='-'}) 03:35:14 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)={0x0, 0x0, 0x0}) [ 2224.841656][ T3759] binder: 3754:3759 ioctl c0306201 20000040 returned -14 03:35:14 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, 0x0) [ 2224.908736][ T3759] binder: 3754:3759 transaction failed 29189/-22, size 0-0 line 2994 [ 2224.955313][ T3759] binder: 3754:3759 ioctl c0306201 20000040 returned -14 03:35:14 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x80089203, &(0x7f0000000180)) 03:35:14 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7ffffff2, 0x1000000, &(0x7f0000000240)='-'}) [ 2225.000944][ T3777] binder: 3776:3777 transaction failed 29189/-22, size 0-0 line 2994 [ 2225.027979][ T3777] binder: 3776:3777 ioctl c0306201 20000040 returned -14 03:35:14 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)={0x0, 0x0, 0x0}) 03:35:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000006, &(0x7f0000000240)='-'}) 03:35:14 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, 0x0) [ 2225.157608][ T3787] binder: 3786:3787 transaction failed 29189/-22, size 0-0 line 2994 03:35:14 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x80089203, &(0x7f0000000180)) 03:35:14 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2225.198161][ T3787] binder: 3786:3787 ioctl c0306201 20000040 returned -14 [ 2225.208499][ T3793] binder: 3792:3793 transaction failed 29189/-22, size 0-0 line 2994 03:35:14 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)={0x0, 0x0, 0x0}) [ 2225.253030][ T3793] binder: 3792:3793 ioctl c0306201 20000040 returned -14 03:35:14 executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, 0x0) 03:35:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7ffffff8, 0x1000000, &(0x7f0000000240)='-'}) 03:35:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000007, &(0x7f0000000240)='-'}) 03:35:14 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:14 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x80089203, &(0x7f0000000180)) [ 2225.381173][ T3804] binder: 3803:3804 transaction failed 29189/-22, size 0-0 line 2994 03:35:14 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)={0x0, 0x0, 0x0}) [ 2225.431479][ T3804] binder: 3803:3804 ioctl c0306201 20000040 returned -14 [ 2225.445730][ T3812] binder: 3811:3812 transaction failed 29189/-22, size 0-0 line 2994 [ 2225.470103][ T3812] binder: 3811:3812 ioctl c0306201 20000040 returned -14 03:35:14 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x5) 03:35:14 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7ffffff9, 0x1000000, &(0x7f0000000240)='-'}) 03:35:14 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x80089203, &(0x7f0000000180)) 03:35:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000012, &(0x7f0000000240)='-'}) 03:35:14 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2225.597385][ T3826] binder: 3823:3826 ioctl c0306201 20000040 returned -14 03:35:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000002, &(0x7f0000000240)='-'}) [ 2225.656926][ T3830] binder: 3829:3830 ioctl c0306201 20000040 returned -14 03:35:14 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000048, &(0x7f0000000240)='-'}) 03:35:14 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x80089203, &(0x7f0000000180)) [ 2225.788947][ T3836] binder: 3835:3836 ioctl c0306201 20000040 returned -14 03:35:15 executing program 2: [ 2225.835719][ T3842] binder: 3839:3842 ioctl c0306201 20000040 returned -14 03:35:15 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)={0x0, 0x0, 0x0}) 03:35:15 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:15 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x80089203, &(0x7f0000000180)) 03:35:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000003, &(0x7f0000000240)='-'}) 03:35:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x10000000000004c, &(0x7f0000000240)='-'}) 03:35:15 executing program 2: 03:35:15 executing program 2: [ 2226.374321][ T3958] binder: 3952:3958 ioctl c0306201 20000040 returned -14 [ 2226.388831][ T3960] binder: 3955:3960 ioctl c0306201 20000040 returned -14 03:35:15 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000004, &(0x7f0000000240)='-'}) 03:35:15 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x80089203, &(0x7f0000000180)) 03:35:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000060, &(0x7f0000000240)='-'}) 03:35:15 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2226.545055][ T3971] binder: 3970:3971 ioctl c0306201 20000040 returned -14 [ 2226.554180][ T3972] binder: 3969:3972 ioctl c0306201 20000040 returned -14 [ 2226.582671][ T3972] binder: 3969:3972 ioctl c0306201 20000040 returned -14 [ 2226.594031][ T3971] binder: 3970:3971 ioctl c0306201 20000040 returned -14 03:35:16 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)={0x0, 0x0, 0x0}) 03:35:16 executing program 2: 03:35:16 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000005, &(0x7f0000000240)='-'}) 03:35:16 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x80089203, &(0x7f0000000180)) 03:35:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000068, &(0x7f0000000240)='-'}) [ 2227.284107][ T4088] binder: 4083:4088 ioctl c0306201 20000040 returned -14 [ 2227.292725][ T4087] binder: 4085:4087 ioctl c0306201 20000040 returned -14 03:35:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000006, &(0x7f0000000240)='-'}) 03:35:16 executing program 2: 03:35:16 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:16 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x80089203, &(0x7f0000000180)) 03:35:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x10000000000006c, &(0x7f0000000240)='-'}) 03:35:16 executing program 2: [ 2227.438458][ T4099] binder: 4097:4099 ioctl c0306201 20000040 returned -14 [ 2227.466826][ T4104] binder: 4101:4104 ioctl c0306201 20000040 returned -14 [ 2227.500097][ T4099] binder: 4097:4099 ioctl c0306201 20000040 returned -14 03:35:17 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)={0x0, 0x0, 0x0}) 03:35:17 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x80089203, &(0x7f0000000180)) 03:35:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000074, &(0x7f0000000240)='-'}) 03:35:17 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:17 executing program 2: 03:35:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000007, &(0x7f0000000240)='-'}) [ 2228.163909][ T4213] binder: 4210:4213 ioctl c0306201 20000040 returned -14 03:35:17 executing program 2: [ 2228.204498][ T4216] binder: 4215:4216 ioctl c0306201 20000040 returned -14 [ 2228.222202][ T4216] binder: 4215:4216 ioctl c0306201 20000040 returned -14 03:35:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x10000000000007a, &(0x7f0000000240)='-'}) 03:35:17 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x80089203, &(0x7f0000000180)) 03:35:17 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x543]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000012, &(0x7f0000000240)='-'}) 03:35:17 executing program 2: [ 2228.353925][ T4229] binder: 4228:4229 ioctl c0306201 20000040 returned -14 [ 2228.383858][ T4234] binder: 4233:4234 ioctl c0306201 20000040 returned -14 [ 2228.391392][ T4229] binder: 4228:4229 ioctl c0306201 20000040 returned -14 [ 2228.418015][ T4234] binder: 4233:4234 ioctl c0306201 20000040 returned -14 03:35:18 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)={0x0, 0x0, 0x0}) 03:35:18 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:18 executing program 2: 03:35:18 executing program 0: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0x80089203, &(0x7f0000000180)) 03:35:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000300, &(0x7f0000000240)='-'}) 03:35:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000048, &(0x7f0000000240)='-'}) 03:35:18 executing program 2: 03:35:18 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x608]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:18 executing program 0: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0x80089203, &(0x7f0000000180)) [ 2229.096882][ T4348] binder: 4343:4348 ioctl c0306201 20000040 returned -14 [ 2229.118306][ T4353] binder: 4344:4353 ioctl c0306201 20000040 returned -14 [ 2229.137593][ T4348] binder: 4343:4348 ioctl c0306201 20000040 returned -14 03:35:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100004c, &(0x7f0000000240)='-'}) 03:35:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000500, &(0x7f0000000240)='-'}) 03:35:18 executing program 0: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0x80089203, &(0x7f0000000180)) [ 2229.290247][ T4365] binder: 4362:4365 ioctl c0306201 20000040 returned -14 [ 2229.306554][ T4367] binder: 4364:4367 ioctl c0306201 20000040 returned -14 [ 2229.311241][ T4365] binder: 4362:4365 ioctl c0306201 20000040 returned -14 03:35:19 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)={0x0, 0x0, 0x0}) 03:35:19 executing program 2: 03:35:19 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:19 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x80089203, 0x0) 03:35:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000060, &(0x7f0000000240)='-'}) 03:35:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000600, &(0x7f0000000240)='-'}) 03:35:19 executing program 2: [ 2229.966188][ T4477] binder_transaction: 28 callbacks suppressed [ 2229.966204][ T4477] binder: 4475:4477 transaction failed 29189/-22, size 0-0 line 2994 [ 2229.984781][ T4479] binder: 4476:4479 transaction failed 29189/-22, size 0-0 line 2994 [ 2230.003189][ T4477] binder: 4475:4477 ioctl c0306201 20000040 returned -14 03:35:19 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x806]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000068, &(0x7f0000000240)='-'}) 03:35:19 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x80089203, 0x0) [ 2230.024116][ T4479] binder: 4476:4479 ioctl c0306201 20000040 returned -14 03:35:19 executing program 2: 03:35:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000700, &(0x7f0000000240)='-'}) [ 2230.123801][ T4491] binder: 4490:4491 transaction failed 29189/-22, size 0-0 line 2994 [ 2230.193681][ T4491] binder: 4490:4491 ioctl c0306201 20000040 returned -14 [ 2230.211067][ T4497] binder: 4494:4497 transaction failed 29189/-22, size 0-0 line 2994 [ 2230.227777][ T4497] binder: 4494:4497 ioctl c0306201 20000040 returned -14 03:35:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100006c, &(0x7f0000000240)='-'}) 03:35:20 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:20 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)={0x0, 0x0, 0x0}) 03:35:20 executing program 2: 03:35:20 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x80089203, 0x0) 03:35:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000001200, &(0x7f0000000240)='-'}) 03:35:20 executing program 2: [ 2230.882345][ T4607] binder: 4602:4607 transaction failed 29189/-22, size 0-0 line 2994 [ 2230.907224][ T4611] binder: 4605:4611 transaction failed 29189/-22, size 0-0 line 2994 03:35:20 executing program 0: 03:35:20 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe80]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2230.940952][ T4607] binder: 4602:4607 ioctl c0306201 20000040 returned -14 [ 2230.958033][ T4611] binder: 4605:4611 ioctl c0306201 20000040 returned -14 03:35:20 executing program 2: 03:35:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000002000, &(0x7f0000000240)='-'}) 03:35:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000074, &(0x7f0000000240)='-'}) 03:35:20 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) getpeername(r0, 0x0, 0x0) 03:35:20 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2231.128580][ T4626] binder: 4625:4626 transaction failed 29189/-22, size 0-0 line 2994 [ 2231.137637][ T4624] binder: 4623:4624 transaction failed 29189/-22, size 0-0 line 2994 [ 2231.158272][ T4624] binder: 4623:4624 ioctl c0306201 20000040 returned -14 [ 2231.174587][ T4626] binder: 4625:4626 ioctl c0306201 20000040 returned -14 [ 2231.220022][ T4624] binder: 4623:4624 transaction failed 29189/-22, size 0-0 line 2994 [ 2231.247388][ T4624] binder: 4623:4624 ioctl c0306201 20000040 returned -14 03:35:20 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)={0x0, 0x0, 0x0}) 03:35:20 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/4, 0x4, 0x0) 03:35:20 executing program 0: setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000900)={0x0, @in6={{0xa, 0x0, 0x0, @mcast1}}}, 0x90) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$P9_RREAD(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000009c0)="4b98f92419d2b28bbaa5c797ab857a934c798a148004a97ea4b41e7460d56bc04c950a94657382084e34ad2435b2be0ec019623167c72757228b11ac8eba4bdcc2e749694f21500860adee5023d97f4db6ac6c546d969ff50cc1e41b64711bd13d7205862023e9556ae53085a7510708c945e4584e9a5cbceb56215eeb92024b9def265eaa313ebbc9100134c964afeb118a51ac8ee16a1d693f1519c0f78496a890a63a97fb09c2d0a610eb9f81287b4c420313033f753a4085b91095e97e9473e35a98c39c61ef2e918072d9993778c0bde48f14df4ae43fe0b6c28fb7b26bd548a397ad730a829904e6ce1fef5f02d7cda8527a89ac49bd8cdb53ffb918ad32f525b34e694cb2fe326673f69db0d238ac77fc15a7761021feeaa73cfba2aeb3d46e62ef6ef310b7b566e0731b531acf0510d96a5ca451716a010f913bf46e7c8c530fe8dd388b3da03d73755a38c1985ca9850cda9a6445daa203590e6413164a21eed82707b725d77e867971c974a1d728f7caa023686f8c16742324a5e1af17eb72dfd283b57c7ca607560c2cce5fe4c2ec27870ab458825215830ee68f27b0db52e41f953f4b579ff3bb4dc1e8ad4ed4b61e6419b058c80ef7ce4e3e727a09e334bf5a7f29bd0754d18ac8b39f2d17f9e5acd54d258ccc32804e752533a2de2e391a6c53525e9399babbded506d915cb6166449b0e8a6784f63e2fb52645f703a6b7e4acda64247f26d9cb259c5e04b3d63facefa716bd4996891056c9899856b84a1c195762b3f931020ae4eee41ee4c010fa244c8ade05f8cc5b7d39afa0aa32a5f90016d1b4f7eca111f59147f26452a62258f07aadee49a8f0f283599180c258bf6554090d724d88d3a1b08ca05ea2f282a6ac6b434cde5ce532150aac6c8e6a4da9729c1db14c27e23366fa114852390729a5418e2834c1a1e8efb5a84d110e778f6a6146d376ee035b9d3b940449e98415a10130730465d61ffe5bb2d5f5d908ba8395894eb649d65608b75e6232cf1c176a80de653f638d14518e5375a317ea9117368d00fce4fd6036bef48bbd1a858abc9274ac5ab140757e978050635c6f066bb59b53237766ab0168480b07e62d1fec5f1e34140f575f997fb99d7673a19c1e38972f2230c08817866d276b9895015837187689e8b475ba3787b591331a7cbd5070ad25e72b5e550757f225bb5243bea3ad07f6a6babf28866ca5b2bcf2d45623e020e5e758c22a30d08d9669cfcf8652f3b4ae492a825584fb034d10e6925d61d124c0fab000011a1a86d6ea0f9e1bdd9e2d42871b50aff34d20312f729367467f029e8ff963804c5e2e5aeca8dcd545034a2c84521671e75d82dd70f03c3a7980b6ed752e4bc1d683aa9f96fd702a10abfe71dbefb7061fa2d1420452d294e626e5bc4c905b743550409c2b229fe99988a2840acb8d88e79a4670ddafc4d514326767a8732822cc6c366fc8751f5f34c3932171b6d9250a4c7cca626556dcf4b4f0bfddc3f78db0789f494cc0c628ea6b177d9755f42bf6b5a642d8ebe75febd1d33267bebb4fd003e91cd6cf280724d467eb549c51a34c0bfea90a672ca8e323d3e0c2cc561d2d3a43e55fab9aea136c77aaf63e214bc38789d8b38226323a4c24b7b92e19667368bb134835321d3b67c9f01b77e9afa1c54c2cd0eb2670cfd48bce547cad97a257a0c75387620d1434c8ab8e827dbc12cd21871951fce5e3b851d2002602a31246ff745f169da77ec55e13d2a743566e421215ed40700d47c1f725540f55b11768f50b492ef813230f5aa75e3480111c83624e14ba8c002f6cff91876668c81cece32ff4f251c6058736cd3ec87283d4a2620f7782f9b5e9837adcf7c8be91846d7f4be679d0d6bb5af3544cf21486e1261cb634ddd7fcb6eb67fc7bf88cb21f8173c1c762a87ad4972b8472dc3d53cf2067458bdd3adda277f7df52ff9dbaec5712e4d729548cc61837e3382265d6d7cab1b686fbcad281438fa76a7f55a8b9ebf3216db4db5e4ab0d50d6b2ee851ee29faef2ec4f2828de88cb11c79ccf10794eb087e14aac91ed7cb318813a43304470a5cb928de86ed341ab00350adae8da0638a57e9d74fd997669afd827b879e1693105af274ff79a28559c3d2a95d70f419fc248b5b4dac74047f41a4be48ff389a257ddc953e9226ade9a0c1b5cc6f4bdd4ef6f090d204799883e39ed84f259ec95320312dca46bc74acfb898948077f42f80de8ac0960e7f555ccaecede3355af839eb90eb7fda1163fe4a8664ad621c347d8d3c67185586f72c70880744c66f150708c38bcac3bfed3f89afe0ac0058f2fbbaa3c6fa1369869952b24a8076822744a2d064840b7d715a630af164f7614fd774d23b43e99c026fd5faa4b5d5f2ecb0d5414c62f1de23ccc277db855d845d0bf57cc1756f4d4e04d6e1d19fd053ef570abbc8decf1b78dfddf31d16d482d69085312f2f265de10ee259c70351778170d7d1b119bfd4e1fc817e9eff05a2adc458c0faf664393a1d0ad824b23bd21e9e74afc2a22374358fcee3c60a09fffeeade0eaaa735bd13c6c1d7ec79990d2f69ff3d5738a554c98aae641eb952513296abdd9ab90a5d047543ee0f78b19942f387df6f4ca580d49642260e6472960f9b196cc31c75748757465b983ce3970d70265d4f6dd84e9f7d92fd19c603096e642c2523e44e3083c9b6a1ed3ac221507b1b45f25f21c13903254bca81686b409ee1a04c2a2330b2408bab6903d6b2d48db4f49d99fa6953c1e8912cacdd021f62eb5cfe85e5ba25419097b4dd9bc1dd1adfa356f8e4ed326e0eb28097110ea151fc43783a524d5f0af63b5099c1effb364d2269435810c499044cd555c2938e5cce8dc65c2710bba4eb169d819ea4a58a1380f9d98f3f4af1b9d9f89df0ec6a0fd92141a01ee68cc6ba02241a8aafcb9168b66d8df8d0cd58c19cc0b67fd1b29df7743af0bf1f04a1b256de00129366d1cdebc524e16fe9319fe9c50eca415b9bb94caa268ced84eed236b5f1ee24eddd647d55f577441e9372a3128ceab8867c79338d8707608cd95b17ff73b2a83b617708d99fbb98f04c625b32552ee1b22ef5ebdc00de771df3e0132f0fec60a53c2fcd10164b973f0cc6e058db200b3061ca1c0cf320f185d459ffd5f31be21918266727b245d2e9bef17143b5268ebd97cea69d7a527b869510494307294853443260d773a7d3a7b205f79047fb01c77018887652df6a809a93a902bb58af4463ae0af0b83a4aed8e2cc6abeb05ebb09b06d4f66916dd3421e38b79c8f1e03364bba1f000cb97b65ab9d728f89d514040d297d593dbd9efbfa28890123e01528a7fb89dead5a11b86105155e3b2b057cfa2b8e2395e2b7cf419c49bf0e0d8efd03b7beedd9ab26d43d2a840bff1ed0fcbec1f148bb28b0ad07b5f2cbb9a1a2285a9d06c32dbd0fb2b3d79d141c4e53ee74f01c1d3ecb00e443a61d3e3ee71e549fe55288191a30d6019ee77a195ec0bcea8f2d9859ad2ee85585f1d3c622d8b66bf0989e541c06f28d163c5e8fc7a56354d5a5b65e2d99ca050deac05e67709d8edc105cf3b8b7eabd0eadabb7279d734e48e9b0ab45a14235d6f0b670adf8f7c64b62270bc332c793bb055efcd68023fb09c90d6626f9c7e25d19437bce306803e5dddeb46593b32e464129ad793323fb833dc525e1aa2bc861a60fae898978d734bdb3db49072e3fc87de62a5cc5e11084604b50b8155f6acbdd2e488584a6b509c827168992d26ce02629ced4ad8c8f18d2c0db417892755f6b2db6fbd7e7872499d1d6c7fd3dc6d3c15ac9d5cb82a09d4d12b41d072bd821b89e3e53bc6fcc30436a343d5f1ae2dff709e354a0d9e86a88bb56f1691efa6dfe065c683c9703bfee850d9b96661287aebf7f4f89a049a4c808155ce99ca30c0e7788137dbdd4e16fa06fee3160f0b9333daf7a895ffb4b9c1d436598f6ebf0feab71c17a5f70204a4d691f356db03b64a2b723b31598871a953624217866901a361c1d6803896d84ed6a95c1e8def6996cac66a8ac536dbc82066ccee5b8c277b3bd32ae774908fb77425f5dca8b426526bfca008a015f99eba98353b069d0f333701fa2ffc1bf8fe4f0fe90f72cd4898e8c048f3414046f5a94eaccb00b247db547d10bf946af18df7a57a72330e8eef502ca00e410057ed68e75c2f86650d5e43adefd727d297cfa6cc5d66930ed7ff3ca44cfb69b5b54d84deb0ca0b62c9f06177152a490a75761677dc5a6487e78fd252d64fa58f508a9aebe489d1b045368612177e43e5067f6c5240f9c7340212ac5dc01f2adf0ffad6c70d374070df77124cdce29454ed4b638743b9994d36a1709327d65ee9eb9a3fa98078bf3a20e2ac58fda1e0531266eb13c16ae8ea2efa9fdc281bcd92f24e31b0460c7f6c9b7f8d31c04368863c9b03bbd578bf3656e2edb5aa6fdbf32b8a6bde4a193a17bf9d6d3b8c1c7d56486a5afdb4be66b6f2ef009f1429d098bcdf60be9c572554517045cbd6c9219f1e324bf289efaf74c4d2b2f7bf5067c84753dc024836f85d7f79d7e8c43d818ceb8591f96a302c0e4360041ffc00ef6de75ccb2812540340e1bc8784eea84c064826a62dfbe7981dc556ddbc4fee2bc636732a3df103b06b4ab2ff8fc14ec1ff1c6de71acfc0f71dd5e1c3d2ca418818b621b14cd4fe7be2bdf607e824cce22f05a33ebcb8ab554ff17dbc6c5a6b693cd0a2ba7a192350793dac68046c98124dd24c73f90fe1a12a1628d7a4f2f23c2ce393bcb9ad8babb9d1a77bd7b7f559e49cf94d24c645180290766725d7b008225810d15d3b4437bf111dff055ba171e098022c6f35252ce051eb0fa86cd5a4ff0f9bcc9d053b1", 0xd7c, 0x20040000, 0x0, 0x0) r0 = getpgrp(0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x7, &(0x7f0000000100)) setpriority(0x0, r0, 0x10000) r1 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x2) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x2) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 03:35:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100007a, &(0x7f0000000240)='-'}) 03:35:20 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000003f00, &(0x7f0000000240)='-'}) 03:35:21 executing program 0: mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x800000000040, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2231.828251][ T4741] binder: 4734:4741 transaction failed 29189/-22, size 0-0 line 2994 [ 2231.847330][ T4739] binder: 4735:4739 ioctl c0306201 20000040 returned -14 [ 2231.851491][ T4741] binder: 4734:4741 ioctl c0306201 20000040 returned -14 03:35:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000004800, &(0x7f0000000240)='-'}) 03:35:21 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2900]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000300, &(0x7f0000000240)='-'}) [ 2231.975786][ T4753] binder: 4750:4753 ioctl c0306201 20000040 returned -14 [ 2232.007442][ T4752] input: syz1 as /devices/virtual/input/input17 03:35:21 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b00]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2232.026529][ T4757] binder: 4755:4757 ioctl c0306201 20000040 returned -14 03:35:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000004c00, &(0x7f0000000240)='-'}) [ 2232.155028][ T4765] binder: 4763:4765 ioctl c0306201 20000040 returned -14 03:35:21 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)={0x0, 0x0, 0x0}) 03:35:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000500, &(0x7f0000000240)='-'}) 03:35:21 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c00]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@rand_addr="eac17c086d7b449189ce8d525ff57f69"}, 0x14) 03:35:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000006000, &(0x7f0000000240)='-'}) 03:35:21 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/4, 0x4, 0x0) 03:35:22 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000006800, &(0x7f0000000240)='-'}) [ 2232.782992][ T4984] binder: 4979:4984 ioctl c0306201 20000040 returned -14 [ 2232.809026][ T4983] binder: 4982:4983 ioctl c0306201 20000040 returned -14 03:35:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000600, &(0x7f0000000240)='-'}) 03:35:22 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000180)) 03:35:22 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3300]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000700, &(0x7f0000000240)='-'}) [ 2232.926457][ T4994] binder: 4993:4994 ioctl c0306201 20000040 returned -14 [ 2232.950959][ T4995] binder: 4992:4995 ioctl c0306201 20000040 returned -14 [ 2232.966047][ T4995] binder: 4992:4995 ioctl c0306201 20000040 returned -14 [ 2233.020593][ T5001] binder: 4999:5001 ioctl c0306201 20000040 returned -14 03:35:22 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)={0x0, 0x0, 0x0}) 03:35:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000006c00, &(0x7f0000000240)='-'}) 03:35:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1001200, &(0x7f0000000240)='-'}) 03:35:22 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3580]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:22 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/4, 0x4, 0x0) 03:35:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1002000, &(0x7f0000000240)='-'}) [ 2233.690516][ T5109] binder: 5108:5109 ioctl c0306201 20000040 returned -14 [ 2233.724613][ T5117] binder: 5112:5117 ioctl c0306201 20000040 returned -14 03:35:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000007400, &(0x7f0000000240)='-'}) 03:35:22 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a00]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2233.778409][ T5121] binder: 5120:5121 ioctl c0306201 20000040 returned -14 [ 2233.795249][ T5121] binder: 5120:5121 ioctl c0306201 20000040 returned -14 03:35:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1003f00, &(0x7f0000000240)='-'}) 03:35:23 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000180)) [ 2233.870437][ T5126] binder: 5123:5126 ioctl c0306201 20000040 returned -14 03:35:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000007a00, &(0x7f0000000240)='-'}) 03:35:23 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2233.925787][ T5131] binder: 5129:5131 ioctl c0306201 20000040 returned -14 [ 2233.998983][ T5136] binder: 5133:5136 ioctl c0306201 20000040 returned -14 03:35:23 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)={0x0, 0x0, 0x0}) 03:35:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1004800, &(0x7f0000000240)='-'}) 03:35:23 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000001000000, &(0x7f0000000240)='-'}) 03:35:23 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/4, 0x4, 0x0) 03:35:23 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1004c00, &(0x7f0000000240)='-'}) [ 2234.598573][ T5247] binder: 5240:5247 ioctl c0306201 20000040 returned -14 [ 2234.606082][ T5245] binder: 5241:5245 ioctl c0306201 20000040 returned -14 [ 2234.637348][ T5245] binder: 5241:5245 ioctl c0306201 20000040 returned -14 03:35:23 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4788]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000002000000, &(0x7f0000000240)='-'}) 03:35:23 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000180)) [ 2234.729765][ T5256] binder: 5254:5256 ioctl c0306201 20000040 returned -14 03:35:23 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4888]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1006000, &(0x7f0000000240)='-'}) [ 2234.784061][ T5260] binder: 5259:5260 ioctl c0306201 20000040 returned -14 [ 2234.893483][ T5268] binder: 5267:5268 ioctl c0306201 20000040 returned -14 03:35:24 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)={0x0, 0x0, 0x0}) 03:35:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000003000000, &(0x7f0000000240)='-'}) 03:35:24 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6488]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1006800, &(0x7f0000000240)='-'}) 03:35:24 executing program 2: pread64(0xffffffffffffffff, &(0x7f0000000080)=""/4, 0x4, 0x0) [ 2235.473749][ T5374] binder_transaction: 23 callbacks suppressed [ 2235.473765][ T5374] binder: 5372:5374 transaction failed 29189/-22, size 0-0 line 2994 [ 2235.502427][ T5377] binder: 5375:5377 transaction failed 29189/-22, size 0-0 line 2994 03:35:24 executing program 2: pread64(0xffffffffffffffff, &(0x7f0000000080)=""/4, 0x4, 0x0) 03:35:24 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800e]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000004000000, &(0x7f0000000240)='-'}) [ 2235.527473][ T5374] binder: 5372:5374 ioctl c0306201 20000040 returned -14 [ 2235.558139][ T5377] binder: 5375:5377 ioctl c0306201 20000040 returned -14 03:35:24 executing program 2: pread64(0xffffffffffffffff, &(0x7f0000000080)=""/4, 0x4, 0x0) 03:35:24 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000180)) 03:35:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1006c00, &(0x7f0000000240)='-'}) 03:35:24 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/4, 0x4, 0x0) [ 2235.711441][ T5394] binder: 5389:5394 transaction failed 29189/-22, size 0-0 line 2994 [ 2235.760314][ T5394] binder: 5389:5394 ioctl c0306201 20000040 returned -14 [ 2235.762718][ T5398] binder: 5395:5398 transaction failed 29189/-22, size 0-0 line 2994 [ 2235.793123][ T5398] binder: 5395:5398 ioctl c0306201 20000040 returned -14 03:35:25 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)={0x0, 0x0, 0x0}) 03:35:25 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8035]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:25 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/4, 0x4, 0x0) 03:35:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000005000000, &(0x7f0000000240)='-'}) 03:35:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1007400, &(0x7f0000000240)='-'}) [ 2236.384114][ T5508] binder: 5506:5508 transaction failed 29189/-22, size 0-0 line 2994 [ 2236.401550][ T5510] binder: 5504:5510 transaction failed 29189/-22, size 0-0 line 2994 [ 2236.418187][ T5508] binder: 5506:5508 ioctl c0306201 20000040 returned -14 [ 2236.428888][ T5510] binder: 5504:5510 ioctl c0306201 20000040 returned -14 03:35:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1007a00, &(0x7f0000000240)='-'}) 03:35:25 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/4, 0x4, 0x0) 03:35:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000006000000, &(0x7f0000000240)='-'}) 03:35:25 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80fe]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2236.556788][ T5525] binder: 5519:5525 transaction failed 29189/-22, size 0-0 line 2994 [ 2236.565472][ T5521] binder: 5520:5521 transaction failed 29189/-22, size 0-0 line 2994 [ 2236.577351][ T5525] binder: 5519:5525 ioctl c0306201 20000040 returned -14 03:35:25 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000180)) 03:35:25 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/4, 0x4, 0x0) 03:35:25 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2236.624339][ T5521] binder: 5520:5521 ioctl c0306201 20000040 returned -14 [ 2236.671884][ T5521] binder: 5520:5521 transaction failed 29189/-22, size 0-0 line 2994 [ 2236.692879][ T5521] binder: 5520:5521 ioctl c0306201 20000040 returned -14 03:35:26 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)={0x0, 0x0, 0x0}) 03:35:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000007000000, &(0x7f0000000240)='-'}) 03:35:26 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/4, 0x4, 0x0) 03:35:26 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8847]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x2000000, &(0x7f0000000240)='-'}) 03:35:26 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8848]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:26 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/4, 0x4, 0x0) [ 2237.326803][ T5644] binder: 5641:5644 transaction failed 29189/-22, size 0-0 line 2994 [ 2237.336720][ T5646] binder: 5642:5646 ioctl c0306201 20000040 returned -14 [ 2237.345448][ T5644] binder: 5641:5644 ioctl c0306201 20000040 returned -14 03:35:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x4000000, &(0x7f0000000240)='-'}) 03:35:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000012000000, &(0x7f0000000240)='-'}) [ 2237.467753][ T5654] binder: 5652:5654 ioctl c0306201 20000040 returned -14 [ 2237.496576][ T5657] binder: 5655:5657 ioctl c0306201 20000040 returned -14 03:35:26 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8864]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:26 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000180)) 03:35:26 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) [ 2237.513070][ T5657] binder: 5655:5657 ioctl c0306201 20000040 returned -14 03:35:27 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)={0x0, 0x0, 0x0}) 03:35:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x9000000, &(0x7f0000000240)='-'}) 03:35:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000020000000, &(0x7f0000000240)='-'}) 03:35:27 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8906]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:27 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) 03:35:27 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f00]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x10000003f000000, &(0x7f0000000240)='-'}) [ 2238.185680][ T5773] binder: 5770:5773 ioctl c0306201 20000040 returned -14 [ 2238.194049][ T5774] binder: 5768:5774 ioctl c0306201 20000040 returned -14 03:35:27 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) 03:35:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x25000000, &(0x7f0000000240)='-'}) 03:35:27 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0fe]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2238.333995][ T5786] binder: 5783:5786 ioctl c0306201 20000040 returned -14 [ 2238.379064][ T5789] binder: 5788:5789 ioctl c0306201 20000040 returned -14 03:35:27 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000180)) 03:35:27 executing program 2: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:28 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)={0x0, 0x0, 0x0}) 03:35:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000048000000, &(0x7f0000000240)='-'}) 03:35:28 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x50000000, &(0x7f0000000240)='-'}) 03:35:28 executing program 2 (fault-call:1 fault-nth:0): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/4, 0x4, 0x0) 03:35:28 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc00]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2239.066976][ T5905] binder: 5900:5905 ioctl c0306201 20000040 returned -14 [ 2239.076518][ T5904] binder: 5902:5904 ioctl c0306201 20000040 returned -14 03:35:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x10000004c000000, &(0x7f0000000240)='-'}) 03:35:28 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x63000000, &(0x7f0000000240)='-'}) 03:35:28 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfec0]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2239.207491][ T5917] binder: 5914:5917 ioctl c0306201 20000040 returned -14 [ 2239.233222][ T5917] binder: 5914:5917 ioctl c0306201 20000040 returned -14 [ 2239.241356][ T5920] binder: 5919:5920 ioctl c0306201 20000040 returned -14 [ 2239.266151][ T5920] binder: 5919:5920 ioctl c0306201 20000040 returned -14 03:35:28 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000180)) 03:35:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000060000000, &(0x7f0000000240)='-'}) [ 2239.372224][ T5926] binder: 5925:5926 ioctl c0306201 20000040 returned -14 [ 2239.385291][ T5926] binder: 5925:5926 ioctl c0306201 20000040 returned -14 [ 2239.887452][ T5909] FAULT_INJECTION: forcing a failure. [ 2239.887452][ T5909] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2239.907143][ T5909] CPU: 1 PID: 5909 Comm: syz-executor.2 Not tainted 5.0.0-rc8-next-20190228 #45 [ 2239.916165][ T5909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2239.926223][ T5909] Call Trace: [ 2239.929562][ T5909] dump_stack+0x172/0x1f0 03:35:29 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)={0x0, 0x0, 0x0}) 03:35:29 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x96030000, &(0x7f0000000240)='-'}) 03:35:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000068000000, &(0x7f0000000240)='-'}) [ 2239.933913][ T5909] should_fail.cold+0xa/0x15 [ 2239.938515][ T5909] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2239.944332][ T5909] ? debug_smp_processor_id+0x3c/0x280 [ 2239.949807][ T5909] ? perf_trace_lock_acquire+0xf5/0x580 [ 2239.949831][ T5909] get_futex_key+0xba3/0x1660 [ 2239.949848][ T5909] ? __lock_acquire+0x55d/0x4710 [ 2239.949879][ T5909] ? unqueue_me_pi+0xc0/0xc0 [ 2239.949910][ T5909] futex_wake+0xf9/0x4d0 [ 2239.949931][ T5909] ? get_futex_key+0x1660/0x1660 [ 2239.978796][ T5909] ? __lock_acquire+0x55d/0x4710 [ 2239.983748][ T5909] do_futex+0x34c/0x1d50 [ 2239.988005][ T5909] ? mark_held_locks+0xf0/0xf0 [ 2239.992778][ T5909] ? debug_smp_processor_id+0x3c/0x280 [ 2239.998253][ T5909] ? exit_robust_list+0x290/0x290 [ 2240.003291][ T5909] ? __might_fault+0x12b/0x1e0 [ 2240.008056][ T5909] ? find_held_lock+0x35/0x130 [ 2240.012825][ T5909] ? __might_fault+0x12b/0x1e0 [ 2240.017596][ T5909] ? lock_downgrade+0x880/0x880 [ 2240.022467][ T5909] mm_release+0x33d/0x490 [ 2240.026809][ T5909] do_exit+0x417/0x2fa0 [ 2240.030972][ T5909] ? find_held_lock+0x35/0x130 [ 2240.035757][ T5909] ? get_signal+0x331/0x1d50 [ 2240.040378][ T5909] ? mm_update_next_owner+0x640/0x640 [ 2240.040520][ T6037] binder: 6036:6037 ioctl c0306201 20000040 returned -14 [ 2240.045772][ T5909] ? kasan_check_write+0x14/0x20 [ 2240.045792][ T5909] ? _raw_spin_unlock_irq+0x28/0x90 [ 2240.045805][ T5909] ? get_signal+0x331/0x1d50 [ 2240.045818][ T5909] ? _raw_spin_unlock_irq+0x28/0x90 [ 2240.045838][ T5909] do_group_exit+0x135/0x370 [ 2240.045856][ T5909] get_signal+0x399/0x1d50 [ 2240.045991][ T5909] ? rtc_dev_release+0x70/0x70 [ 2240.046020][ T5909] do_signal+0x87/0x1940 [ 2240.086663][ T5909] ? kick_process+0xef/0x180 [ 2240.086681][ T5909] ? task_work_add+0x9c/0x110 [ 2240.086724][ T5909] ? setup_sigcontext+0x7d0/0x7d0 [ 2240.086770][ T5909] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2240.095555][ T5909] ? fput_many+0x12c/0x1a0 [ 2240.095578][ T5909] ? ksys_pread64+0x121/0x1c0 [ 2240.095595][ T5909] ? exit_to_usermode_loop+0x43/0x2c0 [ 2240.095610][ T5909] ? do_syscall_64+0x52d/0x610 [ 2240.095624][ T5909] ? exit_to_usermode_loop+0x43/0x2c0 [ 2240.095640][ T5909] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2240.095665][ T5909] ? trace_hardirqs_on+0x67/0x230 [ 2240.095686][ T5909] exit_to_usermode_loop+0x244/0x2c0 [ 2240.095705][ T5909] do_syscall_64+0x52d/0x610 [ 2240.133086][ T6039] binder: 6038:6039 ioctl c0306201 20000040 returned -14 [ 2240.136187][ T5909] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2240.136200][ T5909] RIP: 0033:0x457e29 03:35:29 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/4, 0x4, 0x0) 03:35:29 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0xac030000, &(0x7f0000000240)='-'}) [ 2240.136214][ T5909] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2240.136223][ T5909] RSP: 002b:00007f623f479c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 2240.136237][ T5909] RAX: fffffffffffffe00 RBX: 00007f623f479c90 RCX: 0000000000457e29 [ 2240.136246][ T5909] RDX: 0000000000000004 RSI: 0000000020000080 RDI: 0000000000000003 [ 2240.136254][ T5909] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2240.136262][ T5909] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f623f47a6d4 03:35:29 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:29 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000180)) [ 2240.136271][ T5909] R13: 00000000004c492b R14: 00000000004d81f8 R15: 0000000000000004 [ 2240.209392][ T6043] binder: 6041:6043 ioctl c0306201 20000040 returned -14 03:35:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x10000006c000000, &(0x7f0000000240)='-'}) 03:35:29 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0xc1030000, &(0x7f0000000240)='-'}) [ 2240.362714][ T6054] binder: 6053:6054 ioctl c0306201 20000040 returned -14 [ 2240.443594][ T6059] binder: 6058:6059 ioctl c0306201 20000040 returned -14 03:35:29 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)={0x0, 0x0, 0x0}) 03:35:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000074000000, &(0x7f0000000240)='-'}) 03:35:29 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0xf2ffff7f, &(0x7f0000000240)='-'}) [ 2240.852205][ T6166] binder_transaction: 21 callbacks suppressed [ 2240.852220][ T6166] binder: 6164:6166 transaction failed 29189/-22, size 0-0 line 2994 [ 2240.873297][ T6167] binder: 6163:6167 transaction failed 29189/-22, size 0-0 line 2994 [ 2240.892378][ T6167] binder: 6163:6167 ioctl c0306201 20000040 returned -14 [ 2240.901139][ T6166] binder: 6164:6166 ioctl c0306201 20000040 returned -14 03:35:30 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/4, 0x20000084, 0x0) 03:35:30 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x10000007a000000, &(0x7f0000000240)='-'}) 03:35:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0xf8ffff7f, &(0x7f0000000240)='-'}) [ 2241.096278][ T6178] binder: 6174:6178 transaction failed 29189/-22, size 0-0 line 2994 [ 2241.107441][ T6180] binder: 6177:6180 transaction failed 29189/-22, size 0-0 line 2994 [ 2241.121727][ T6180] binder: 6177:6180 ioctl c0306201 20000040 returned -14 [ 2241.134617][ T6178] binder: 6174:6178 ioctl c0306201 20000040 returned -14 03:35:30 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc0109207, &(0x7f0000000180)) 03:35:30 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0xf9ffff7f, &(0x7f0000000240)='-'}) [ 2241.148177][ T6178] binder: 6174:6178 transaction failed 29189/-22, size 0-0 line 2994 [ 2241.157176][ T6178] binder: 6174:6178 ioctl c0306201 20000040 returned -14 03:35:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x200000000000000, &(0x7f0000000240)='-'}) [ 2241.260762][ T6188] binder: 6187:6188 transaction failed 29189/-22, size 0-0 line 2994 [ 2241.279887][ T6188] binder: 6187:6188 ioctl c0306201 20000040 returned -14 [ 2241.320679][ T6191] binder: 6190:6191 transaction failed 29189/-22, size 0-0 line 2994 [ 2241.329844][ T6191] binder: 6190:6191 ioctl c0306201 20000040 returned -14 03:35:30 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)={0x0, 0x0, 0x0}) 03:35:30 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:30 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc0109207, &(0x7f0000000180)) 03:35:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0xffffff7f, &(0x7f0000000240)='-'}) [ 2241.768454][ T6303] binder: 6297:6303 transaction failed 29189/-22, size 0-0 line 2994 [ 2241.797261][ T6303] binder: 6297:6303 ioctl c0306201 20000040 returned -14 03:35:31 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffff7f0000000000100000000000000300000000000000feadff536419b3305339958288f7837798d2506275b3852847f26b92c76dd8865fcb84617b2ff6509ec31ac294464f01747dc3f840c96fe1c474e82d2374cc3c912091a90c348fd5533973e6cc036d976eb0", @ANYRES32=r0, @ANYBLOB="00000000040000000000000000000000000000000000000000000000", @ANYRES32=r0, @ANYBLOB="00000000010004800000000000000000000000000000000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000000)=0x3, 0x4) pread64(r0, &(0x7f0000000080)=""/4, 0x4, 0x0) 03:35:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x900000000000000, &(0x7f0000000240)='-'}) 03:35:31 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:31 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc0109207, &(0x7f0000000180)) 03:35:31 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='\n'}) 03:35:31 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='P'}) 03:35:31 executing program 0: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000180)) [ 2241.983680][ T6415] binder: 6410:6415 transaction failed 29189/-22, size 0-0 line 2994 [ 2242.002891][ T6414] binder: 6408:6414 transaction failed 29189/-22, size 0-0 line 2994 [ 2242.006649][ T6415] binder: 6410:6415 ioctl c0306201 20000040 returned -14 03:35:31 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8060000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2242.062666][ T6414] binder: 6408:6414 ioctl c0306201 20000040 returned -14 [ 2242.092209][ T6424] binder: 6420:6424 ioctl c0306201 20000040 returned -14 [ 2242.102652][ T6424] binder: 6420:6424 ioctl c0306201 20000040 returned -14 03:35:31 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)={0x0, 0x0, 0x0}) 03:35:31 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x3ff, 0x80080) ioctl$BLKRRPART(r0, 0x125f, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:35:31 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x2500000000000000, &(0x7f0000000240)='-'}) [ 2242.659624][ T6533] binder: 6531:6533 ioctl c0306201 20000040 returned -14 [ 2242.669682][ T6533] binder: 6531:6533 ioctl c0306201 20000040 returned -14 [ 2242.678493][ T6537] binder: 6530:6537 ioctl c0306201 20000040 returned -14 [ 2242.699283][ T6537] binder: 6530:6537 ioctl c0306201 20000040 returned -14 03:35:32 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/4, 0x9a, 0x0) lseek(r0, 0x0, 0x4) 03:35:32 executing program 0: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000180)) 03:35:32 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x84000) ioctl$SIOCRSGCAUSE(r2, 0x89e0, &(0x7f00000000c0)) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002000410000c6140000000000080000000c00010008000000", @ANYRES32=0x0], 0x20}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:35:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x5000000000000000, &(0x7f0000000240)='-'}) 03:35:32 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2242.880276][ T6644] binder: 6642:6644 ioctl c0306201 20000040 returned -14 [ 2242.899140][ T6646] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2242.920421][ T6644] binder: 6642:6644 ioctl c0306201 20000040 returned -14 03:35:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x6300000000000000, &(0x7f0000000240)='-'}) 03:35:32 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:32 executing program 0: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000180)) [ 2242.938270][ T6646] binder: 6640:6646 ioctl c0306201 20000040 returned -14 [ 2242.984969][ T6675] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2243.016761][ T6729] binder: 6708:6729 ioctl c0306201 20000040 returned -14 [ 2243.037848][ T6646] binder: 6640:6646 ioctl c0306201 20000040 returned -14 03:35:32 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)={0x0, 0x0, 0x0}) 03:35:32 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/4, 0x4, 0x0) getsockopt$inet6_dccp_buf(r0, 0x21, 0x8e, &(0x7f00000000c0)=""/17, &(0x7f0000000100)=0x11) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x8001003, 0xffff, 0x1}) 03:35:32 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:32 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000180)) 03:35:32 executing program 4: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00'], 0x1, 0x1000000, &(0x7f0000000240)='-'}) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x6, 0x7}, &(0x7f0000000000)=0x90) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000500)={r3, 0x4}, &(0x7f0000000540)=0x8) write$FUSE_ENTRY(r0, &(0x7f0000000380)={0x90, 0xfffffffffffffff5, 0x3, {0x5, 0x1, 0x3, 0x2, 0x5, 0xfffffffffffffffa, {0x4, 0x200, 0xfffffffffffffff9, 0x100, 0x401, 0xffffffffffff8001, 0x6, 0x6, 0xffff, 0x0, 0xffe00, r1, r2, 0x1ff, 0x6}}}, 0x90) 03:35:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x9603000000000000, &(0x7f0000000240)='-'}) [ 2243.518959][ T6866] binder: 6865:6866 ioctl c0306201 20000040 returned -14 03:35:32 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:32 executing program 4: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000200)) r1 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x2) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f00000002c0)=""/77) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="00636a4000000000000000000000060000000200000000000200000000000000000000000000000000000000000000000000800000000000000000000000000000000000f1f0aa368cfae36e5aefe1f859341b47d7be74e05fd296a63045517ddc8a24ef8a2f2bbbf517d3cb996c56f6533f4aa31ffc29953a98588e914808c600464d46453378b003dadff74f34bb89a558659fe0e8b9fdf2234206082bb71b2ec665042998048fc91bb1d8df179d585e6c29e9d267de671d4c7595bdce670d21a82e775db7bec29ea7aaae3192d0ebbf94a4fda5ee7d19290a4b694dfd8b264c25e923e8c80ed16ea0636557d1d9f1a259ba6c17b4f3f8df0d855b90adecc7faf26e62af368934e7f285b81be4dfcd88988445b3a8ab41d855572e31dadc537c5eb7e770bd74b8c3bb49ed97a8ba9f6f079710da372ea850f2dfca42d6e62282c003e550d87c3b34528646774f5ca6157d9b0d9967b742bb2f5635a57836e4d1be50888620102a79fe4e79fea43afc08bcd2c3875892fda3c1287e47287f9990d150cc132e5a874609445913b900859f0b1c8f78519f5494ae3fff0bfd301bf3d374064e5cd6c6ff9e6349555b96b48ca44eb313f7f15bcafb47c61f2150fb0ddc4754f53800a35170350c2731fd9d9cc3ae73fb99ceddace2eccfc6a2d3725cabbc51cdac6b85f733c98831190ab6011001ca60417ab91e8901cfd0c990dd92f20516cfef8710e3c037eeeed46f70097a128187cc52734dcdbf73ad5f854bfe9fff193f91f066415c59988ec0fa9be85d39bb4d1aa575d7426288e349368fde7e5187bc3786bdc0b0781e13173e8165cd57150f930034852d1bf36b0590a114220dbe53f2edcca2a02585ee9b346cfb3bd01d6acca3454a32722b29d074d213716cde84fe904e21f976210145ac9399f2e2c9"], 0x1, 0x1000000, &(0x7f0000000240)='-'}) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) sysfs$1(0x1, &(0x7f0000000000)='/dev/btrfs-control\x00') r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$SIOCX25GSUBSCRIP(r2, 0x89e0, &(0x7f0000000340)={'veth1_to_bond\x00', 0x4, 0x1}) 03:35:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0xac03000000000000, &(0x7f0000000240)='-'}) [ 2243.636218][ T6947] binder: 6944:6947 unknown command 1080713984 [ 2243.644724][ T6947] binder: 6944:6947 ioctl c0306201 20000040 returned -22 [ 2243.660435][ T6980] binder: 6944:6980 unknown command 1080713984 [ 2243.673521][ T6980] binder: 6944:6980 ioctl c0306201 20000040 returned -22 03:35:32 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/4, 0x4, 0x0) 03:35:32 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2243.696457][ T6987] binder: 6986:6987 ioctl c0306201 20000040 returned -14 03:35:32 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x8000, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200000, 0x0) ioctl$int_in(r1, 0x5473, &(0x7f00000003c0)=0xddf) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') ioctl$TIOCNXCL(r2, 0x540d) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r3, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x3ff, 0x4, 0x9f, 0xff, 0x1ff]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000890}, 0x801) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000140)) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0x2be, 0x3, 0x7ff, 0x2, 0x81}) syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x5, 0x20400) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) [ 2243.750528][ T6987] binder: 6986:6987 ioctl c0306201 20000040 returned -14 [ 2243.781547][ T6995] binder: 6994:6995 ioctl c0306201 20000040 returned -14 [ 2243.824421][ T6995] binder: 6994:6995 ioctl 801c581f 20000080 returned -22 [ 2243.832518][ T6995] binder: 6994:6995 ioctl 6609 0 returned -22 [ 2243.848037][ T6995] binder: 6994:6995 ioctl c0306201 20000040 returned -14 [ 2243.856876][ T6997] binder: 6994:6997 ioctl 801c581f 20000080 returned -22 [ 2243.868076][ T6997] binder: 6994:6997 ioctl 6609 0 returned -22 03:35:33 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)={0x0, 0x0, 0x0}) 03:35:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0xc103000000000000, &(0x7f0000000240)='-'}) 03:35:33 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:33 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="006340400015510800000000040000000000000000000000000000000000000000000000000000000000c227f9024c6c4e985afd10880000000000000000000000000000000000000000002000000000"], 0x1, 0x1000000, &(0x7f0000000240)='-'}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video2\x00', 0x2, 0x0) 03:35:33 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000180)) 03:35:33 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2244.423564][ T7103] binder: 7102:7103 got transaction to invalid handle [ 2244.438863][ T7109] binder: 7107:7109 ioctl c0306201 20000040 returned -14 [ 2244.448989][ T7103] binder: 7102:7103 ioctl c0306201 20000040 returned -14 [ 2244.463900][ T7103] binder: 7102:7103 got transaction to invalid handle [ 2244.471979][ T7103] binder: 7102:7103 ioctl c0306201 20000040 returned -14 03:35:33 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x400480, 0x0) connect$nfc_llcp(r1, &(0x7f00000000c0)={0x27, 0x1, 0x2, 0x7, 0x4, 0x9, "f4a9dd572b0e40e9e9113b427e38a1b3e9144e0640944b3ebc8b57c3e4e2288b52c8cb7ffe6ff876700732689578a9f563e5fcff797deb97244ec3684e0520", 0x10}, 0x60) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:35:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0xf2ffff7f00000000, &(0x7f0000000240)='-'}) 03:35:33 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2244.576452][ T7147] binder: 7121:7147 ioctl c0306201 20000040 returned -14 [ 2244.590380][ T7157] binder: 7156:7157 ioctl c0306201 20000040 returned -14 03:35:33 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2, 0x0) pread64(r0, &(0x7f0000000080)=""/4, 0x4, 0x0) 03:35:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0xf8ffff7f00000000, &(0x7f0000000240)='-'}) 03:35:33 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2244.702290][ T7227] binder: 7225:7227 ioctl c0306201 20000040 returned -14 03:35:34 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)={0x0, 0x0, 0x0}) 03:35:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x81, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f00000000c0)={{0xf1, 0x6}}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:35:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0xf9ffff7f00000000, &(0x7f0000000240)='-'}) 03:35:34 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:34 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000180)) [ 2245.301151][ T7334] binder: 7333:7334 ioctl c0306201 20000040 returned -14 [ 2245.317551][ T7341] binder: 7335:7341 ioctl c0306201 20000040 returned -14 03:35:34 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43050000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:35:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0xffffff7f00000000, &(0x7f0000000240)='-'}) 03:35:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x311, 0x0, &(0x7f00000001c0), 0x367, 0x1000000, &(0x7f0000000240)='-'}) [ 2245.446676][ T7350] binder: 7348:7350 ioctl c0306201 20000040 returned -14 [ 2245.452923][ T7352] binder: 7351:7352 ioctl c0306201 20000040 returned -14 [ 2245.462761][ T7352] binder: 7351:7352 ioctl c0306201 20000040 returned -14 [ 2245.536361][ T7355] binder: 7354:7355 unknown command 0 [ 2245.546062][ T7355] binder: 7354:7355 ioctl c0306201 20000040 returned -22 03:35:34 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) pread64(r0, &(0x7f0000000080)=""/4, 0x4, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x400000000003, 0x0) 03:35:34 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800e0000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='\n'}) [ 2245.643657][ T7462] binder: 7461:7462 ioctl c0306201 20000040 returned -14 [ 2245.663560][ T7462] binder: 7461:7462 ioctl c0306201 20000040 returned -14 03:35:35 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x1000000400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:35:35 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x3, 0x2) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:35:35 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80350000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='P'}) 03:35:35 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/4, 0x4, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), &(0x7f00000000c0)=0x4) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000140)={0xffffffffffffffff, 0x1ffffff, "51110b174c0de93ca1c23132c5162ba30bf14dc183f00e3b", {0x100000001, 0x4}, 0x2}) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000100)='syz1\x00') 03:35:35 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000180)) 03:35:35 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2246.233181][ T7720] binder_transaction: 29 callbacks suppressed [ 2246.233208][ T7720] binder: 7718:7720 transaction failed 29189/-22, size 0-0 line 2994 [ 2246.233242][ T7716] binder: 7715:7716 transaction failed 29189/-22, size 0-0 line 2994 [ 2246.260786][ T7720] binder: 7718:7720 ioctl c0306201 20000040 returned -14 [ 2246.279754][ T7716] binder: 7715:7716 ioctl c0306201 20000040 returned -14 03:35:35 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0063404000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:35:35 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86ddffff]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x4000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802) 03:35:35 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x4, 0x0) pread64(r0, &(0x7f0000000080)=""/4, 0x4, 0x0) [ 2246.409399][ T7814] binder: 7796:7814 transaction failed 29189/-22, size 0-0 line 2994 [ 2246.428929][ T7814] binder: 7796:7814 ioctl c0306201 20000040 returned -14 [ 2246.444920][ T7814] binder: 7796:7814 transaction failed 29189/-22, size 0-0 line 2994 03:35:35 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88470000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2246.479253][ T7814] binder: 7796:7814 ioctl c0306201 20000040 returned -14 03:35:36 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f00000000c0), &(0x7f0000000100)=0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xab) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@empty, @local, @multicast1}, 0xc) 03:35:36 executing program 4: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x18, 0x0, &(0x7f0000000080)=[@dead_binder_done={0x40086310, 0x3}, @enter_looper, @release={0x40046306, 0x1}], 0x66, 0x0, &(0x7f00000000c0)="6990bd44fcab85c86c1144800756335f5dbae3656d0c729373bfdc0ba007d7e366a35034f8dd6dda462d81b4cd3a82c06130fea0f55bce403962fb33f94b78a105e64eb2ea752b7d18943d9ac5709b04d51dc7663237535283ffcf23165514119a898172aeac"}) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000)=0xbb4, 0x4) 03:35:36 executing program 5: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000100)=0x9, 0x4) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000140), &(0x7f0000000280)=0x60) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f00000007c0)={0x1, 0x0, [], {0x0, @reserved}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r2 = dup2(r1, r1) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000500)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000005c0)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0xb4, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x4, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x50, 0x30, &(0x7f0000000440)=[@ptr={0x70742a85, 0x1, &(0x7f00000003c0), 0x1, 0x1, 0x15}, @ptr={0x70742a85, 0x1, &(0x7f0000000400), 0x1, 0x1, 0x3d}], &(0x7f00000004c0)=[0x20, 0x38, 0x40, 0x0, 0x38, 0x20]}, 0x1b}}, @transaction={0x40406300, {0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x30, 0x10, &(0x7f0000000540)=[@flat={0x776a2a85, 0xa, r3, 0x2}, @fd={0x66642a85, 0x0, r2, 0x0, 0x3}], &(0x7f0000000580)=[0x20, 0x28]}}, @enter_looper, @acquire_done={0x40106309, r4}, @enter_looper, @register_looper, @register_looper], 0x97, 0x0, &(0x7f00000006c0)="ea02150183d2bee57d6fefd31a933e1f6a6222f5932ca85bf4f33b1e602f1bbbf69b5e705fd4c275ff603a541e455508831eae836df43989742f9917cee3242a34717c0cc3ce986fb75f7d84496aed547433320375218e0c8d3437ca05a544e8615f811db0937aa1dff51ccf29a91028a0dfebf690a4c234752b11107b1af73ae1ea477f2032b3879512de9e0fd9cc5d373d19a56bd5a6"}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000380)={0x5, &(0x7f0000000340)=[{}, {}, {}, {}, {}]}) 03:35:36 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88480000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:36 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000180)) 03:35:36 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88640000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2247.131010][ T8067] binder: 8066:8067 transaction failed 29189/-22, size 0-0 line 2994 [ 2247.139886][ T8071] binder: 8069:8071 transaction failed 29189/-22, size 0-0 line 2994 [ 2247.158996][ T8071] binder: 8069:8071 ioctl c0306201 20000040 returned -14 [ 2247.171302][ T8067] binder: 8066:8067 ioctl c0306201 20000040 returned -14 [ 2247.197345][ T8067] binder: 8066:8067 transaction failed 29189/-22, size 0-0 line 2994 [ 2247.208790][ T8067] binder: 8066:8067 ioctl c0306201 20000040 returned -14 03:35:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x2, 0x40000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x9c, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x64, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x27}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xcd3}]}, 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x40005) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000340), &(0x7f0000000380)=0x8) 03:35:36 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2247.299786][ T8273] binder: 8267:8273 transaction failed 29189/-22, size 0-0 line 2994 03:35:36 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000040)) 03:35:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a906ea90000000000ae0f19907e163d"], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x400840, 0x0) r2 = accept(r1, &(0x7f0000000540)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000600)=""/8, &(0x7f0000000640)=0x8) [ 2247.341788][ T8273] binder: 8267:8273 ioctl c0306201 20000040 returned -14 03:35:36 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/4, 0x4, 0xfffffffffffffffe) [ 2247.387555][ T8273] binder: 8267:8273 transaction failed 29189/-22, size 0-0 line 2994 [ 2247.422704][ T8273] binder: 8267:8273 ioctl c0306201 20000040 returned -14 03:35:36 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88caffff]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2247.438202][ T8391] binder: 8390:8391 got transaction to invalid handle [ 2247.469913][ T8391] binder: 8390:8391 transaction failed 29201/-22, size 0-0 line 2994 03:35:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') socketpair(0x4, 0x806, 0x570572f5, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000100)={'broute\x00'}, &(0x7f0000000180)=0x78) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2247.498519][ T8391] binder: 8390:8391 ioctl c0306201 20000040 returned -14 03:35:36 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) migrate_pages(r1, 0x3, &(0x7f00000001c0)=0x1, &(0x7f0000000200)=0x1) pread64(r0, &(0x7f00000000c0)=""/250, 0xfa, 0x0) pread64(r0, &(0x7f0000000080)=""/4, 0x4, 0x0) 03:35:36 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x0, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e24, @multicast1}, 0xa0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)='bcsf0\x00', 0x8, 0x4f56}) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000200)=0x14) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:35:36 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89060000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2247.601569][ T8586] binder: 8481:8586 ioctl c0306201 20000040 returned -14 [ 2247.686896][ T8586] binder: 8481:8586 ioctl c0306201 20000040 returned -14 03:35:37 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000180)) 03:35:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) r1 = msgget$private(0x0, 0x20) msgrcv(r1, &(0x7f0000000080)={0x0, ""/252}, 0x104, 0x1, 0x3800) 03:35:37 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89ffffff]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:37 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x100, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000140)={0x3, 0xbc, &(0x7f0000000280)="d592909a9fbf64f96dc12d7b060bec0fa2061d2546769cb05b6438926e384834da9c5199eb2c2ae446542fb97faff814f70f97f9a7525f77783bb6a16621893854ab530d540307b3fc44e196395d75c17b5a27eae11a618a1a49bcb54198a0d3ac207b43ecdbf381482a4fb5af2897901771ea3d0ab7800fdce6f1a4c8927455ab0ee1dd3b73b2dec423dc8ed5ec9fff3b1b904a7fc39ed6d028c7488e9377a505429631ae51a4c71f6c058d472c0f593c2301054ed08dce696c6c90"}) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffff000000000000"], 0x1, 0x1000000, &(0x7f0000000240)='-'}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f00000000c0)={0x8, {0x1, 0x2, 0x4, 0x4, 0x23, 0x1e7}}) 03:35:37 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/4, 0x4, 0x0) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) 03:35:37 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2247.968031][ T8723] binder: 8718:8723 ioctl c0306201 20000040 returned -14 [ 2247.978184][ T8725] binder: 8720:8725 ioctl c0306201 20000040 returned -14 [ 2247.992011][ T8723] binder: 8718:8723 ioctl c0306201 20000040 returned -14 [ 2247.995032][ T8725] binder: 8720:8725 ioctl c0306201 20000040 returned -14 03:35:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x29, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d60f07db2e6b3eb645a864aa11620b192f91c5cd18b0c45e66eec32b3c37b4"], 0xcb, 0x1000000, &(0x7f0000000140)="b615790a084baeedb4b871f4e9a48c4c710016d3aace9ed8049ff4857bfeb941ba3b4212e28133ad710dbd7fcd6d3e5d8069aedbecf80093a97a31c2a3a9c53d7fd0261ae0625aa90b41ff0300006066739f91a4f018006dac501726116942205b0cf12fcad6fff9f7df53872540db1807085c75891e252a434f1a5e840bb34679e1e700b6793b818577b3fdaf787b2bf13d7c059e2b02d901b23cdec0511680000000000000be0d65693220e54cc7b9748fa08142c55d7ae6eb7e596e8900000000000000000000000000"}) 03:35:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x40) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000007464181d6b6a87ca17a5870000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000"], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:35:37 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x89, 0x82800) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000000080)=0x106000) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x200100, 0x0) pread64(r1, &(0x7f00000000c0)=""/4, 0xffffffffffffff47, 0x0) 03:35:37 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2248.135037][ T8935] binder: 8928:8935 ioctl c0306201 20000100 returned -14 [ 2248.154331][ T8938] binder: 8937:8938 ioctl c0306201 20000040 returned -14 03:35:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x40001) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0), 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:35:37 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe800000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2248.530289][ T9256] binder: 9254:9256 ioctl c0306201 20000040 returned -14 [ 2248.551492][ T9256] binder: 9254:9256 ioctl c0306201 20000040 returned -14 03:35:37 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000180)) 03:35:37 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:35:37 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x300, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f00000000c0)={0x1ff, 0x5, @value=0xffffffffffffffb0}) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0x40189206, &(0x7f0000000180)) 03:35:37 executing program 2: r0 = socket(0x1f, 0x80001, 0x2) fsetxattr(r0, &(0x7f0000000000)=@random={'user.', '-]eth0vmnet1vmnet1(:\x00'}, &(0x7f00000000c0)='/dev/rtc0\x00', 0xa, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000100)=0x3f, 0x4) pread64(r1, &(0x7f0000000080)=""/4, 0x4, 0x0) 03:35:37 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfec00000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:37 executing program 4: r0 = open(&(0x7f0000000080)='./file0\x00', 0x1, 0x2) setsockopt$inet_tcp_buf(r0, 0x6, 0x1e, &(0x7f00000000c0)="ec78ad6d2d81ccd077012062dc7a6113d2172aeff9a635c39b4784654fc4c0639b0f6ff9d869ef1fafd1298e722d3805a9d145bc9ce45e4bed99aea7792df589042c9891966c55cbe9f2186f0301c7c37d52596e588e3ec7a7fda23f5d07c897732931f64c5f3f1a4510bc3a5d4227a15b55e21091fcba65b914ccc5e99c81e117decc83fa672e750157fed083cac5fcbe768d7445181289145a2dca3bae631f00d02d9562388677ab1324cca0a6b38265af1d2f3eb1c1bd2a8b6a38425797374d815b263469fb4eec722e2bd9098c688bd3cda8537b2db8", 0xd8) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000001000000"], 0x1, 0x1000000, &(0x7f0000000240)='-'}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000280)={r0}) unlink(&(0x7f0000000200)='./file0\x00') 03:35:38 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:38 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x18, 0x0, &(0x7f0000000080)=[@acquire={0x40046305, 0x3}, @release={0x40046306, 0xff}, @decrefs={0x40046307, 0x4}], 0x73, 0x0, &(0x7f00000000c0)="755a8f32b6bfcf2a72e5284b18e9abcbf6f274a74defcdfbe5744a03b9340620dfd943ebdad69fb8f9072e87c8de1b42b83747049d7b7e63842205df9d84f4ef2d13b7b8db3bc67919247e5729bd569165991d0e943f84930d397af82adeb0d0283dd72217b76a29db2af65db3ad364b67423a"}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x5, 0x1) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x8, 0x80002) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000300)) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000280)) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000002c0)={r0, 0x5, 0x5, r1}) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000340)={{0xa, 0x4e23, 0x0, @loopback, 0x2}, {0xa, 0x4e23, 0x401, @empty, 0x11cc}, 0x1000, [0x10000, 0x7, 0xfff, 0x7, 0x4, 0x6, 0x1, 0x5]}, 0x5c) [ 2248.848661][ T9270] binder: 9265:9270 ioctl c0306201 20000040 returned -14 [ 2248.858543][ T9270] binder: 9265:9270 ioctl c0306201 20000040 returned -14 03:35:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:35:38 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2248.969067][ T9321] binder: 9302:9321 ioctl c0306201 20000040 returned -14 [ 2248.985810][ T9347] binder: 9302:9347 ioctl c0306201 20000040 returned -14 03:35:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2249.080285][ T9387] binder: 9386:9387 ioctl c0306201 20000040 returned -14 [ 2249.097531][ T9389] binder: 9388:9389 ioctl c0306201 20000040 returned -14 [ 2249.105809][ T9387] binder: 9386:9387 ioctl c0306201 20000040 returned -14 03:35:38 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000180)) 03:35:38 executing program 4: openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x40, 0x0) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0) memfd_create(0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0xffffffff, 0x0) r1 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x4c, 0x18001) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000140)={0x34, 0x0, &(0x7f0000000100)}) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x80090) 03:35:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000280)={0x6, {{0x2, 0x4e22, @local}}, 0x1, 0x2, [{{0x2, 0x4e23, @local}}, {{0x2, 0x4e22, @rand_addr=0x800}}]}, 0x190) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000d9f49ea0f6697f325900000000000000000000000000000000"], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:35:38 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffa888]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:38 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/4, 0x4, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000bc0)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x2000, 0x1}) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000200)=0x4) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000005, 0x30, r0, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={0x0, 0x3}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000300)={r1}, 0x8) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000680)={r0, &(0x7f0000000d40)="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"}, 0x10) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) setxattr$trusted_overlay_opaque(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x45a, 0x1) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000240)={'\x00', {0x2, 0x4e22, @multicast1}}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@dev}}, &(0x7f0000000500)=0xe8) r3 = getuid() accept$nfc_llcp(r0, 0x0, &(0x7f00000006c0)) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000540)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000640)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000d00)={0x0, 0x0}, &(0x7f0000000c40)=0xfffffffffffffd40) getresuid(&(0x7f0000000700)=0x0, &(0x7f0000000740), &(0x7f0000000780)) r7 = geteuid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000007c0)={{{@in6=@ipv4={[], [], @initdev}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f00000008c0)=0xe8) getresgid(&(0x7f0000000900), &(0x7f0000000940), &(0x7f0000000980)=0x0) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000a40)=[0xee00, 0x0, 0xee01, 0x0]) stat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='system.posix_acl_default\x00', &(0x7f0000000b40)={{}, {0x1, 0x7}, [{0x2, 0x0, r2}, {0x2, 0x5, r3}, {0x2, 0x5, r4}, {0x2, 0x1, r5}, {0x2, 0x2, r6}, {0x2, 0x4, r7}, {0x2, 0x1, r8}], {0x4, 0x1}, [{0x8, 0x4, r9}, {0x8, 0x1, r10}, {0x8, 0x7, r11}, {0x8, 0x2, r12}], {0x10, 0x7}, {0x20, 0x3}}, 0x7c, 0x3) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000340)) 03:35:38 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000040)=0xfff) [ 2249.715969][ T9600] binder: 9591:9600 ioctl c0306201 20000040 returned -14 [ 2249.727145][ T9599] binder: 9590:9599 ioctl c0306201 20000040 returned -14 [ 2249.768127][ T9599] binder: 9590:9599 ioctl c0306201 20000040 returned -14 03:35:39 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffca88]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000fffffff30000000000000000000000000000000000000000000000000000000000000000000000000000000046a07257365d2310410000d831f87eafe331fcee0000000000"], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x5, 0x82000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r2, 0x8000, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x20, @mcast1, 0x115c}, @in6={0xa, 0x4e22, 0x6106, @mcast2}}}, 0x118) 03:35:39 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdc9, &(0x7f00000000c0)='.em0^ppp1@[*\x00', 0xffffffffffffffff}, 0x30) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000140)) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0), 0xe, 0x1000000, &(0x7f0000000080)="77eea21b638a3fc4cc884a442008"}) 03:35:39 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x9, 0x20400) socketpair$unix(0x1, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000300)) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000380)=0xa6) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x17) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000002c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0x4, 0x2}}, 0x30) open_by_handle_at(r2, &(0x7f0000000200)={0x9f, 0x728c, "a888e5eed78d660ae2ee05b2c816cefb025580fa0ec155223740fd86ea4f7d4aa24a0846f411bb55de3ee26968d5a0abd5a4df158fe0bcc7806367c2fe49cad9992d2db7885396e14fe807208d0be5f1a81ed8feaad7f65007372d1483faf942ca23d23e27d1550b660f4f688ded7ee711d3c76e09cf24ebf99017a9e0c6202b98d294056bd5594dd0aeebe22fdc095025141b4c499c32"}, 0x40000) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x85800a02}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x41b, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 03:35:39 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffdd86]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2249.954324][ T9881] binder: 9802:9881 ioctl c0306201 20000040 returned -14 03:35:39 executing program 2: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x80000001, 0x2201) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x2c4c, 0x4, [0x100000000, 0x36, 0x2, 0x100000000]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={r1, 0xf2b}, &(0x7f0000000180)=0x8) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000080)=""/4, 0x4, 0x0) [ 2249.997981][ T9881] binder: 9802:9881 ioctl c0306201 20000040 returned -14 03:35:39 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000180)) 03:35:39 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:39 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000140)={0x8, 0x3}, 0x20000) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x8200, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000180)) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000100)='-'}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) 03:35:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x4, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000280)={r2, @in6={{0xa, 0x4e21, 0x3, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1c}}, 0xb0}}}, &(0x7f0000000140)=0x84) 03:35:39 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000640)) write$binfmt_aout(r1, &(0x7f0000000200)={{0x1cf, 0xfffffffffffffffa, 0x7f, 0x3be, 0x298, 0x800, 0x3f, 0x3}, "e9d2d463e729dd1a2ba7a33f9e4649385af058519c56674b7ff7ba6080114f5f993ae83f80b334caa3248b5c5171c6fe40e506d0d9ac62236e0b57a85749385feb0d7011528f3c21bc10d84c44bfb9078e327b7cda2ff73104099308cd08f3867934251fbb97983cede6a4c64f9e4241bebb5110a6ece6377895d2557262982e3d2047d0c88d54cfdaae45c40c8c10441843d72eb6b430a531b168292d085c12374f1669ae946b426dee0e4a5d4eb58cfb5070c131a2806ac91977594286e5dcd93d38ea659cec3dfd797a267e72a29e5e8ed22ffc19d6366b2bad8bbe1960aef897bd72f5ee1183937e4b2510ddce893ba1007b", [[], [], []]}, 0x414) 03:35:39 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff89]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:39 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0023404000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000"], 0x1, 0x1000000, &(0x7f0000000240)='-'}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0xff00000000000000, 0x181100) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f0000000180)={0x9, 0x7, 0x1, 0x3, 'syz0\x00', 0x5}) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x9, 0x101140) setsockopt$inet6_buf(r1, 0x29, 0xff, &(0x7f0000000280)="a73301894a795f534ff4f87b45e6fbb8cde753e451b5e1b183bfc29a79dcd22e003369bc81b3fb6252cc967dc103658217dbc2dc509fc369c2eb7b7c68f0c10272b4a9db738b6103686513897ef1623ac4018c3124f4262ab8867f61db25861a8394927838ccb8395041bc98", 0x6c) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x200000, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000100)=r3) [ 2250.611522][T10142] binder: 10139:10142 ioctl c0306201 20000040 returned -14 [ 2250.624563][T10142] binder: 10139:10142 ioctl c0306201 20000040 returned -14 [ 2250.633472][T10143] binder: 10136:10143 ioctl c0306201 20000040 returned -14 [ 2250.643501][T10143] binder: 10136:10143 ioctl c0306201 20000040 returned -14 03:35:39 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:39 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xb) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:35:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:wireless_device_t:s0\x00', 0x27, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:35:40 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffffffffff]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2250.787221][T10351] binder: 10348:10351 unknown command 1077945088 [ 2250.825612][T10351] binder: 10348:10351 ioctl c0306201 20000040 returned -22 [ 2250.871474][T10351] binder: 10348:10351 unknown command 1077945088 [ 2250.878786][T10362] binder: 10360:10362 ioctl c0306201 20000040 returned -14 [ 2250.879746][T10351] binder: 10348:10351 ioctl c0306201 20000040 returned -22 03:35:40 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$FICLONE(r0, 0x40049409, r0) pread64(r0, &(0x7f0000000080)=""/4, 0x4, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000040)={0x5, 0x14, [0x4, 0xb370, 0x280000, 0x2, 0x2]}) 03:35:40 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000180)) 03:35:40 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:35:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0), 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:35:40 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f00000000c0)={0x7, {0x8000, 0x3ff, 0x0, 0x83}}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000080)=""/4, 0x4, 0x0) 03:35:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x7d) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) r1 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0xfffffffffffffffa, 0x1, 0x6c4, 0x8, 0xc28d}, 0xc) 03:35:40 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2251.487510][T10679] binder_transaction: 27 callbacks suppressed [ 2251.487526][T10679] binder: 10676:10679 transaction failed 29189/-22, size 0-0 line 2994 [ 2251.514762][T10679] binder: 10676:10679 ioctl c0306201 20000040 returned -14 03:35:40 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2251.548175][T10684] binder: 10682:10684 transaction failed 29189/-22, size 0-0 line 2994 [ 2251.588461][T10684] binder: 10682:10684 ioctl c0306201 20000040 returned -14 03:35:40 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='ifb0\x00', 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) shmget(0x2, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) 03:35:40 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$unix(r0, &(0x7f0000000380)=@abs, &(0x7f0000000400)=0x6e) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000440)={0x2, 0x8, 0xfffffffffffffffe, {0x0, 0x1c9c380}, 0x1000, 0x7}) ioctl$RTC_PIE_ON(r0, 0x7005) getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@random={'system.', '/dev/binder#\x00'}, &(0x7f0000000280)=""/192, 0xc0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0x0, 0x2, 0x1, 0x81, 0x2}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000180), &(0x7f0000000340)=0x4) 03:35:40 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:40 executing program 5: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x100, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x8050, r0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2251.765222][T10893] binder: 10892:10893 transaction failed 29189/-22, size 0-0 line 2994 [ 2251.777900][T10896] binder: 10895:10896 transaction failed 29189/-22, size 0-0 line 2994 [ 2251.799622][T10893] binder: 10892:10893 ioctl c0306201 20000040 returned -14 [ 2251.801795][T10896] binder: 10895:10896 ioctl c0306201 20000040 returned -14 [ 2251.815017][T10899] binder: 10892:10899 ioctl 401c5820 200000c0 returned -22 [ 2251.826540][T10899] binder: 10892:10899 transaction failed 29189/-22, size 0-0 line 2994 [ 2251.835197][T10899] binder: 10892:10899 ioctl c0306201 20000040 returned -14 [ 2251.843118][T10893] binder: 10892:10893 ioctl 401c5820 200000c0 returned -22 03:35:41 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000180)) 03:35:41 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@remote}}, &(0x7f0000000140)=0xe8) r2 = getuid() fstat(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000440)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000000580)=0xe8) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000680)=[0xffffffffffffffff]) stat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000780)={0x0, 0x0, 0x0}, &(0x7f00000007c0)=0xc) getgroups(0x3, &(0x7f0000000800)=[0xffffffffffffffff, 0xee00, 0xee01]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0, 0x0}, &(0x7f0000000880)=0xc) r14 = getgid() stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r16 = getgid() setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000980)={{}, {0x1, 0x5}, [{0x2, 0x2, r1}, {0x2, 0x4, r2}, {0x2, 0x4, r3}, {0x2, 0x6, r4}, {0x2, 0x4, r5}, {0x2, 0x7, r6}, {0x2, 0x6, r7}, {0x2, 0x1, r8}], {0x4, 0x4}, [{0x8, 0x1, r9}, {0x8, 0x3, r10}, {0x8, 0x2, r11}, {0x8, 0x2, r12}, {0x8, 0x4, r13}, {0x8, 0x7, r14}, {0x8, 0x5, r15}, {0x8, 0x1, r16}], {0x10, 0x1}, {0x20, 0x1}}, 0xa4, 0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f00000000c0)='-'}) 03:35:41 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000100)=[{{0x77359400}, 0x16, 0xfe3b, 0x3}, {{0x77359400}, 0x17, 0x6, 0x40}, {{r1, r2/1000+30000}, 0x0, 0x3, 0xc686}, {{0x0, 0x7530}, 0x2, 0x8, 0x9}, {{}, 0x0, 0x5945}], 0x78) getsockopt$rose(r0, 0x104, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x8000, 0x0) pread64(r0, &(0x7f0000000080)=""/4, 0x4, 0x0) fdatasync(r0) 03:35:41 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x20000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:35:41 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0xfffffffffffffffe, 0x8000) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000180)={0x2, 0x2}) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'security.', '\x00'}, &(0x7f0000000100)='/dev/binder#\x00', 0xd, 0x3) [ 2252.346930][T11208] binder: 11205:11208 transaction failed 29189/-22, size 0-0 line 2994 [ 2252.383247][T11211] binder: 11206:11211 transaction failed 29189/-22, size 0-0 line 2994 [ 2252.385799][T11208] binder: 11205:11208 ioctl c0306201 20000040 returned -14 03:35:41 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2252.420894][T11211] binder: 11206:11211 ioctl c0306201 20000080 returned -14 [ 2252.450382][T11292] binder: 11206:11292 transaction failed 29189/-22, size 0-0 line 2994 03:35:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x61, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f00000000c0)) 03:35:41 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2252.493377][T11292] binder: 11206:11292 ioctl c0306201 20000080 returned -14 03:35:41 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) pread64(r0, &(0x7f0000000080)=""/4, 0x4, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000000)) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'syzkaller0\x00'}}, 0x1e) 03:35:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x3ff, 0x5, &(0x7f0000000400)=[{&(0x7f00000000c0)="b2c4b68342067de13a5d04929549", 0xe, 0x5}, {&(0x7f0000000100)="e0d3bbd4ae542adaf23fa0d584c3e7ee0e27ffe632465ef8b8da91820c222b5d4650cf48387766bd4adb80c0ba32c6b6a1dce57504e77994db22665b860af16a5c86f3c2a9fe601e19e4609909e79146ceea74a0fd694c5b398aa58abf8ce8e7647f2d24bee0b3966720af4161e44260dff3def6", 0x74, 0x6080000000000000}, {&(0x7f0000000280)="9a9f4e1e2694078e0293e287846ff677314d946aaff0bfb78a8c55f410a4b7eb5257b81e6c08b9aeaa4f0462a36b34a385f790", 0x33, 0x1}, {&(0x7f00000002c0)="14aac217c11f5c512d85816e98ef518e20438c653d144ddb9895e57648a25fda799ce6933f7a299866de34422cff798f647914269e9a2b991cf6c166194ec8375873aa77e0876f95f2", 0x49, 0x7f}, {&(0x7f0000000340)="66fc05accf6927d3495217b903e27d1623709f4bfa49498f974204ea07f799d8252476eb3055dd02d191261a09204f96809377581b5fd1f94698bf391567414878f6825f12a7b5568a492c9e31bd442f5bce3d32c553419578db9e915a425ffbfce282f8fa159cf49e691e0f726230b1fe0e42c0f5af0428dd26e8bf426ce91d3801813998c7a43180001125aac9bfd46694", 0x92, 0x8}], 0x4000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) r1 = syz_open_dev$mice(&(0x7f00000004c0)='/dev/input/mice\x00', 0x0, 0x80000) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x6) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000480)={0x8, 0xffffffffffffffff, 0xfffffffffffffffb, 0xffffffffffffff3c, 0x3f}) [ 2252.557484][T11422] binder: 11420:11422 transaction failed 29189/-22, size 0-0 line 2994 03:35:41 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x806000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2252.618755][T11422] binder: 11420:11422 ioctl c0306201 20000040 returned -14 [ 2252.692712][T11504] binder: 11473:11504 transaction failed 29189/-22, size 0-0 line 2994 [ 2252.709703][T11504] binder: 11473:11504 ioctl c0306201 20000040 returned -14 [ 2252.729915][T11504] binder: 11473:11504 ioctl 401c5820 20000480 returned -22 [ 2252.755308][T11609] binder: 11473:11609 ioctl c0306201 20000040 returned -14 [ 2252.789875][T11504] binder: 11473:11504 ioctl 401c5820 20000480 returned -22 03:35:42 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000180)) 03:35:42 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x4000, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) r2 = fcntl$dupfd(r0, 0x406, r0) recvfrom$netrom(r2, &(0x7f0000000080)=""/3, 0x3, 0x0, &(0x7f00000000c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 03:35:42 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/4, 0x4, 0x0) faccessat(r0, &(0x7f0000000000)='./file0\x00', 0x40, 0x1000) 03:35:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x70, 0x0, 0x2, 0x4, 0x0, 0x0, 0x90ca, 0x80000, 0x1, 0x756, 0x8, 0x7, 0x0, 0x8, 0x81, 0x6, 0x1068464a, 0xab4c, 0x5, 0xc26f, 0x6, 0x3, 0x8, 0x100000000, 0x3f, 0x7, 0x1, 0x4, 0x2, 0x5, 0x9, 0xcbd, 0x0, 0x7, 0xffffffff, 0xfffffffffffffffa, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000080), 0x5}, 0x18000, 0x8, 0x7ff, 0x7, 0x2, 0x3, 0x3}, r1, 0x1, 0xffffffffffffff9c, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$inet_sctp(r2, &(0x7f0000001700)={&(0x7f0000000180)=@in={0x2, 0x4e20, @local}, 0x10, &(0x7f0000001680)=[{&(0x7f0000000280)="8c7feebfd85c9ef82aeee3d93d0ae4e7b6fd916a25dd1e49eec17ee58782e42baa50acca00b1da05c867b752381b5c0f81a81c9da182cd3897d6a65426271afb510ff907027060c9b79391a493520d3524038a7d8b2d8b4413c7", 0x5a}, {&(0x7f0000000300)="3921ac0810d234d0bba33acd5aa2c5b6c26d26015be9b639928db795a353d1b7dfc2da4e05c4ea909513701e26cd2f66922030893b8aa37e5a1ce0426ed46ca1ce8fcf2b23f14066ab887e8575e214975c7f50e94d3bbe97f92aa0ed119e732cebe807282645b62942631cdf80540350ed8a1b7e267970633e4ecd3b02b774a2cb8ed20896a0ef13e06495a4b59d6ead1cc0d8ef8642aa106bf93a714bcd971f00634540edf06fd73952ec575eccfd0c1565b18b8097393684674e9ac56957103e469f9c1a11a834674e3b1975371185aab570e8a180c9f8e65b3027e8ca203cbef4c4080fd8526c6660f150232e7d3ed56595876e7c210275a4bdb7635665bfc0bff71bcd10a77b78c91f3d77e18d89f054511546ab45fb88a7735c3a1c757f66699da6b9682c094890fd7eb4864fec38a26c5b41e097b02fb28a0a015305eed37fca485c4fd7a753d8f2dddc9ed146cfd73c0ff9f7a738d20fbb4d01d98dc8bb7b5d237c162e01544584652786794b004354f3ed9263de690bace63d54c0087756750ea1115c352722eaa8610bc6cb5c90707bd006c9197fbe24212e04cd4fcc47c9e4534efea2eb06c9426c9d19eecce52a8efa34b1daf802354bbc449b77b5325c79fed593c70e1165dd32414d26a0daf322532b70d331445fa7062241acb3cf7cde2c1c1fde9dfd531ab4b71e48ddcf5a80f5adad41257d96cf871d8e0dd630f115752d557ea16ecfac9b3c9470a4a875f5ad3835849ac2b8e0bb5d680f6e1cfea1c111acf6d58e6fda148d5490dc75eb45c35609aed68027d42509ad770633f47c5448e20810f86a1d9ba5e658fc08a3cdd2d9db043398ecba806fb30b677be04ce12ec763dc0cdc15f0c68f4f36e17db80d324fc08e0bda27b9f93d590dda9259b7d823f8f1d929d3b36dbb5228a8e0b1984590b7510765587ccdac955a2cbc936d116d74a2fe439a04429b2acf1c31171f11e6f8cc8cf4dbe1e0ca05d6d30e50d3b05ef43d14e1b5a0c0948902d0b183f36e39d215db4d6894a7e319b572e28ac3433e5038c7e8154475d05d6c8bbe0220d72d8bd8d76e9ee74bd71eac220f48716485e69311d5f49b8429a47388bb72acaf64dae5ef099415f24dd3b643448f06556c9cd3d5db2d17cde212c4de05a0218b09925105b658a535ca1285a07dfa1e16c26f0fc8d14b02a34783dc9cbb62f8764a58acceafcd740165a717f42471de7a5554ce52d6639b0ef9a45fb89126f82729500a4f6917316546f6b9d3883620393c97518c8a8fae08e575fb7a36d33a4e8852aa7be32b26b95b8fd1f3f03c0070ece49043e541f64e137b6d963cb68a15493f835e4b4573910b56a52c3fad2d4e123a3d50f11c615a2bca482ac6fbe3378ec7ffeafb1e0a60c90ce077df539550a460f50084ae735b7240a925eeb2918c5dbe0f5de8161912c59ca5367011511f791891a21ada3c0139a303d7b1097d223f7de8c95d923836fcded6d001b948407672eb4bcc3cd66219edadaa6698bb77299ee1337ce250597a95e241bc32bc4169a78fa41f6a0fc37ea8e2df2173a8cb57e8eda598586890b01eb3ceb130904df5ebc77c7a4b0a0871094f8de9d1a913feef16863292c0031d67c15e595238a51dfede7a297ea586f5226ca4194c8d29e713177860af985b80eca9f0f68a1b1c56984b15997fd00d12589775c1c316db741f7d7cfd66b1aa597af74de31de45278254c60733c0b03e1413823e44ce07d0ea1451878ab159eb438a5db847dd3062f80a029bdaf8cc6b3f2b5c02878982507f5685a58017b20f0cd6c65b85bc3ff0100bc53f7ed59b53c94b9d64e9023371746a4857dfbba06060f76122885badb177d92ca7ffe53cdc0feaf8853f42881128c4e38b361e4b97bce608f3529dcfac76165c948c15821b6e621a143dc09eacc417ffd4307b5e7e12acbf22892d72db1eafac39933dc923424a66e415de0f427dadbd011903e58dc284d941df02616b0d2c5f2b4495fa216e245c6fe7bdd42376f0495d2cfb36f997ac2ea9f37625099f6dbe8c46252e0de5d886552ee0166750366fbe30d8035b5294cbbe69f3d6b2f427253e09974aa4fb9338873dc450ea28374b677a5a151f99a14c15905861c145f2ecfa826b4fb14b0b2dbaebfcb5c59dafc8454e469e85584e6a6fd29e8850998394d9c4f508f9b5d64a91b43710d3f845e08986a7f640ce2c0f9847bde3671559796a1df56e5d14f3a3c0e0bbc49a216678ee98a5f1cdaa0768fdbe844cce2088cd3e627bc56fa25f34e42c7b63ab8d6be4ee062d41dbd5c1d91b394fb83025ee39ad88008ee8ae5027cfba5b517ab9ab45856d26ad9700bf4a828899e56671226a80ce7f3574589d2b32dd8674fb5910542d504a2d938f92302f8bbbc47e9c71324ffe29231177b5ae45d4803b938879c73402df303fe912b3a96e23cf6523c7fe146ed16f13f05b6368d90b23c5b46c9a4e5a09d911210188ddbac81620c81fd9e341d2b9773663f2d0de62f6e2f2cd88f7f418234e8bea0a965cadc22f4a4ef950325f27b40edfaa76a13045da4861437b34dfaa90a93ab47c60095ea328be4d244a36e60a54405a54564f9ecd8b66d0f41b77d0b1e762abfbae212ecc94340253e7550120f90619f07730d4cc24b62e5d46247ac24678aacaa05c6b73a7529b53b3a1711b177336b21d7cb13c9a7e3619692860ffe01f72a02b681cd943e653356a9a02ad71f93489d500bb0e3b54ad909f0a16f25a51908dd09d32fb11a5b4d042d2559c0599a67de02a5898969c5572bb4c9735ce26d82773575b5a4334a36a71dbf2828a5006c9876d664d12e0c91718445f2198c99d327b4a7630e20397dee4543b37458d61708b9eeb9d11116d06de78cc5113650de656f37c8650b159df2d22161917123f298673151255b9fd2a3845ba7a48ca8e146a87f34a016daf4d028f849633d1c1f240c0e376ea6425c77e6f568fbba065faacc810d4c07861536f5b292bbd051d97e863e6bc6c6c7940aa75da596f5365ec8f0f817e4fb99ff3524f2e30a8810a6ef1c12053c997dc220ba9e23f37270b7e7000d3d68613e8540ed78575f393d0635bfff23e4fccc4ebdb5c67bca4daf6f30e21dedb870893100c6479b9419f45bcf93448c0670693bafd84ae3b6deeb4dfbda85a8e76d039dd734a353595e5f69282d4c2150588ba00811f630341d4d28f636cd3e76f8d6197864db8b7cec3fc7ac8f045cf413630e82911e7bac975aced3c500d881e53516b20018a4406c1bad266829704f017f56cae5d620f2bcabb9d5d45e838da53ce5c0ba759aac5bc33671f9e4da7a69bbbf956db90b597ccbf7cba56e1bb96c457679a37d68ce3ae81446d93ab13a24960557b92a9b505c7ab7a35aa83310b65ccbb9fd239e92909ca071cd4e9d9ef9334c4d2fcefc76b5cfd7a684064591216bc1658e1b4468f817b61be0ece6f4d5717f3cbef896cd89f8f7e847abc96724220ac40dc7d50b2becb6e23e2edf381b555d9348736b021fc59e61954a7e013025a475c7e9fc5be9490d25c7ed4f50cbce9a305e43a1545188621fa9fae15fb58be24aa93bce50c865eb7901e6b0f4c1d1e00a1ad3013195f51dd17fbeb5775061673ca8eadfd547ff38d1794f8941463c61ca7c747487aeef92e39c1ecda39a3727738a0efec6f329432fab3830b29a36ae6a06ad8f26462feaea195cf3fbb3e7a904d8212e633093d4b0b95f402ccf3cb25d06688f9f1e184d837da29fbc4fc188d8781abb0c744f121ed4acce8eaf88004f15a4c82b3b71e249f101eeb478ed03754579323a92d4f4e3b5bc74ecd37de2a75af616fe6f57c2829cee38ed7aeba775ef50b4671f62777d26b372902fb82db221b35ecb428ab5a7db5513dbd11b8b81862b7df313c5b5ba749b86177ef2465f14ebdc6ecba1310d320455b08e500f87a8b6a2da9257bd221fcddede2c0449981024061cff3796cd96ee9f207df3d2a752b6681b25f0c4b0150cc525e08b1140868ca1bdc195fa13562136f745e414956ecfcdd3e71717bf2fbd6e262f3a40386abb421c141b1f79fceaaf2889b4af1346912a7c660ddb79ee7551065ec26a3b2354cec6bdfe6799b191e02562e6efb276aba9fbbbcc3fb6adedf2a13ca58c6eae990d78b72d24e67c583973cb9549bac5af5123ee71e3db2dcb7c586f3783702f50d2ae0589a09951d076e03149f78625c3c550e6839d9bbd4e285d838042619f8aa110e1d606d22659c328ecfa722ad5c046ef67e3fc82f578f40d0e1e68bb5082a133c3ea6c3ac1b92da8824058d47a5853d58581bc11fa19f92b220e8dcd803f842cd38a3f05cee834020037c8575fe62f3209b61ad4fc7527bb76da871b1abeb987e0c4525afb930df54b8501d82983e78a07cfbac201a67202c5df1472d910241e5b4a37c1ba111d23b11185e974390b0a81ff942060adde71fa6abfc9e647c2bf7184de5b38a3eda168c6fe1226032a15c5f6d0e0e93bd22662c3b16b26eb3357ea4dafdcd47a918cd86319177cad5f00a2fa5dd01fad0ad4a979ff4f6854d69752d85cfd3820c7303f193c5b925db30242d93a59f892fd461de4a7feefb463e36934061a3e5c0a771f0c59bb7b5b961560f3f5da7ef4e873b1ec4987ce9deb82614a2ced83e32c6cfb1293ae3482bd3408b8cd21f636a5012565e7b2cb9157c22d4704590033067317c9847c1e34a6a38f4b0866b8407963bb2de9ea0abeb172bdbe5df52a1050f8d6015c0d4698b2cc4d957fc6f681ab8ce891e416c306f1b22b38dcedc756570152d467bd297bebb775196c578e99ef4927fba9950e7b550a4217cc2a0f00ce5b64cc1112804e62e8b03634f367fdc9cd2d7a06859fc7c0ebaac00926022032180b77591f3bf4be1a6f020ddf9942a1c0c7199c84d2bfc9741cc1745abacfd59388598c45e092d13da42e514a73892726f3a95460b060237101a973ebebd8b75f2c0c971ea998af1eb0a9eab40830fd471dab7a075589d44d4384da7133b867b408faa70e371fc1d9f4452659b9003b9ca47e83c2fe0730c3bea8511ff26d17d74a1dec0d7690e23e45cae3c1a728908af45a2a2406c0458779951d2ebf7c69655e2e57bfaa51ae1955b940536d1e1d5f173fbdac8fe8cb76b6bacf407f23292ecc40665f6e17dc7734e84ad606c0827910dfa2e7fcada7be41b51e3b40c39cef81f052097c3eae5ec15cecc9a036bc4535ebe82bd039d643ac02912f8775f315532f5330088652c8ba65820acd7422f8f81fea322f60131965a7c3c7f0b76552d24c0310beddca4a73b1e2d4089840cffd4823738da35243c1838a8aee602a90ecf1bc7a63db75e967d1895d27bdff1a23dd78be09dcef9a6c5f85be2e99bcd6ab37c3f7b4b5897648a155f91f3d8c112d084a0f630db714b150425e7a80307bb6e0da1520b20a729cf8014ab1efb334bbf21bdbc1d9744c724ce5211db2a0af964d15a6809dd6a57b6e709b23a8ef1b52a8b6265d95d30f6481a7c4379a8b1871abedf12e4d1cd42e83dcc67725244f93b4f332f1c6da09bf39424a090d349a43945bc11ca35037094a1bd77cb927571d6ada5cc82eb06b1d1e5117d9f12f924792f82ec3830623d92cc887b13202dba638451637fa397e0197524961247575cc5fdd13ae1a178833d1fe5161df018d4d7ce2128c13e80c6240dcf1d4d6f3a49c0f5aa3c2f08b0279f577f287b72e570af3775c4124c620a970f88b7d59d60a917dfcb3b2c7f75f9c793f1f00cf5983f047bc95b67d29a638", 0x1000}, {&(0x7f0000001300)="c8f4d1156aba4d2aa2344b5c42039a", 0xf}, {&(0x7f0000001340)="a623250a408a7544240c1c10e4ec23694fdf415210c57371f824f55c00ee511bfabe5b10556b2f54ea192a55e0a3538a5cf715f9b7ed461e6ec7558bdb60c473362f96f46eecf85f10da7c80a3ce338efc6f6d7fc169c3d30420d4a3faea729a9729f46eb86281612acacc2778db54e51e8586742a84ae764705255e72bf36f75147d2043e88178ff9bcdda96c48abdb60cf1c0d97b42e14716e664b6e590ae49e85", 0xa2}, {&(0x7f0000001400)="dac056d9593e510c3e15fdcf827da0855e503a72a9694f097c28901b2990843a2bdc983338050b25fe677bcc81865d2480e394ec81852b7bc6ffa051ce2a7baf2c13c5e15c0660", 0x47}, {&(0x7f0000001480)="66222ccff3587a7381c89c571b9103a809c3cf5d8d2edbcef4780cdfcd8e881612329315e285a365ea2d8bdea56e0baa238372bcb91019a1630b64847b1b2f870ef2a5f51f080920b9cb33ba7f4fffe0e09c8aff5f091afbfd33201897e955e1f5eeec1070098e9f02d2add37ecb54bde7c3b761885b8343371f776db9c4189d134a2d770a1439ff5707a6393cc29c834300712d3c9b871a8286ac87cc22a959c10fc2f2bff56dd533632840b96fe46dcf2bf4840f40887a091d31a7a99578663e7ee11ab030637d118de3a3592989f73c55ecec57fd", 0xd6}, {&(0x7f0000001580)="a6", 0x1}, {&(0x7f00000015c0)="66e36e582363bb88b3feaee3bc0d64ce92d6316a5773b9cc745c7a1c12ed19d875ddeb75151e2e088f5e472a4e142e04b2a20fd7f370a8b105e58d5c8e2add340d66da9cad5fdeb831f1cb5af7f10256bf1640446a3c878d3ec7c82c0bd6fcd631eb65812e15efb96dc3e199c2a8ddc39a1bffe191e3edb1b4bf87496003f0b68f18f4b2f507454d8aab4f46597524b34dd1f8881914f750fb7fd2c30eeebdb76beebd0dc6040a724dcef43b5c15d46ea7163497d1a53ecc7544", 0xba}], 0x8}, 0x40c1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:35:42 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x200000007) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) epoll_pwait(r0, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x9, &(0x7f0000000040)={0x7}, 0x8) 03:35:42 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:42 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x6, 0x102) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x74, 0x1000000, &(0x7f0000000140)="2de388a309693f98744679035c7f29f1d4"}) [ 2253.271191][T11747] binder: 11742:11747 ioctl c0306201 20000040 returned -14 [ 2253.281832][T11747] binder: 11742:11747 ioctl c0306201 20000040 returned -14 [ 2253.290579][T11749] binder: 11744:11749 ioctl c0306201 20000040 returned -14 [ 2253.309019][T11749] binder: 11744:11749 ioctl c0306201 20000040 returned -14 03:35:42 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:42 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/4, 0x4, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000000c0)={0x80000001, 0x47, "7049c33618f686386550c53151e1dfecc4bbfa6b281949f02f8d44a8425ce56d6aecc0d043014ab72d3f89f31d5db4e879f029be0ce5c01632f80094a761c1245d9afb5590e321"}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000000000)=0x15000) 03:35:42 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) write$apparmor_current(r0, &(0x7f0000000200)=@hat={'changehat ', 0x1, 0x5e, ['/dev/adsp#\x00', '/dev/usbmon#\x00', '/dev/adsp#\x00', '/dev/adsp#\x00', 'keyringcpuset\x00', '#vboxnet0(nodev+\x00', 'eth0\x00', '.\x00', '/dev/usbmon#\x00', '/dev/usbmon#\x00']}, 0x8b) syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x3, 0x200081) [ 2253.417542][T11963] binder: 11961:11963 ioctl c0306201 20000100 returned -14 03:35:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{0x36, 0x2, 0x6}, 0x1000}}, 0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2253.606406][T12231] binder: 12151:12231 ioctl c0306201 20000040 returned -14 03:35:43 executing program 0: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc0109207, &(0x7f0000000180)) 03:35:43 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1ae, 0x0, &(0x7f00000001c0), 0x1, 0x1000000, &(0x7f0000000240)='-'}) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) 03:35:43 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2900000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:43 executing program 3: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x54bd, 0x7, 0x0, 0xa, 0x11, 0x9, "3e32e796d5553c95e9abaac29822a76618f33629ef4f3ff55eb39fee2f51532788ee23063b5b9c703d2bea688aa5cf6ac62073408646208d3fd46a1a6229bc35", "1518c9728d9ba862f5b175f78f80f2fcfa2c17870328d64ad3b2ca50e45f383ddf1a63cc5c76835b385201d1166d8996ef3285f95840f9da372d498476798fbb", "df1a935f45b8910a35241a9e73a0f7f900640be029b657524af9ff9dfe6a9d25", [0x1, 0x401]}) r1 = syz_open_dev$usbmon(&(0x7f00000003c0)='/dev/usbmon#\x00', 0x20008000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0x40189206, &(0x7f00000000c0)) 03:35:43 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/4, 0xfffffffffffffcfe, 0x10000000000000) write$FUSE_DIRENT(r0, &(0x7f0000000100)={0x100, 0x0, 0x4, [{0x2, 0xffffffffffffffff, 0x0, 0xbda}, {0x5, 0x101, 0x0, 0xffffffffffffffff}, {0x5, 0x8, 0x9, 0xfff, '-vboxnet0'}, {0x3, 0x0, 0x3, 0x866, '&/-'}, {0x3, 0xff, 0xa, 0xfffffffffffff801, '/dev/rtc0\x00'}, {0x3, 0x941, 0xb, 0x7, 'wlan1-user@'}, {0x6, 0x7fff, 0xa, 0x10000, 'proc$ppp0*'}]}, 0x100) 03:35:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x50, 0x0, &(0x7f0000000140)=[@enter_looper, @reply_sg={0x40486312, {{0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28, 0x40, &(0x7f00000000c0)=[@ptr={0x70742a85, 0x1, &(0x7f0000000080), 0x1, 0x2, 0xd}], &(0x7f0000000100)=[0x38, 0x28, 0x20, 0x20, 0x0, 0x0, 0x0, 0x38]}}}], 0x83, 0x0, &(0x7f0000000280)="6d0b4dfbee46db32e88702ead3c3c772f39754a23b03df48f8709c21ceb6b92f1a96fd1dba7cf52bfa722ceb209df8c29a6210f6d0bd8e71fe462d9d931d6059b924a5c8e37438ab04550fbddd7c23fad059b5b7e71c66790e89c5a2f358b02c3549dc89da344a4efa0e4bf3cefb503b79e6d71e64074d6ae87ad4c9cf17838c7e1cdc"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340400000e76d3d6f000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000"], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:35:43 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b00000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2254.146503][T12390] binder: 12388:12390 unknown command 0 [ 2254.159874][T12395] binder: 12394:12395 got reply transaction with no transaction stack [ 2254.167165][T12390] binder: 12388:12390 ioctl c0306201 20000040 returned -22 [ 2254.170340][T12395] binder: 12394:12395 got transaction to invalid handle [ 2254.183172][T12395] binder: 12394:12395 ioctl c0306201 20000040 returned -14 03:35:43 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x20040, 0x0) getsockopt$inet6_dccp_int(r0, 0x21, 0xb, &(0x7f0000000200), &(0x7f0000000280)=0x4) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="006340400000000000000000000000a856000000000000e4084ec70000000000eeffffffffffffff00000000000000800000000000000000000000000000000000000000091ff37081220d61d6462b28404fe6b81f82b93721b7815394732959a0c7533843b23b63e42a1b2ff67cf4616aff4eec942bc31612017f83be1b8cef31009fe832ef9e2f24263dc6c446d596fe591e2cb14b19c0f6c36a3b7674ff25ded9a9627321b80edd0b7d0017c1ef4af09e92e25d7438468a3521a021cfc9bc3b7b1309cc4e1596cdb8b8c16f87ef18fc9ef62d4a808e9811e4d35dea8292b55d67e6fef0d0e05326b600000000000000000000000000"], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2254.193449][T12390] binder: 12388:12390 unknown command 0 [ 2254.207812][T12390] binder: 12388:12390 ioctl c0306201 20000040 returned -22 [ 2254.235369][T12395] binder: 12394:12395 got reply transaction with no transaction stack 03:35:43 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/4, 0x4, 0x0) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000180)={{0x104000, 0x17002, 0xe, 0x7fffffff, 0x5, 0xffffffffffffffe0, 0xfffffffffffffff8, 0xc0d2, 0x12e, 0x9, 0x100, 0x5}, {0x1, 0x3000, 0x0, 0x5, 0x6, 0x7, 0x8, 0x2, 0xfffffffffffffffa, 0x0, 0x11}, {0xd000, 0x4000, 0x0, 0xff, 0x6, 0xe0, 0x7, 0x732d, 0x4, 0x7, 0x4}, {0x105000, 0x1000, 0x4, 0x100, 0x1, 0xfffffffffffffffc, 0x2, 0x3f, 0x8, 0x5, 0x6, 0x4}, {0x1000, 0x16002, 0xb, 0x837, 0xffffffff00000000, 0x8, 0xfff, 0xfff, 0x7, 0x8, 0x3f}, {0x6000, 0x10000, 0x0, 0x2, 0x100000000, 0x9, 0x6, 0x8000, 0x8000, 0x0, 0x6, 0x5}, {0x3, 0xf000, 0x0, 0xffffffffffffff89, 0x7, 0x6, 0xff, 0x4, 0x10001, 0x9, 0xfffffffffffffffa, 0x9}, {0x5000, 0x4, 0xd, 0x0, 0x3, 0x4, 0x8130, 0xfff, 0x0, 0x14f, 0x3f, 0xfffffffffffffffc}, {0x1000, 0xf000}, {0x7002, 0x5000}, 0x2, 0x0, 0x100004, 0x6403c0, 0x7, 0x400, 0x0, [0x80000001, 0x8c, 0x7, 0xfd]}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x3, 'gretap0\x00', 0x1}, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x100, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e23, 0x193e, @empty, 0x5}, @in={0x2, 0x4e21, @rand_addr=0x7}, @in={0x2, 0x4e20, @rand_addr=0xfffffffffffffffb}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, [], 0x29}, 0x20}], 0xa8) 03:35:43 executing program 0: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc0109207, &(0x7f0000000180)) 03:35:43 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c00000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2254.340486][T12592] binder: 12561:12592 ioctl c0306201 20000040 returned -14 03:35:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x200, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f00000000c0), 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:35:43 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000180), &(0x7f0000000280)=0xc) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x104032, r1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f00000002c0)=""/127, &(0x7f0000000340)=0x7f) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x10}}, {0x2, 0x4e21, @remote}, {0x2, 0x4e22, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x80000000, &(0x7f0000000080)='yam0\x00', 0x3d5, 0x7c, 0x10000}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000000000000000800000000000000000000000000070df22e6ac28e42c2a00000000000000000018000000000000000000000500000000000000"], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:35:43 executing program 0: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc0109207, &(0x7f0000000180)) 03:35:43 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2254.508529][T12733] binder: 12671:12733 ioctl 890c 200000c0 returned -22 [ 2254.515931][T12733] binder: 12671:12733 ioctl c0306201 20000040 returned -14 [ 2254.534352][T12750] binder: 12748:12750 ioctl c0306201 20000040 returned -14 [ 2254.538695][T12733] binder: 12671:12733 ioctl 890c 200000c0 returned -22 [ 2254.578638][T12754] binder: 12671:12754 ioctl c0306201 20000040 returned -14 03:35:44 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000040)={0x2, 0x1, [0xcd, 0xffff000000000000, 0xe56, 0x5, 0xd395, 0x0, 0x4, 0x6]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:35:44 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/4, 0x258, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="06b42aea", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x1c) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) 03:35:44 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, 0x0) 03:35:44 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3300000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:44 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1, 0x1000000, &(0x7f0000000240)='-'}) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) 03:35:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x4, 0x0) getsockopt$inet6_int(r1, 0x29, 0xd1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:35:44 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, 0x0) 03:35:44 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a00000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2255.020080][T12970] binder: 12969:12970 ioctl c0306201 20000040 returned -14 [ 2255.036624][T12982] binder: 12971:12982 ioctl c0306201 20000040 returned -14 [ 2255.045663][T12970] binder: 12969:12970 ioctl c0306201 20000040 returned -14 03:35:44 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000"], 0x1, 0x1000000, &(0x7f0000000240)='-'}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0x0}) r2 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x24, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}, @acquire_done={0x40106309, r2, 0x2}, @enter_looper], 0xa1, 0x0, &(0x7f0000000100)="e6a4e423334bba8bc6f4ab9d61e08a990dfb79eed4eff34694b67de5295a896e400050c9559f713b07d8c360f6a3e0e799e70f23ac67307ebdb29d979b8dc01e17e072a4a246acc6167c919c7884c5f43f5f23b15ac116bf7092805124d7dbb22615f14673abc25dec217c5ddf7536d2d5f8479f5ed0be987821bba383d41506b4c7b08089a7f21ca7b0944936dba30337fc67d368bc1d29d999d9aad4d60ce04f"}) 03:35:44 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, 0x0) 03:35:44 executing program 2: r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$int_out(r0, 0x2, &(0x7f0000000000)) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000080)=""/4, 0x4, 0x0) 03:35:44 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2255.167223][T13166] binder: 13139:13166 ioctl c0306201 20000040 returned -14 03:35:45 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x5, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) 03:35:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffe) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0), 0x351, 0x100000000000000, &(0x7f0000000240)='m'}) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffff7, 0x400000) 03:35:45 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:45 executing program 0: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:45 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:45 executing program 0 (fault-call:3 fault-nth:0): r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000180)) [ 2255.965100][T13367] binder: 13139:13367 ioctl c0306201 20000040 returned -14 [ 2255.977056][T13381] binder: 13139:13381 BC_FREE_BUFFER u0000000000000000 no match [ 2255.990453][T13381] binder: 13139:13381 BC_ACQUIRE_DONE u0000000000000000 no match 03:35:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x1, 0x220000) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f00000000c0)=""/192) 03:35:45 executing program 4: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x80, 0x0) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000280)=""/52) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f00000002c0)={0x100000000, 0x3, {0x3, 0x3, 0x2477, 0x3, 0x101}}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x101000, 0x0) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{}, {}]}) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000011c0)={0x7, 0x7, 0x0, 0x27b, 0x6, [{0xb228, 0xffff, 0x0, 0x0, 0x0, 0x80}, {0x8, 0x1f, 0x8, 0x0, 0x0, 0x2004}, {0x3, 0x1f, 0x9, 0x0, 0x0, 0x2}, {0x1b, 0x20, 0x10000, 0x0, 0x0, 0x8}, {0x3, 0x7, 0x4}, {0x240000, 0x4f, 0xad40, 0x0, 0x0, 0x600}]}) r4 = dup2(r0, r1) sendmmsg$alg(r3, &(0x7f0000001040)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)="2589a60d58d015009449cdcd264256e24a3503012198a8b0e6948677b58d421224260de7c468151c4cc641948a1e322c41b6de69054f2b8af1f857a8c76eb3c0fd8822d5f46cf7ee5acc", 0x4a}], 0x1, &(0x7f0000000400)=[@assoc={0x18, 0x117, 0x4, 0xde}, @assoc={0x18}, @assoc={0x18, 0x117, 0x4, 0x5}, @assoc={0x18, 0x117, 0x4, 0x7}], 0x60, 0x80}, {0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000480)="b0e1712bae23c88e3ef46a9f82a7c1db6dcb28cb882b08401b5db1aadef089f06329219bb32869168c6d65853510b2a85426049d8bdc87e1b3318985d2be8161cbd908389f54916aaa0f8f609a66dc559c4b26dc46546ba131e9a3ca65a5521c9b1d0da495acf535ba5517c20842122d86859f0cbf3bbfd4c65df2ee52", 0x7d}], 0x1, &(0x7f0000000540)=[@iv={0x68, 0x117, 0x2, 0x50, "19583d78bf9d88a346009cf1c07e85e8f8b94ff0e917b3db1c35a0095abae560d8ce39f9789a54ed8693e5bda3573b6642a6ac9fd5743d28706b11dc37665e4f745235d08e3e66821bb3b4e75401b3a2"}, @iv={0xe8, 0x117, 0x2, 0xd1, "e3fd8a2f1bcbbc27697c1c9d07cdd6725849389564fe77407ea4361df34246e62ee7661728812de6d6c628487c9182a0643a49490f64f913030f92b69538db2fad70805b9c1a34ccdd9c7e700324325b94c45e45374a8488c45ffd4378c99796d4a6e9ec5d92733132070764139b6958968793259db61061a575d08ddd385894950bd5ff62c13d953aabf875000f0742f0512d23d6ce5a54a52dacfdddd4c2776c55cac6c64bab88a9ecbc270d7fcf6a741bdd595afb98a143fa8377f6763b24e049b4efdeed1423e877172d6e97aa1a0f"}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18}, @assoc={0x18, 0x117, 0x4, 0x821}], 0x1b0}, {0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000700)}, {&(0x7f0000000740)="874099bf83f97a7c1bc3497c5f8528cd47080e891250cb565588cdbd422e0b12b2b91e733658b5d0f9f151f35f1965a208aa6492c10d4bca7873d68c7ce92f08ffbfd967c16c4e7cb58a8eb5a9ad4cffb15f2cb0c0549799b1e9c279920d1675d086270b2c238664ec23c422ba7d6ab8cb3c26a550e32f2d29991984d33b8ee2489ce68ac422a7ad9f9f14a1d4e3481ed6630e364bdf555741b88c5c2122d4ff3f9ee568fe70a7772040883b0f830cafdfcdb5bee3440856ce9891fc2b8ef8c32f4bfb5c5d31fd12c0c5995c564b284d67de2db91a020ed38caf96cbcd8e8a5943", 0xe1}], 0x2, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1b0, 0x10}, {0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000a40)}, {&(0x7f0000000a80)="4ac6b1950c1a806033e6adcb2eaee4be76ee7015a63c4aae0433bb90562531646bacd2096fd0c268a24bffaf1079a72a793915bdae5a4fe0a6bfa9825c75746fbf92c0f7f85ce9e3c4a166e4318b39af07007bb8e6cb62520fdff15beb1d76d0f423f5aff427ca1f0673b6c365fed5cdffdb3b3e672d61398cac8e0dcfa222b1706be5e81d03625fb4c081074c824f3612d8013afd03d53bfdb5b1f8533a6db5e714553e21284d35d8a328a26d8b7f351392394c88207ae816c832f22b6b0ca8c8438e8634309b", 0xc7}], 0x2, &(0x7f0000000bc0)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x7fff}], 0x78, 0x4000001}, {0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000c40)="b6280574c30e186d8fc7d6403c0463148f4af32e489cb4", 0x17}, {&(0x7f0000000c80)="a9e96b3a8a74c4d0359a361cee44f1085c40733460d87743248c9d9a5c6d5f75c1c43ad1f800b5abfa14251dfc0927901aef6e8d0abac4aa0ad5489b32029b354ee7ccacdad9f6f04dda7924ad", 0x4d}], 0x2, &(0x7f0000000d40)=[@assoc={0x18, 0x117, 0x4, 0x9}, @assoc={0x18, 0x117, 0x4, 0x6}, @assoc={0x18, 0x117, 0x4, 0xf85}, @op={0x18, 0x117, 0x3, 0x1}], 0x60, 0x24000084}, {0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000dc0)="963675e2311739aa764373f2973cfe91d7c5e8d0be0406bf8a4bd4ae0d9a263c0924ee041303cd2cf00d1a8c95dfc1d48fe9fa2abaf06574fdfb54b4276e4e8ed7ac3058f45c3afdf38430aeaf4df597dbbdae0402122b9a524405fcc98e980416f49554727f8a6335eb", 0x6a}, {&(0x7f0000000e40)="0996848623716f17337d541cef17413018117a75176b9f7502d1cb345e08dc76d80a8482f83b965214f49d5fb10da4058473ced572ef4b48a063ded86b745e339544278795cd05d82f80efd464f2cdc3e2fc7583f370524724b2f4d3da8a8a05f26b5e1046f58d48ba50e811aa34687324a0a8865af5f984e12efec13f40b234fbfacce9d094c81b0782c122032a6ee89d79ed39445405ba59ad65461f72b904204e07284490c5c2d7d6e22cd2b8e86257cfbf88cf21d2b383", 0xb9}, {&(0x7f0000000f00)="bbd70e5d159ba1f5f0ef515622e2bf87dc2b915d8903b7848311c44ac0631b3763fa2981264a89cc3ed991928109c80ac227536020b9db80f8c01064b6d2aca29fc65432dc669a3e14f76a8f6f353c5b8926169ea11debc3a84cbea5efd7a5f68a7b967744aa4bc7fe37e5888bcb03bd60ca14843e1c980bb628d6ddcca37b75cc1663dae33e387137068f88c1b85ff76194aa5807565f6e95d39cf87047e2f886f899", 0xa3}], 0x3, &(0x7f0000001000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8001}], 0x6, 0x4044040) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000001340)={0x5, 0x8000, 0x9, 0x0, 0x0, [{r0, 0x0, 0x101}, {r4, 0x0, 0x9}, {r0, 0x0, 0xfffffffffffffffc}, {r0, 0x0, 0x3}, {r0, 0x0, 0x7}, {r0, 0x0, 0xfff}, {r1, 0x0, 0x1000}, {r4, 0x0, 0x100}, {r1, 0x0, 0x2}]}) 03:35:45 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800e000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:45 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f00000000c0)) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000180)) [ 2256.156953][T13634] binder: 13596:13634 ioctl c0306201 20000040 returned -14 [ 2256.180474][T13635] Unknown ioctl 19302 [ 2256.185460][T13634] binder: 13596:13634 ioctl c0306201 20000040 returned -14 [ 2256.195947][T13635] Unknown ioctl 19302 03:35:45 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x2000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000200)=[{0x2, 0x0, [0xfffffffffffffffb, 0x7, 0x3, 0xfff, 0x4, 0x4, 0x2, 0x17ad, 0x63b06cbd, 0x100000000, 0x100, 0x9, 0x0, 0x3, 0x7, 0x3]}, {0x1, 0x0, [0x40, 0x330, 0x40, 0xff, 0x7, 0x180000, 0x1f, 0x7fff, 0x7, 0x101, 0x2, 0x209, 0x10000, 0x3f, 0x8, 0xffffffff]}, {0x8, 0x0, [0x3, 0x400, 0x4, 0x7, 0x81, 0x5, 0x0, 0x5, 0x80000000, 0x5, 0x0, 0x800, 0xffffffff, 0x8000, 0xfff, 0x4]}, {0xc, 0x0, [0x5, 0x6, 0x3f, 0x7, 0xff, 0x9, 0x61c2, 0xd92, 0x400, 0x3, 0xfffffffffffff3d1, 0x9, 0x6, 0x36, 0x800, 0x5]}, {0x26, 0x0, [0x1f, 0x10001, 0x74a, 0x8, 0x1, 0x1, 0x6, 0x4, 0x1, 0x0, 0x2, 0xcf1, 0xff, 0x7fffffff, 0x3, 0x4]}, {0x8, 0x0, [0x81, 0x3, 0x7, 0x3c0cc06c, 0x7, 0x0, 0x1, 0xfffffffffffffff8, 0x3ff, 0x7fff, 0x7, 0x1, 0x2, 0x7f, 0x0, 0x6]}, {0x4, 0x0, [0x5, 0x1, 0x3, 0x12, 0x8, 0x5, 0xfffffffffffffffa, 0x3, 0x3ff, 0x9, 0x5, 0x3, 0x9104, 0x1ff, 0x4, 0x4]}, {0x4, 0x0, [0x10000, 0x5, 0x5, 0x7, 0xffffffffffffff46, 0x6, 0x4, 0x8, 0x3, 0x7, 0x2, 0x93, 0x9, 0x100000000, 0x9, 0x1000]}, {0x22, 0x0, [0x4, 0xfffffffffffffffc, 0x6, 0x9, 0x0, 0x4, 0x5, 0xc4, 0x100, 0x6, 0x401, 0x10000, 0x511d92eb, 0x3, 0xea, 0xa5f3]}], r1, 0x1, 0x1, 0x288}}, 0x20) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @null, @rose={'rose', 0x0}, 0x1, [@null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x200102, 0x0) pread64(r3, &(0x7f0000000580)=""/4, 0x4, 0x0) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3f, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={'rose', 0x0}, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 03:35:45 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x105800, 0x0) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f00000000c0)={0x0, 0x6, 0x8, 0x8001, 0x8, 0xfffffffffffff801}) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0063404000000000000040000000000000000000000000000000deffffff000000000000000000000000000000000000000000010000000000000000000000000000"], 0x1, 0x1000000, &(0x7f0000000240)='-'}) finit_module(r1, &(0x7f0000000100)='\x00', 0x2) 03:35:45 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8035000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:45 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:45 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) [ 2256.326793][T13802] binder: 13740:13802 ioctl c0306201 20000040 returned -14 [ 2256.346047][T13802] binder: 13740:13802 ioctl c0306201 20000040 returned -14 03:35:45 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86ddffff00000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x91) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000000c0)={[0x3, 0x9, 0x5, 0xffffffff, 0x4, 0xe42, 0xa3d, 0xff, 0x8, 0x7fff, 0x400, 0xfffffffffffffffb, 0x2b4b, 0x101, 0x6, 0x6], 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x9135, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000e000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2256.506681][T13961] binder_transaction: 23 callbacks suppressed [ 2256.506697][T13961] binder: 13950:13961 transaction failed 29189/-22, size 0-0 line 2994 [ 2256.544058][T13961] binder: 13950:13961 ioctl c0306201 20000040 returned -14 [ 2256.846153][T13565] FAULT_INJECTION: forcing a failure. [ 2256.846153][T13565] name failslab, interval 1, probability 0, space 0, times 0 [ 2256.863770][T13565] CPU: 1 PID: 13565 Comm: syz-executor.0 Not tainted 5.0.0-rc8-next-20190228 #45 [ 2256.872857][T13565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2256.882929][T13565] Call Trace: [ 2256.886202][T13565] dump_stack+0x172/0x1f0 [ 2256.890541][T13565] should_fail.cold+0xa/0x15 [ 2256.895133][T13565] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2256.900928][T13565] ? ___might_sleep+0x163/0x280 [ 2256.905763][T13565] __should_failslab+0x121/0x190 [ 2256.910687][T13565] should_failslab+0x9/0x14 [ 2256.915185][T13565] kmem_cache_alloc+0x2b2/0x6f0 [ 2256.920029][T13565] ? kasan_check_write+0x14/0x20 [ 2256.924963][T13565] taskstats_exit+0x6c8/0xcf0 [ 2256.929646][T13565] ? taskstats_user_cmd+0xce0/0xce0 [ 2256.934856][T13565] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2256.940078][T13565] do_exit+0x3d4/0x2fa0 [ 2256.944210][T13565] ? find_held_lock+0x35/0x130 [ 2256.948969][T13565] ? get_signal+0x331/0x1d50 [ 2256.953560][T13565] ? mm_update_next_owner+0x640/0x640 [ 2256.958919][T13565] ? kasan_check_write+0x14/0x20 [ 2256.963837][T13565] ? _raw_spin_unlock_irq+0x28/0x90 [ 2256.969041][T13565] ? get_signal+0x331/0x1d50 [ 2256.973623][T13565] ? _raw_spin_unlock_irq+0x28/0x90 [ 2256.978820][T13565] do_group_exit+0x135/0x370 [ 2256.983410][T13565] get_signal+0x399/0x1d50 [ 2256.987941][T13565] ? mon_bin_get_event+0x450/0x450 [ 2256.993038][T13565] ? do_vfs_ioctl+0x120/0x1390 [ 2256.997795][T13565] do_signal+0x87/0x1940 [ 2257.002029][T13565] ? ioctl_preallocate+0x210/0x210 [ 2257.007160][T13565] ? __fget+0x381/0x550 [ 2257.011296][T13565] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2257.017515][T13565] ? setup_sigcontext+0x7d0/0x7d0 [ 2257.022518][T13565] ? kick_process+0xef/0x180 [ 2257.027104][T13565] ? exit_to_usermode_loop+0x43/0x2c0 [ 2257.032467][T13565] ? do_syscall_64+0x52d/0x610 [ 2257.037225][T13565] ? exit_to_usermode_loop+0x43/0x2c0 [ 2257.042575][T13565] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2257.047838][T13565] ? trace_hardirqs_on+0x67/0x230 [ 2257.052875][T13565] exit_to_usermode_loop+0x244/0x2c0 [ 2257.058191][T13565] do_syscall_64+0x52d/0x610 [ 2257.062902][T13565] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2257.068771][T13565] RIP: 0033:0x457e29 [ 2257.072673][T13565] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:35:46 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000180)) 03:35:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000080)=@l2, &(0x7f0000000100)=0x80, 0x80000) getsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0063404000000000000000000000d47b718b000000000000000000684b000000000000000000fcffffff00000001000000000000000000f5000000000000000000000000"], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:35:46 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/4, 0xfffffffffffffffd, 0x0) 03:35:46 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8847000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000076c500f512ab7e3a7dccfc219704b1026b9f22e1c22b49ac24d078234e4356f8c4c877ae377aaf284bc824d7f38d9fc5db596ab5407a722bfc0ac75d107a8a4cb86f9c40e6c7716c98823fab42bb0e085fba6962c31fb79c9e3a2f769410b574749766110d00a57fde0401bfdae6fe8693a1b9a4461b9a42"], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) r1 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x5, 0x82) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000180)=0x3, 0x4) openat$smack_task_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/current\x00', 0x2, 0x0) [ 2257.092256][T13565] RSP: 002b:00007f1eccbcdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2257.100649][T13565] RAX: fffffffffffffffc RBX: 00007f1eccbcdc90 RCX: 0000000000457e29 [ 2257.108601][T13565] RDX: 0000000020000180 RSI: 00000000c0109207 RDI: 0000000000000003 [ 2257.116558][T13565] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2257.124543][T13565] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1eccbce6d4 [ 2257.132520][T13565] R13: 00000000004caa88 R14: 00000000004d4370 R15: 0000000000000006 03:35:46 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2000800000003, 0x0) pread64(r0, &(0x7f0000000080)=""/4, 0x4, 0x0) 03:35:46 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8848000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2257.185385][T14066] binder: 14064:14066 transaction failed 29189/-22, size 281474976448512-256 line 2994 [ 2257.203977][T14072] binder: 14069:14072 transaction failed 29189/-22, size 0-0 line 2994 [ 2257.207059][T14066] binder: 14064:14066 ioctl c0306201 20000040 returned -14 03:35:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000001c0)=[@clear_death={0x400c630f, 0x4, 0x1}], 0x16e, 0x1000000, &(0x7f0000000100)="e3486c5d41bb7e513b4f"}) 03:35:46 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8864000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2257.263639][T14072] binder: 14069:14072 ioctl c0306201 20000040 returned -14 03:35:46 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r2, 0x3}}, 0x10) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) [ 2257.335796][T14201] binder: 14164:14201 BC_CLEAR_DEATH_NOTIFICATION invalid ref 4 03:35:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:35:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$CAPI_CLR_FLAGS(r1, 0x80044325, &(0x7f00000000c0)) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = fcntl$getown(r2, 0x9) getresuid(&(0x7f0000001440)=0x0, &(0x7f0000001480), &(0x7f00000014c0)) stat(&(0x7f0000001500)='./file0\x00', &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r2, &(0x7f0000001640)={&(0x7f0000000100)=@abs={0xc1307972b5df46db, 0x0, 0x4e22}, 0x6e, &(0x7f0000001400)=[{&(0x7f0000000180)="de59ff7e72f37765a4336611a2e6444c68527fe0dc700b9d69544004760b8de6562a0515cf41efa37751d15728705d7db83d5492", 0x34}, {&(0x7f0000000280)="70d58b4a2c9f63d34ff482bda01ecce2dfe0e862d266ecfed253c104aea9cd1e863ae5763db2335a310fe1e1dc31b5dacb9712356dd2ce4cacf5bfb996df8a5719ae80e35bbf55d6c9cb54822fdf79846a99f68d2dab49647eb00c58d54db53e7bbc052cefac043fdf39b2d57d7d318a141c4f8f2cb5ea69db97df31", 0x7c}, {&(0x7f0000000300)="69577699fda2346eb5d6b57d8dc7d0a3a52b4cec6ed812db3a6ab121627292fa78cb6a72a0c8c406058f8653f9e087012280344ab9d79586616d967c24b93882dbedbef7bc9dff8d31767f7692aef6db435ccaf50111157fe45ee904e5429f285dc90d1d5efd160dfa10b5db0328549d46c8404893f3745632698628282e93e7880d7275b2c40f8b712bf54739cd439f84b76614b0b085b5e9a6e583be359b40eab972ce1caacd3e52f1f0e28e93d07ee1bd19c1e8b9003fad145660e8c5beb063321d5b794c8432ed880db8fa36999a6170337d058e", 0xd6}, {&(0x7f0000000400)="e42a79d3f15d2f95a86c0efe0172a5615ead968e759b61dcd9b35879edb8fc53de9f0a3bbf2cc9bd1e95cb91ffc7d13fc0cbaeaa518d458d72edfd69f95f8d7bdc40daeeaab014f325a2bda257c7e3b68aef80c00d4d391633b9b718df352148c00ed78f68e2dd968301e69d296b78c886e3171bf1bb9939fa21813ab86a8016a977cd38222f32dc8f7f5553edbfa2ae26bb71c76af606c1c0a1ac2e6e0f257af8231ed774a8b5e95296c215713b2295e69d09a46d6119faa0a82632efefbbc3b5b6e4ba73bcdd74c625cff460c11de9c7ffe401302913a68fecd8dfbf91118bbb446fc26a04db1b4b115ac65fc48e26043e5b76b707ad54db83efb3a2bce1afa5c5614a50b7160b37fb7daaa5f1189a4567e719f2bd400f7591cee164ed7177b420b2453842bae716bf2a952b20132d62bf81e76d7506945430ca3963cd147e347f84458adce45f3bf3d058294f35564631c20acd23357e8c1c30ea4ea12c61669647550ec38bb5d338e6a7c5e474008173e4550d9a6df2b3d291135214d4545f6615c3a3c824f1b0931e246e262057cb26059508c6d45e287bee2e65c8fa0c5f471de45a656ed22c334275f37414b5014c1dff5e76cb361d9d4f99abf89c8f2c62c1c3dcf03d07b89865c3317d2131422b4893b04fff393ebc27e00adfa67bd2cbe527a15987dcb3ac4bd6f6cc8b224096489717084ba45b93a54e3ab5f7f7ad2d668a099f8fbbc75135b3c22d2d0da5edff2f8eef3ccd714cac2e2f5adabe7fc8251db533a8f98144ae79aea340626897ae4615b6247801d8a7e3966bcd2784c3a746a61ed938b1afa917bd95bb9c8bed79badf253e5592b9f95e9d739f1a80bf05b368fdb8deea9b1a315df3028b0ffd25bdf16f9f64692bb1d45fc13752a08caea481d6578c877e6391db2453951f0e116750e95597deadfd1884fba1fd97a615af451cb9fa00e61d46f6497e85fbe0072a31937ca18ce44c22ab14bdd4c4d9db86e23b0d4f37043a790424c02373437db37e762937283ad21d2eb293caa910636bc2e32b8fb9940f15a0ad8dcc3744934f1ea81b477e60dbb9e51c4784455f6dbd40cdf29e3a1da9168a5c4bde95b7d1d4ec23993063ed8324a37df0e3c48aa772eb6c6403f341410cf04c44a2be64ca5546c8d937e659246d0ac02efba7d75a194af1d26f895c9e07a82491d165e0395e4d5473b5bba1624bd39f456061ec37c972f530765110639e50b60ee58268d9f871a80d2e6fb97c7f1fce6bb7abc2435effab56b52393c1ddf472ef9a1122741c19876aabbc51b8c75eefa28714a3549b443548918aaf062667ba52e82f5ab0e3d27a9b461631d16ce722abe51b433515edbc484fd9728b11061f153f47a82ee9204f2dc021c9188d8dd978208a8906217ca267dacb475e40444f095ff1aea56c329741540ba7c275dd9bb9ed145428edb58c7a477ac0d5ce2ef9d149d0635ecb330c030f3b89b7540e26ec7740577aaec42a2a52c8c9b0b5a2c4af330e0c1d58c1eba5a2bf1b224ceb96c8176ea38c6bafcda48ce3312f1a3996e26e92ef6f722295952e032faad9bda01c3efecc6a43fddd0f3a06f154257901adea4e601cc6b9aec3a2c2fd3e93f92b758eada7868e2b19a28e721d332b225f31d34e5a0858142423588ecb775748c19a735eb9681a3bf3c01c5b6668755c1a8b2d748d5e33c0828ada4a830da39a07d4d3a7340d18e18b5886e131622e5fe9aebae3410026848d21b27b8b46ebd33d72b6ccf64cb0bf78dbb53e855af3b1e06e972e9bf0570ad23a4588c860e23ce64ca105075eeb88eb91423b29edb8bf5c20b5cd1b7f5980312e062cc6e380e3ebce9522ace94007405b3b147503bb78cf4a5fbabe0bf824ed61538c9ae6de67358f58437278e03ced7a5f37ce30c3f97963ff5b01f3aa13ca1523edbeeb1536811a28cd00acb03f1433cf4cac463436087eb2f6cfa05666970d73278916f8a269e57174f6d307321db1b6e3040a2fdf3ece33f278fdcc56055188e8978b3deb505ad8aaa9745349e794adb42cd21f7cda9300539818b66eaea87cbdbeb23c15a17aed1aac57d029f1f8dbeaae225e59a8ec573c802d7fc0eeb9c83f5eb081fccaa1597d269f00d2db4345453c683b5ec2d884d8401366382a249807f64cb9e35468833b8237348c5363c4f48eeec79c8fce7cfbb5ea30652432a8740c95d5db6a423cf902316d16c9800879b7d8e9a0f92a163e50950a9035007d052c029095f0efd5e8c1e0879b8bc82d9beadb2a2e70948006e9deaa787e418507fa440e5fb266775484eea8378e118fe3c28d190f08caea8c2ccce0bc43246e590300545b227fbf09707d648191e9d53cd83eb8bd519cf47e924f94f3d8c070d20650f6c6a8563cd77fe4ac9afb9134ba18b1c5d3cebfedc71a1b96e9df1597dd5f0690c0981991ccbedb15937ee8ae6d12e32b3ec28cc94e3672117fec93bbd929411c8acf369affc20e5899637c2ce67289d3e12d9ef0b4857fb425f634d110bc94b0fdf836363d415a4e59f84680ff706ca9d36e81dd1199b6f8b7172dae48023289cf716375b109ceccbcbeaa13d9d63bf4bf8925267ef929b6fa377bfc93c0a2ab2712aff60d8b0155836cea3f025f20b47103881e70d918eb5ad5d150f5fbcd18107a129a8764d467960ac17caef5b2046b7f683393d3dd6fd965943d56c7437005de9eec97756cd320177e38e45dbf7923a6813a7e1469a252e3e4767023b6a6ed4ca9e066f6738b816e37f83f02ca496f29a8b23dca2af776af1e7ef3a52de846edf78ded74ca5bab1caf614323943c983e4a0f616c1542ada0f11038830a8695233401bf213ea42f30a377bfe358215a58022912fc8e655deaeb65c371b075243c06489928d9c99cb9a4e9fee3dc108b90f889ce55f7c9fc0174043eb1ac824a4e5c9c8a686adfeaaff3185d6a618b31bbc89ff6de888fba7586ea728a5838bf60e3a34c1efafc913d7cc138fcfb006dff96883721f1397fa704f1364f190309da86c3a0a80da43ebe9ac6dee4c369a7dff60d5072953a8cc8b2358944ca8e6eaebc6136c441f3385a6e0df52eb0e4692ff5dc3d2d80fc0921958465e7ee5469137b6afb5e9c042e1a107f604b4ee51782ccb0c945a1ec0ac3f33ff2841029fcd6a1fc362b726185883f024180bf3cf011d883b9ba54869ecf8b09654477f05e17fe547fdfd196d496762ee8773cc8d73217b2940eb6327cf0a1757e10d91ec9b194d9a9f6a92960ef1fa67d75368443e329cd63b5bec2a8b151814804739ca9a422c447aa6b8a48e5b0e21622ddeb44d617aad3fc7ae9cc7d6bcc419e86ec5a6856c761053722f237a26c5dfb5d3a665d509728ccd31ff2c50f8d7dcdacf9f9a335d3ca926f4b32c6270461a3f8ed718bb7975d57a0c4bb6c6de2c9116d92da0a55a7171e3e51f836dc8b0cc5388a1894d43b5b607a3b2bb45601ce98d9d7f6192602673f820369f46197e4859c6058f131ec431349f7da006b067b2d645e5f291c54159ead38f6cb40a234a5887ca9640a34d0139a4cc71ac696c985f0c41b8efe6ff9268e759e1d08706624bd9b97e0517c69e8812379b80ce6519f1d291481127ea9079a38a0b4e8e178485949487263d1a4d3ee20d87e6e134caa5d7d713a7117412d106adf581394a4dd400cdbf4b484305cec182b39f6e86621a8730f79d8d7cc12a1aa1a6ff52bb09ac0e1445d9268c4ef6a940cde9c65dd0d7081766ca6eac002956fd996ae0d705ade3889f12d0429c15b6c4da7ca66b60e25423ccd274100c7368a74ae85ca4c2b9c9f4ea3a94b86a0adf9c77e214e1665fef7eafc372159555c0c79a7758ffdca9847d78da15d23597802ab6ee698e7fd88a53adeb5d29451b788b574c64aea3e970b3e56376dc6abd83900a801cae6ff33f72a65c640f81107d3a63528bbc57a695af4106b3c9c7923979633a16d57547927af134a4cda06edb03e89386d329f8434ace132dcc44bf4a4fc94f3db658871561fe96e99fd163574a81881b0930be74e8e4abe2ad196b4af3a6b6179d91cce9f23d948336402f2c1afa268de60a2e980a5262b6ce582441e9bbce5743b89b88a92d9373b5f6d19cb842c841ada1491b465a03a099f7ec43e212a17f712e4f687dcacb674ae944ca352fd89e18893fa6a195478fb3e7bb10308df7bc669d317f707a46a0b51bdc2a03169eb7e4a739f64553b9460ed2d754ed18834f35caac392eb0d616cef93a4abc8d372483bdfebfa30f2761229351673f52357905b58d0711693fe4e8b05fdd170dd340d8f1f894c8cfea121a1734d3287fc37f6539f5160731a13d27b1f7d8c8cf8cb86f3f4b4d119e0ff8d6024fdc8b0a98fb39b96fee45ec935487b7183ea703c362880ee051bba291d3fad9862fd8f6fae4a3584d002dc8cbab750600b53cd42dbc89e96b8657f7555b11ce6256b79bb89ba7d7dccfe02b7a5d57480bbe4d3849d5dbd95d201fcf6abdb0f4e8df14af23fd1c4389103efd6b77c37b0e9a39635bfbbd552f0d17c9030e7d19bac78dd48e6ef02310609e3f12b440de025cb72fe0a2b6129b55c559a0d2efbbc52cf7ecdcfc88cbbf515d1fb255462839c4fe58096a54d3ae34c8318118a2d4b00f252933a2856612227c8583377da60c08a227aeda4bcf8f71f15c0de84ef39fec44f912c4a728d177448c31ffb77fd7fc6dafc8b35c0ece629ed1578372cf42129fa7291b2837c99efb0ceb394de17adb33d77f47af233a23c3a9536fbf354ab849372071d27b4e62f81806a1650b46b0833b72b73c49fdfc41347c8563173f8a1876fb0331d17be6778c9c230b8099664f5b229bb5a02b278df349469206825b778c75f03e62eebf2ea6b8fa9f245c2360acba2d3dcac861f4eae018912ec5f230ef8ae98d8a3f114abc4c495e9c45c5b1a46264691ecb1ab300f5e11c751fec187587346b51ab448368cd66d9c1487d6fb03e7aadc1e705ab50b05c5d227c1be79fc78a98944c2bff9398dc01e7aef52f0dc74c3bc51cb3c7b405372f28b63c86a9d415677d3f0ffc37fcb3041b1d92f2e3a1076be12f26cafdc240d28ec4c514f0eefe8e0837ed2364e8168cad09fe9fd6cbacc926f76cae126e1dccaf48ba2d694084fd2c2a4b9d039e4c200f0251b61c87f963db100722d22a20b899de7f2056bae7f1216ff52df261a4476af00849a53f5a427d2e8d74878572254b5d2460d8566c55259e61041157c0fdba45396f4afefdff2eb49a61b08aa3c41544352a5b815d857adaf62ac086551e91d402d65eac04c2f900971890076e17b0e30d617a300a4c45deab363d5e4d2918236d24525b530db881bb03ee268e6bb2905d1c93ad4ace26e215f316d883d75bcca58f338b84efb7a163e502a205f5ccbf2cd9ad6cb76f4c25aae2ea68560521857d6c774c9a2802c304599d0aec7ec938058fdfe039c32b327c368d5308790c53b31d1e6b33d23c3d002eb48d9afb4cbc3f17d3795112eb4963f22159ebb3d8a7fad1cc438c448cae1ba7aafbdd3fbffb575ad8d12f224542548364d1d19080964c1ee90a16e6bf93fec68585d463897d8faf62b067920c1c198a6fb0d353a02690fbe020058f8f59521a578106f638628e608fbcd1793d81aca27861efbf1ac5d7709d02cda773671c2aa755e97c5e1bfc79c161ddd64edf7823a4c302eeb11722589415f5aa676d6c9e8f83f053ab639ae99a4299b5ec77a051cce8b5a2b7e60109d6c0db159688d6f0d32f69a29d5dfd951a2d190f1ed8ec10315bf0a", 0x1000}], 0x4, &(0x7f00000015c0)=[@rights={0x20, 0x1, 0x1, [r1, r2, r2, r0]}, @rights={0x18, 0x1, 0x1, [r1, r0]}, @cred={0x20, 0x1, 0x2, r3, r4, r5}], 0x58, 0x800}, 0x8000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x10012, r0, 0x2c) [ 2257.510521][T14297] binder: 14293:14297 transaction failed 29189/-22, size 0-0 line 2994 [ 2257.522162][T14298] binder: 14296:14298 transaction failed 29189/-22, size 0-0 line 2994 [ 2257.533759][T14297] binder: 14293:14297 ioctl c0306201 20000040 returned -14 [ 2257.540784][T14298] binder: 14296:14298 ioctl c0306201 20000040 returned -14 [ 2257.558608][T14394] binder: 14293:14394 transaction failed 29189/-22, size 0-0 line 2994 [ 2257.567752][T14394] binder: 14293:14394 ioctl c0306201 20000040 returned -14 03:35:47 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x2, &(0x7f0000000180)) 03:35:47 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/4, 0x4, 0x0) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000140)) write$P9_RUNLINKAT(r0, &(0x7f0000000100)={0x7, 0x4d, 0x2}, 0x7) r1 = accept$netrom(r0, &(0x7f0000000180)={{0x3, @bcast}, [@remote, @remote, @remote, @netrom, @bcast, @rose, @default]}, &(0x7f0000000000)=0x48) fchmod(r1, 0x110) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000000c0)=0x1, 0x35f) r2 = syz_open_dev$video4linux(&(0x7f00000002c0)='/dev/v4l-subdev#\x00', 0xfffffffffffffffe, 0x400205) close(r2) 03:35:47 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff00000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x18, 0x10, &(0x7f00000000c0)=[@flat={0x776a2a85, 0xa, r1, 0x2}], &(0x7f0000000100)=[0x58, 0x38]}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:35:47 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000200)={{&(0x7f0000000240)=""/179, 0xfffffffffffffeee}, &(0x7f0000000040)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:35:47 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2258.077688][T14410] binder: 14406:14410 got reply transaction with no transaction stack [ 2258.091306][T14414] binder: 14409:14414 transaction failed 29189/-22, size 0-0 line 2994 [ 2258.091951][T14410] binder: 14406:14410 transaction failed 29201/-71, size 24-16 line 2899 [ 2258.115027][T14414] binder: 14409:14414 ioctl c0306201 20000040 returned -14 03:35:47 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88caffff00000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:47 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x5421, &(0x7f0000000180)) [ 2258.121682][T14410] binder: 14406:14410 ioctl c0306201 20000040 returned -14 03:35:47 executing program 4: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x600000, 0x0) ioctl$TIOCCBRK(r0, 0x5428) openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x101000, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:35:47 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8906000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:47 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x5450, &(0x7f0000000180)) 03:35:47 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/4, 0x4, 0x0) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) 03:35:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) r1 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000500)={0xffffffffffffffff}, 0x0, 0x100d}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000580)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000002c0)=[{0x2, 0x0, [0x3f, 0x5, 0x1, 0x2, 0x3, 0x6, 0x1000, 0x80, 0x6, 0x9, 0xf8fa, 0x3, 0x0, 0x8, 0x8001, 0x9]}, {0x4, 0x0, [0x81, 0x6, 0x6, 0x401, 0x9, 0x1, 0xffffffffffffff86, 0x80, 0x2, 0x80000001, 0x7fff, 0x7, 0x400, 0xca43, 0x3]}, {0x30, 0x0, [0x1, 0x4, 0x100, 0x50, 0x8000, 0x1, 0x9, 0x3, 0xfffffffffffffffe, 0x2, 0x1, 0x253c, 0x5, 0x401, 0x5, 0x94d6]}, {0x12, 0x0, [0x100, 0x9, 0x0, 0x4, 0xfffffffffffffffd, 0x81, 0x6, 0x100, 0xd5, 0x3, 0x1000, 0x10001, 0x6, 0x6, 0x40, 0x1000]}, {0x2, 0x0, [0x1, 0x3, 0x1, 0x80, 0x6, 0x4, 0x5, 0x50, 0x7fff, 0x7, 0xff, 0xee, 0x8001, 0xf85d, 0x136, 0x584a]}, {0x1, 0x0, [0x9, 0x9291, 0xfffffffffffffffa, 0x5e, 0x5, 0xfffffffffffffffc, 0x10000, 0x9, 0x3, 0x40000000, 0xfffffffffffffff9, 0x2, 0x6, 0x5d, 0x100000000000000, 0x20]}, {0x0, 0x0, [0x40, 0x3, 0x4da, 0x8, 0x6, 0x5, 0xd2, 0x2, 0x7, 0x9, 0x9, 0x8, 0x5, 0xfffffffffffffffe, 0x9, 0x6]}, {0x20, 0x0, [0x9, 0x80000000, 0x0, 0xe92, 0xfffffffffffffff8, 0x3, 0xbc, 0x65, 0xf5, 0x3f, 0x2, 0xffffffff, 0x10000, 0x100000001, 0x3, 0x100000001]}], r2, 0x1, 0x1, 0x240}}, 0x20) 03:35:47 executing program 4: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:35:47 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89ffffff00000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2258.390985][T14634] binder: 14632:14634 transaction failed 29189/-22, size 0-32985348833280 line 2994 [ 2258.415725][T14634] binder: 14632:14634 ioctl c0306201 20000040 returned -14 03:35:47 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x5451, &(0x7f0000000180)) [ 2258.447857][T14634] binder: 14632:14634 transaction failed 29189/-22, size 0-32985348833280 line 2994 [ 2258.477365][T14634] binder: 14632:14634 ioctl c0306201 20000040 returned -14 03:35:48 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f00000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:48 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000006, 0x1050, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000100)=[@reply_sg={0x40486312, {{0x1, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000080)=[@flat={0x73682a85, 0xa, r1}], &(0x7f00000000c0)=[0x0]}, 0x100}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:35:48 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:35:48 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000000)={0x7, 0x6d, 0x2}, 0x7) pread64(r0, &(0x7f0000000080)=""/4, 0x4, 0x0) 03:35:48 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x5452, &(0x7f0000000180)) 03:35:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x10200, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2258.960695][T14954] binder: 14951:14954 got reply transaction with no transaction stack [ 2258.979390][T14952] binder: 14950:14952 ioctl c0306201 20000040 returned -14 03:35:48 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc00000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:48 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x5460, &(0x7f0000000180)) [ 2259.012718][T14954] binder: 14951:14954 ioctl c0306201 20000040 returned -14 [ 2259.040968][T14977] binder: 14951:14977 got reply transaction with no transaction stack [ 2259.050304][T14977] binder: 14951:14977 ioctl c0306201 20000040 returned -14 03:35:48 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) r1 = mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0x48010, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x8, &(0x7f0000000100)=[@ptr={0x70742a85, 0x1, &(0x7f0000000080), 0x1, 0x2, 0x24}, @flat={0x776a2a85, 0xa, r1, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0), 0x1, 0x4, 0x3f}], &(0x7f0000000180)=[0x18]}}], 0x5e, 0x0, &(0x7f0000000300)="14009cddc87e6376e80dcb93062d2de3b35937842bdb2aaa55e2ea0a42852c9a841b9c45c3edb7be149975f3dac9fe0dfcc3264c7fd6aeb85e431562aa74c104db8a9a9dfd572a15185e351115fe4f17c179b65feedc81950ae29ab1fe9a"}) 03:35:48 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:48 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9201, &(0x7f0000000180)) 03:35:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) 03:35:48 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfec0000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2259.181104][T15070] binder: 15067:15070 ioctl c0306201 20000040 returned -14 03:35:48 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2259.233514][T15075] binder: 15072:15075 ioctl c0306201 20000040 returned -14 [ 2259.242193][T15075] binder: 15072:15075 ioctl c0306201 20000040 returned -14 03:35:49 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:35:49 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9204, &(0x7f0000000180)) 03:35:49 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xffffffff, 0x0) 03:35:49 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/4, 0x5ca44607, 0x0) 03:35:49 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2259.896063][T15387] binder: 15385:15387 ioctl c0306201 20000040 returned -14 [ 2259.916356][T15387] binder: 15385:15387 ioctl c0306201 20000040 returned -14 [ 2259.969379][T15435] binder: 15067:15435 ioctl c0306201 20000040 returned -14 [ 2259.989911][T15436] binder: 15067:15436 got reply transaction with no transaction stack 03:35:49 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000e15e08000000000000000000000000874dcc1683ab47a190951c2dc2fc78d60a4ac27731a00cffa749ae2c"], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:35:49 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9205, &(0x7f0000000180)) 03:35:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x3, 0xffffffffffffffff) r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000001c0)='/delo\xff\a\x00\x00\x00\x00', 0x0) pwritev(r4, &(0x7f0000000480)=[{&(0x7f00000004c0)}], 0x1, 0x81804) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x2000006) r5 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000010000000000000000000000000000000000000000000001000000000000cfb8f99b4b00000000000000000000ca10d4d019556b04fc43000000000000"], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:35:49 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:49 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:49 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f0000000180)) [ 2260.131663][T15510] binder: 15508:15510 ioctl c0306201 20000040 returned -14 [ 2260.148901][T15509] binder: 15507:15509 ioctl c0306201 20000040 returned -14 [ 2260.176544][T15510] binder: 15508:15510 ioctl c0306201 20000040 returned -14 03:35:49 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7fff, @bcast, @netrom={'nr', 0x0}, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r2, r1, 0x5, 0x7d, &(0x7f0000000200)="2af6ca524e2158f0d3694c44d641a436ffa0a35c051ece63c75b6308686f34836e7c018040b5c41644b280395a90dd3756669979d01b04792a3e48c86f51017f4825d8764bb37d5ded0ceeb263c90c9ac2a427f11e02d1be63709bceea1c78cd7865dcf19d65153086cf3da27f5c5c93d528654d1060d7619e95af6206", 0x5879, 0x1, 0x40, 0x0, 0x7ff, 0x2, 0x7fffffff, 'syz1\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x117, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r3, r0}}, 0x18) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:35:49 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:49 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1, 0x1000000, &(0x7f0000000240)='-'}) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000000c0)=0x8, 0x4) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000080), 0x4) 03:35:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) socketpair(0x100000000000000d, 0xf, 0x8000, &(0x7f0000002780)={0xffffffffffffffff, 0xffffffffffffffff}) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x800, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000027c0)=0xffffffffffffffff, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xb2a, 0x2) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f00000000c0)=0x6, 0x4) 03:35:49 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40049409, &(0x7f0000000180)) 03:35:49 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/4, 0x4, 0x0) write$smack_current(r0, &(0x7f0000000000)='/dev/rtc0\x00', 0xa) 03:35:50 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x100000000802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2260.861684][T15829] binder: 15820:15829 ioctl c0306201 20000040 returned -14 03:35:50 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:35:50 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="89b117ef55aa090abb20720063404000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014da9309aa194558903c8df7b47629c19d82c88d2930c70cc31a118d97ef084d25203d91562440ef8ab5b594bf1f1f8b22d367a29170f418e40a40faae0d1c937ece21c301dcf050030000000000000018a605a79fdc6a6f23c9edf5270e7eb9f4729314a5f212e0f2702c8d70ddd57e629c57af08b6ca0134f4445c23dcbb3669a83fe9605eaed55cd6176fc89125357e332521b33b69ab510f28d14d3216279f9fb358792ad4788d9fa40c250887c02299dea9f6a6d2bb52274d36f646484a0672cc17ebc98ca043f048daba95e4"], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:35:50 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2261.031893][T16038] binder: 16021:16038 unknown command -283659895 [ 2261.044051][T16038] binder: 16021:16038 ioctl c0306201 20000040 returned -22 03:35:50 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x3, 0x0) pread64(r0, &(0x7f0000000080)=""/4, 0x4, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000180)={r1, &(0x7f00000000c0)=""/141}) [ 2261.103072][T16045] binder: 16044:16045 ioctl c0306201 20000040 returned -14 03:35:50 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:50 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x3, 0x2000) ioctl$CAPI_INSTALLED(r0, 0x80024322) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340400000000000000000000000ecffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:35:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000d000000000000005b9e8a073500000000000000000000000000000000000000000000000000007424aafd5fed2e13550564fbcd6de36feab6fa7a1c37caf42a99c12cd795aec40a8734f7ea598cc4f4833d745db1933f6a9bf82a825913191ed878304c456dfbd3944191d0814daf14a6e3f6693a2db92fc2637118bb8fc83c0420a523907ea9e91817305eef0189aa6e794007c0a9f2ec569df08be62c8afff13956856792ee663f4d8cc0a512a7b9c2acccd94ac875e5e3a100e4636a734679639e41195084e70fc1d47e3402716c6b54ed8873be137000efb9f7b6606f066c1868ed9316c01f3488bc538b59f868855a873a8e49e1042d28eab17e6099baae5c26654e1e53f4dc797d16a9fc31417cf1ae4cc119aa9e504987c39973dc9bb8752656aeae689264d9d134b6ab48efac51624cb585ce"], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f00000000c0)=0x0) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000100)=r2) dup(r0) 03:35:50 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x4000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0xfffffffffffff605}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={r3, 0x4001}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000140)={r4, 0x9}, &(0x7f0000000200)=0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:35:50 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x1, 0x0) pread64(r0, &(0x7f0000000000)=""/4, 0x10092, 0x0) [ 2261.777119][T16257] binder_transaction: 15 callbacks suppressed [ 2261.777136][T16257] binder: 16253:16257 transaction failed 29189/-22, size 0-0 line 2994 [ 2261.796283][T16256] binder: 16254:16256 transaction failed 29189/-22, size -7036029992836268032-3475338 line 2994 03:35:51 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) pread64(r0, &(0x7f0000000080)=""/4, 0x4, 0x0) socket$rds(0x15, 0x5, 0x0) [ 2261.835826][T16256] binder: 16254:16256 ioctl c0306201 20000040 returned -14 [ 2261.866553][T16257] binder: 16253:16257 ioctl c0306201 20000040 returned -14 03:35:51 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x4018920a, &(0x7f0000000180)) 03:35:51 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2261.891057][T16257] binder: 16253:16257 transaction failed 29189/-22, size 0-0 line 2994 [ 2261.944764][T16257] binder: 16253:16257 ioctl c0306201 20000040 returned -14 03:35:51 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000002000000000000000000005000000000000000000008187082ccfdf8cc9183057f761e3c95c4b5cfb1a98282cd0f3d420bb68eb51ca19797dc0abea386ddd62675417aaa94c6e56beda5a2b74374cef88094adb93bc65b476e063fe92ec0323d10100744941cc033528439ce4ed914b676f1b5ff481c5211500124af29474e55672965889c07f6b4148875a70a4634cb7e16eae9717cafa475a1870cf86566e3ef12e11851f9382f27effdb6bbb8fd04f480a39e57b3d5d249ca35f22e7613ea7e56134188c89194fd722b0af23a0c611bf36c69a8e41e42071893ff7fd5aafb10471c20c4ac23a0bc9c7a9e609ebe1432e311f4ab1a4bc290a0e67b007880e1b73b9884d20ab"], 0x1, 0x1000000, &(0x7f0000000240)='-'}) prctl$PR_CAPBSET_DROP(0x18, 0x20) 03:35:51 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2262.052050][T16405] binder: 16383:16405 transaction failed 29189/-22, size 32-327680 line 2994 [ 2262.076068][T16405] binder: 16383:16405 ioctl c0306201 20000040 returned -14 03:35:51 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2262.094627][T16405] binder: 16383:16405 transaction failed 29189/-22, size 32-327680 line 2994 [ 2262.117791][T16405] binder: 16383:16405 ioctl c0306201 20000040 returned -14 03:35:51 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x14, &(0x7f00000000c0)={@rand_addr, 0x0}, &(0x7f0000000100)=0x14) bind$can_raw(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000080)=""/4, 0xfffffeb7, 0xffffffffffffffff) 03:35:51 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x80000, 0x0) seccomp(0x1, 0x1, &(0x7f00000003c0)={0x1, &(0x7f0000000380)=[{0x9, 0x40, 0x8, 0x20}]}) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000400)={0x4, 0x3ff}) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000440)=0x2) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000340)) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000004c0)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000180)={r2, 0x20}) getsockopt$netlink(r1, 0x10e, 0xe, &(0x7f00000001c0)=""/102, &(0x7f0000000280)=0x66) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x253, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="006348400000000000070000000000000000000000000000000000000000000000000000000000000000000000fbffffff00000000000000000000000000000000000000a77067236f54f8e3dfac2249d9397d3ad6301277cef797bf285ae4bd017443c1942ec87b543084dba67a2680d96b0b7e06562b0bc858ffec08c3bd2a295a32afea45f6599018873da45a3303d3db8fa151fc61278be80ac824782d6c4075944d1bff6f79e5e343c1220309e5907fea048ae15b4a1655abcb59cb99d99bab1b31bbea6a15cd69b6f1681a667a2ea7ad03f22f47cea681d319fa2700d46a121740e072d605fafb2436f5a5"], 0x1, 0x1000000, &(0x7f0000000240)='-'}) write$FUSE_INTERRUPT(r1, &(0x7f00000002c0)={0x10, 0xfffffffffffffffe, 0x1}, 0x10) write$P9_RRENAMEAT(r1, &(0x7f0000000300)={0x7, 0x4b, 0x1}, 0x7) [ 2262.318930][T16511] Unknown ioctl 1074291720 [ 2262.336920][T16511] Unknown ioctl 19299 [ 2262.366923][T16511] Unknown ioctl 4704 [ 2262.391003][T16511] Unknown ioctl -1072667467 [ 2262.406230][T16511] Unknown ioctl 1074291754 [ 2262.418238][T16511] binder: 16487:16511 unknown command 1078485760 [ 2262.440110][T16511] binder: 16487:16511 ioctl c0306201 20000040 returned -22 [ 2262.462626][T16511] Unknown ioctl 1074291720 [ 2262.477656][T16593] Unknown ioctl 19299 [ 2262.484240][T16593] Unknown ioctl 4704 [ 2262.484409][T16594] Unknown ioctl -1072667467 [ 2262.498370][T16595] Unknown ioctl 1074291754 [ 2262.505707][T16595] binder: 16487:16595 unknown command 1078485760 [ 2262.528838][T16595] binder: 16487:16595 ioctl c0306201 20000040 returned -22 03:35:51 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:35:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffcb9, 0x100000000000000, &(0x7f0000000240)='-'}) 03:35:51 executing program 2: r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x2, 0x101001) ioctl$CAPI_NCCI_GETUNIT(r0, 0x80044327, &(0x7f0000000180)=0x9ade) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x783b81d6, 0x400001) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000000c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x18) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000080)=""/4, 0x4, 0x0) syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x0, 0x2) 03:35:51 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x4020940d, &(0x7f0000000180)) 03:35:51 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0d522eb6bb753506b04fd6db98a5e502093482dfa484eae7f829e008e1584b3ce9ba8bf1eb70f97cdca260a532f"], 0x1, 0x1000000, &(0x7f0000000240)='-'}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) write$FUSE_POLL(r1, &(0x7f0000000140)={0x18, 0x0, 0x7, {0x3557}}, 0x18) [ 2262.766056][T16701] binder: 16697:16701 transaction failed 29189/-22, size 0-0 line 2994 [ 2262.793376][T16701] binder: 16697:16701 ioctl c0306201 20000040 returned -14 03:35:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xfffffffffffffddb, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2262.825664][T16707] binder: 16706:16707 transaction failed 29189/-22, size 0-0 line 2994 [ 2262.863957][T16707] binder: 16706:16707 ioctl c0306201 20000040 returned -14 [ 2262.881731][T16707] binder: 16706:16707 transaction failed 29189/-22, size 0-0 line 2994 03:35:52 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:52 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x80089203, &(0x7f0000000180)) [ 2262.923589][T16707] binder: 16706:16707 ioctl c0306201 20000040 returned -14 03:35:52 executing program 4: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) socketpair(0x5, 0x2, 0x17, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={r1, 0x23, 0xfffffffffffffdfe, 0x5, 0x101, 0x7, 0x9}) 03:35:52 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0045878, &(0x7f0000000180)) 03:35:52 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/4, 0x4, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000180)={0x3d, @local, 0x4e22, 0x1, 'sed\x00', 0x20, 0x6, 0x20}, 0x2c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000001c0)={0x0, 0xce, "4d005d7320a7593499216de9b6670e03a0520823b9e385e13223155ed8b9e0de065efa5e209cc95d3cf5ef78126adcbb21747386e9b7fbd9c2cc931ee83a1383c464d3eddc631a5cb70bd3e9db9a19ce42403e85022823b2f19213749d0b69c31e51f493d1475c5e2afc8d2baf105f1410a3afec2636e865b1a3b6217245a7c742930bfb911683629032f33248a9f84d7b6da5919327571017880d5e25115952daeb54035931f4d038813b87a2d5c12c3a05b3617871928aa9f64d0f21d248f4642dffdeab826c7a96289bae83ac"}, &(0x7f0000000000)=0xd6) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0)={r1, 0x3, 0x30}, &(0x7f0000000300)=0xc) sendto$netrom(r0, &(0x7f00000000c0)="82a28a22bd37396bb7fa7ef0e0fd0c95a201af38147758c5d3448bc3b24aef395e2ad31a9ca7699410462e3c25bbaedbdee37333609f687e4f2f641b65870389bfd9267c76a96c43a1a82724e98b9431352400c01d28aad1ad757fa2861b7e5e7090cee6231749295825865c95a3da51ec9819e598886156567e7abe28ce87cd8f78c2fcf857650b48f7d9048d6fc4b1a5f06f82e9c1", 0x96, 0x8000, 0x0, 0x0) 03:35:52 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040), &(0x7f00000000c0)=0xb) 03:35:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000280)='-'}) 03:35:52 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:52 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0045878, &(0x7f0000000180)) 03:35:52 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000ff0000000000000000000000000000000000000000d91ee8aba31042f5e0cd748b5d3f72000000000000000000000000000000000000000000000000ed149d319aacd0114d40c5d7861dabcda8c522db816d2c610951ace6f23d3b3fc7a5a1f833d824ae63b61728"], 0x1, 0x1000000, &(0x7f0000000240)='-'}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f00000000c0)={0x0, {0x3ff, 0xd3d}}) r2 = getpgrp(0xffffffffffffffff) setpriority(0x1, r2, 0x2) 03:35:52 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) pread64(r0, &(0x7f0000000000)=""/4, 0x1d2, 0x0) [ 2263.655842][T17040] binder: 17033:17040 transaction failed 29189/-22, size 0--774037890804474151 line 2994 03:35:52 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:52 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0189436, &(0x7f0000000180)) 03:35:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x101000, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x880, 0x0) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000100)={0x9, 0x3120088, "95d47eabd2d3fa6a0e97d402cf64e522ccd48ef6fc5b5664", {0x8, 0x1}, 0xdd}) [ 2263.699851][T17040] binder: 17033:17040 ioctl c0306201 20000040 returned -14 [ 2263.725271][T17040] binder: 17033:17040 transaction failed 29189/-22, size 0--774037890804474151 line 2994 [ 2263.740438][T17040] binder: 17033:17040 ioctl c0306201 20000040 returned -14 03:35:52 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(r1, &(0x7f00000002c0)={0x90, 0x0, 0x7, {0x6, 0x2, 0x9, 0x5, 0x0, 0x10000, {0x5, 0x4, 0x4, 0x1000, 0x8, 0x49, 0x8, 0x0, 0x400, 0xffffffffffffff3c, 0x6, r2, r3, 0x1, 0x1000}}}, 0x90) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffffa, 0x1000000, &(0x7f0000000080)='-'}) 03:35:53 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:53 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x108d2d74) sendto$inet(r0, &(0x7f0000000140)="9b11e46e5a2621859aa18c90b047dccc7d781014ba9246c39608d9a276454df05c60a0e4e58430c3e6c8f99e4c82cf670d4ad058ab6da5094e82f1aeab40f4338b04e537ee2bbd6a92e84daebdad4a58655355c2d32a11f325759f605a533e7921a476f342ed38c48b3981dac2552e00e81988cb82debb2133135f12cc1a15dd04bf02824da04e4509808cf915", 0x8d, 0x80, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f00000000c0)) [ 2263.856788][T17154] binder: 17151:17154 ioctl c0306201 20000040 returned -14 [ 2263.897397][T17154] binder: 17151:17154 ioctl c0306201 20000040 returned -14 [ 2263.912250][T17160] binder: 17156:17160 ioctl c0306201 20000040 returned -14 03:35:53 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc020660b, &(0x7f0000000180)) 03:35:53 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x4400, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000140), 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) [ 2263.938565][T17160] binder: 17156:17160 ioctl c0306201 20000040 returned -14 03:35:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x7fff, 0x484000) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000080)={r0, 0x0, 0xffffffff7fffffff, 0x7ff, 0x1}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000180)=0x3, 0x4) 03:35:53 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000180)) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x1, 0x20000) [ 2264.064480][T17270] binder: 17269:17270 ioctl c0306201 20000040 returned -14 [ 2264.081067][T17273] binder: 17272:17273 ioctl c0306201 20000040 returned -14 [ 2264.095341][T17270] binder: 17269:17270 ioctl c0306201 20000040 returned -14 [ 2264.106395][T17273] binder: 17272:17273 ioctl c0306201 20000040 returned -14 03:35:53 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/4, 0x4, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000000)=0xc7) 03:35:53 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r1, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000001340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001300)={&(0x7f0000000280)={0x1044, 0xf, 0xf, 0x4, 0x70bd2b, 0x25dfdbfd, {0x1}, [@generic="8bbe465bd93bcdad767c7861b42f96da7b8c18ecea162637e70d2648e4b8be8ffcd96584a22e850bbabce182580c416b80eda66d1ef38fc3ab2add9bd6e3442cc8a11e6f5bbdc6fcb1d877f5bd4cfee573b96fdfab8f8f973fbbfe67390608b32807d0f1ea179b9520996d97177ed4df5b92d8b644f42e6d8f538d0097941e5210e488dd3001fdbc550917408fbd0cf3b195567d925407ce60113c92e4271948778d21045951f0c3657ee95df6988e95e12d81fae14f7af43e3187fc351749380759e882452393bdecd7f682a87ec7fce2c0a7a64ef0c3d2c0fa67f88f402d3d324239404a1425ecae3615fcd7d1da462bd6e68d7bf5883cecd424b738d951fd5006a2e80865160f9425e70fa38e4a05158f6e62050d48db7f514a2b7f405a88dedc92c31517f1a3c506c56e6fe0022587fa12d797e70b8ecce5980239cbd9224c509657fa8a24184f24a2453eea5a7ec055dfb17cea7c33dd44c38082449826d4f6f7c6e2a6656308a7634faeb964da653917f851d57a68885ef0dd3f828026c8fc00f2dc192243ee06b2928f093261f56080b7dd77a4ab17e317091e8879926c8f9bbf33c827f6afe14ef9b84adb7e487d8b8cfbd8bafd97559da3968badd9efe48f6d7b7986759a56c8e5fb532c8a75c3f0681c80240c1c25a60a81f249eeaad2770f7d3d45dc12c1a7a2282ce141cee69748a313f5909ad9eec34cdb09a5c9ade3bb38f3755415d3301d18c53c9aa3de6bf8073af3ad93697ffbd77d695e0e09673879d7432a55624458bf10a28b74de61ce62e41a5911fdbbbbc748df7702c3c9216d9698a0ecde7c79205ff730607e41d350b3f09def8a1c9d4ae08ce53c06b0b8ed4998f2af56a678b0181f14b3ede3e1dc09de4d702eef47076d4861b3cabdba26d6e0352469e049e981ee01146e6a1ee66bdcce6dcca28876d335fa0314cfdc74a47355838ed9d4561c6dec4bdb6f474ec26066b2ae488700c1fe0485196f76a3966eda9604edb5226a6b096bc89bd462aae715c9275760791aa63c6ffda1216a193c7a15336536c78ee6fb84014f0964850ba5ed4f538cca417459cff0eaf09a94d75a0f8436e45bdb71ead34ba8c50ab2e7b3869cd0653462fe43f48c61b11b9bf7e0858aeb28799e7a4c1fb6b0b5293ca90324bc5ad499ed4ed5cdad1eace287d0c98f27f9938da18e0a4de8504416f5d284741196b453725d48360366493966c284c2d69abf2c95e5a175ab68b5c636251744fa8126b80ba0fef045b0f9f9ceada453359d5f270992cf5cc6a254a13165ad1abd6b1a14c3a33b51abc664a80a832cf21011e073d052f64fe2c64cc7f0d7519a460f5b19ef4342e343a152eeb425680d15fdf741659b643d9d11c04b1efef73987e12d38a29133066bba77ed84eed61c7bbae669ab7b9c9df0b47e990ec5535e2d3c83be4120528b20c083d18b7bbb873c490cd6a5bfbdd65a7ce5c954916eb0ad28cc7009b460cf62b8243e9128820a4e81cbb960ed7307e5f57d3140a714062c946d1ac38d251e96c62df26e18bcc5cc5f82007a2f1dbb64f6c2bfd7186ba27dea456f964758b730a489388c49e858a42eaf7a8f0d0027a2fb6d842d1455ed42d2713d95f4f4aadce4e28d0a607b7a895240375b9614dc511313dd1427bea10ff164a80781949325e80feb39d1518b96368c790cf304b9937e161899a773b70eae5cc0ffb68ffcff9bb3965fe387a740bebf743803f630c6247e5bcd019697fd5c046489c64e2efa5738972b53236019d1cbae27a3a5a2718aa0e3ca535ba3be0430ba9fa67fb06dcd29230c6448e2380293a02c2d6c2efa680f4631f12d69cfc449cdd5a944d745d1207b382f28739d634a37db131f296a361bcf26a7f1a961affbe55f9d5c71a8075f976ebabd476c625cfb01bf11276e9f2ab2fd14060b195829c475d3fe0da5559056973228efd9624621e0811aa360f6af3b1f40cf84280a631278d3018c885317097b0d99dfd96a4c10b8e213ab5a910e1f370d8538d45dec2d853164c2fafef69baeddb7e59ba37e063711ce7de469ff04bebe4662224b89fed6552a0720ddb77cdb1e6a4a52cedaf1a6a02c3a65b562e9bc762881286777cb1536f43ce1c01e4c097155cc345c840ef7592215d14ff869fdd86ee1cc33e68e5162f55068d633ab67f7456cb59f77010c95f56176ba9419fb5dfe8ff1931b82e46f10afd04d56c36b99fe4366c705ae6839e7e1e9061c3e7a2f68b054cb9becc80f1a8be3e224a0bdfdc36d644819a761fc3b4d2627a06d5cc118ea84f0219d1c534a31e7f171b52db99b4354252fcf8333aa59898a1fe5e705e2d618a6d34fd541517d5c84344164a14b1e06f4c3c4ffecdbe781058457b18f13c67446850f9dde00a97188847c37f3d35197575e675da2ecc9b9bdbeceb3198034d0e112154d8fc8ff216da18b4ea617eb91d2c5190cd77ccc028e61e490300bad1cc30c70e59b4b081f48426c4a37f0b1d4699ed36229124650f49d3274c71365bd98058b8f8cec48fde13a323b4e64051859adf282561c88cf7eeecd53daae541a116077b79b92f5fd2a50f3fd82053f4eb1085386db9fd7d44ea924c50231fc9f6b2c8f75b768e138219d47929e9081812079c2906db18b1684c5eef319a082729402b94de1ada91a4f4aadd1a4a450ed17904dcb8981459af637a2a75b226b079ef20479c80af02aa90657141078803962ddae62f56abbb478535be8564badce02da22625c5d84eee19cf2116ed77f28d14286cfaf056f499c3a81913effecaac01bd43b5baf911e49135501dc095a971602f396683329f5d1a9c1cb1e2b3ff5f4e43eed0e64041f1a97dcf22a10e51869d4c452f947a69a2d677a7acf6fc50fc1972304c6ec0d44468f4c102badae083c9e3c9c5e0ad0b2fce6f9f081b18750a2588448ac5d3c6687fbcaebbe240023f5030618e3d6f8ab60130d6a25042da6c57c1d8a7a178197f29bb2951acf6559247a23e898cc3931318a9b20017f5db567afcb2586be1a624a2f2ce538855522ea950f4f43432463ae69450bd03496e4089a75bddc385192f0baa33ca69e89320d4d5a3d60a9f3f647e881867cc0cd4bd44fa5be7d804e9ed8181058acc4b0f5e7a93c1f9da983ab8e4ff9b42a595b6f4a6f5fda19e1ed61ba52683b2c815311da8f9f07e5b5391c3e2ffb5ae4b221006a65d734e7e690ad2a120d63173d3134b8b9e32ac9f5e60aa471486c06f1852b9d7972a353a2b92e1eaa9e6d4d21071d6e28f4c6f090a5ca0215436590607d8f1b51eccb655e2b3d5388349f076d435916bb645bc47960cbc76c8cfaf76b41c42f65e9a263ecf640eecd5e445bd7d9974499de479dc0687535251079a8808cfd5eb00ab0d5e0ca1b6b63c6e9840697b6635a3121410e8d9951178307938da06782614daae138404eb4a266c8100f8248ec5c20515cb40da03b157fa66da23ef55f9cc211a642e214948f7b1f17fe41edc597df13700897d264c60b2af82f3644f8a1f71dcc46c3d3f63c219e587b467300973ae85c5e7be4985df9c35e9889f203de096711d6dfe32395430bd265eb84dd19c8cc9fa39a080185fb63afc40b340fdb1b3f884de3c7a79683b7448619566e244821a8c2eb5569a03bdd6c3accc8394263507682afefde57161f6feaf793910ee854ff8f54fde7155453ca4763383d55a972c0c9987a63a45eb70bdc83ab99f4b7e2ea0a8724a768472eb420e69a2f689da533aa04ae0581353b265688c99c9a4d68baa592c6016554479b0b57390ee7a2de7e7e7415941b02412b94b0956b89793181dae3a162c10c8ccd3eb548c40ae79a69de4cff3cedaa9a75d3fb636f82855bdedf73139e2faf7c9f74b4a99d90bc65d18b6ae10290ac44b04e5121da07f03a60f1a9723c3c47f1d2ef5f4f0d76541620aef16c9e3c9a9f62e7cb963f5e1c691104cc27cba41cc0cba0b1c0d382d7454ded42732011dea7285fbaf3dd4bfab8e90cf97216a04bad109ff664c5cdff62029623a6a7d1dc685ec04ba658d8494805af9fed1ed9b2fbd291eb62f86843d03a8f3c7e0ff4796b90fc7c1bf121807268a6d43debab1065a8900820240b970a85a339a6ce46d59550bc3e54c2232e8e35d97506c448e7c69ba4e6a31b8866b2c7e6e3e64f36045bb5df646ef573436757de493c812015f9ac6d59dffa552bdd1d771ad16ec0066763a7d5fae1a351845ad15381254c67531a02d1591379335a3ba8fbdf7764193483372a1703ceb1fe745e24bbf9859840d150b6d38328b2d272a13f5e15a305570054374cac2dc7b1cb2d4e2d811ee30841a1dd2a32016fc2abf41961b647c433be0d8e7657b395484ee4bfa6392c3cd7d75fa4b294d468c7ffaddfefae373ea4295713f7fbffb55bc07d7abc03a1953a01e7b24f8561405b1ee592c28262e48560bd15c87bc135e273d5983d040a58292f9b308bf70c6108bf4b6d7bd36f6354ebc2e676456c2c40cc71f9a2470a2342cf1c8477962674a410e4c8535edb6857b1933777b203dd65411be3cafca389cfa31817a2c39fe60330f059ade0e0d721d62f18f2d4b23715e8a59bc13ab6efba88494204627f49852f5e8059035a878eaaa3cb6df460e2ed00ce6ffc44cbacb53fda7039ffa5ad307ce973b8d6fbc6c3d582e6225cfd5934ac5642a21f212fd295b69dfc5793c7318f172d8b1b2bb858db3d044cadb85c4ea21e07b89166c363a872b62b07141866d3b9c5c236e670ec2628807fba840ec8b8a91f1c2cf529109388a6206d5016d60ab2e919f99e40f821cc7ef1ada1ca5260eb0c5e679f22b025117de84a530782d0b548b84fe2b28088e98e0ed6f2c54a15b9be831b1f1d73f4e126ac4444ce2ed6f017a173237381031bc2dc50e06e7954b0d1e72d10d63ae89cf630e0f5d318f57e9af3bf750e1acc1f3408c443114ea9042d4458f14580b1de503cfd6bbcbdb9214b6a070f4b3f77c69e0428910d7e5ea56544a2eb2123329047e6f65a13a9d4e4b5be3349266294a44866ad420c050fc625f5d9ecf573312e62e17788db77acc628b0632589937a6bb07fa0a8182202e39952d7837fd35bac9717c6e01298f79dfd7f1dab9a469ad38ab9fab9128dc5f774be47ce26423cdcfc03a86d568169f80734c0314d2a65cbd5534e3502e10359df6a37dca68299fff6b0f31d647646794dc3a52bd3e1bdb388d59be09c5567905b82e48bba89df2d9c23e33fb9c5f7f4a86cbb5ac346ca07d822acf9a08fac50ac1b42095d7469b66a483d903c8d5ee773544a119537f8fe6471f216d747ed8dbc9ffe189e3db5fcaa2b15254cd19a178001b3bc463142985496a929ac892eb2c492752b521b5bfb3e352a9c361e6327f9c4200b43d2b76a08f9ead4c055c5b7afb161bc18c97aab470c0593463df6687305d5b10ecca349203693af9ec31c4888626652e011ddbc7013fee92e4781823c9cad5f112a77261a8b78a8ce1267669a424aca60d9210b0c895fa8e98e7739b04bba0e92fbc423ff590001a103d8ac9a2656f004e2e002c72ce7166692f831e4fb96ef3581c09e4ba469506b07944e31de29698f7b5374df8fe9b4476f0e2d5292685578e0b260ad56a7f108726e1711d562e46b56ce71284673c2cfaa429669a5b982017f40e7a817e907e29c796b45daf46cc1bb4876e6afc5f998a7fd35460c81b1982727440b811ddb70618a589a9c20d12f3a12684498db7858827a465338b5e8ad56361ed78e1599168acf350f26d5f7452b6fad9ae8efbdecb6d35f", @generic="70d6e4e9afb40b5017e2f04224adccf71b31bfaaf3861ea2506c57e568b29072b29157d87bc198", @typed={0x8, 0x93, @fd=r0}]}, 0x1044}, 0x1, 0x0, 0x0, 0x5}, 0x10) readv(r1, &(0x7f000085dff0)=[{&(0x7f0000e94000)=""/62, 0x3f0a}], 0x146) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634003000000000000000000e7ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1, 0x1000000, &(0x7f0000000240)='-'}) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000180)=0xec29) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000013c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f00000014c0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x44, r3, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffffffffff01}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004051}, 0x0) 03:35:53 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), &(0x7f00000000c0)=0x4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000180)) 03:35:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) r1 = dup(r0) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000080)=""/218) [ 2264.538214][T17489] binder: 17485:17489 ioctl c0306201 20000040 returned -14 [ 2264.550039][T17488] binder: 17482:17488 unknown command 54551296 [ 2264.552653][T17489] binder: 17485:17489 ioctl 80404518 20000080 returned -22 [ 2264.562249][T17488] binder: 17482:17488 ioctl c0306201 20000040 returned -22 [ 2264.578700][T17489] binder: 17485:17489 ioctl c0306201 20000040 returned -14 03:35:53 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2264.586718][T17493] binder: 17482:17493 unknown command 54551296 [ 2264.601392][T17493] binder: 17482:17493 ioctl c0306201 20000040 returned -22 03:35:53 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) pipe(&(0x7f0000000000)) 03:35:53 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:53 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x80184132, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:35:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x4, 0x1) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000280)={r2, 0xcb, "8962ddba57bd27e12b0411d1b41cdd2e2359be64371967dedd12eb056eb74daf124c76e7715f38e866994e3dac318b292d9235a7ac31c82080d7be83241af7408fced38fdc9c6b12e594582b706953b5ae444066bffc1f48c0e2d5e61285cc45576c62c27ca791e72190a72b011ca51c15984d79f4c11e3758c6afbe88d26fdf68fadba972f55f9e2eb1c8e6eb70741ef2374424f44be897278c4bfd88e09ddaf30a251acb88a2e0c56c45d8c452cb0c703211d09dfa800f94f949af110ed7db349331f530cf6decb6d27c"}, &(0x7f0000000140)=0xd3) getresuid(&(0x7f0000000400)=0x0, &(0x7f0000000440), &(0x7f0000000480)) r4 = getgid() getresuid(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)=0x0) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='fuse\x00', 0x810008, &(0x7f0000000580)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x20}}, {@allow_other='allow_other'}], [{@subj_user={'subj_user'}}, {@euid_lt={'euid<', r5}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_hash='dont_hash'}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}}) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000180)={0x10100, 0x1, 0xfffffffffffffffa, 0x10003, 0xc, 0x3}) 03:35:53 executing program 2: openat$vnet(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vhost-net\x00', 0x2, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/4, 0x4, 0x0) readv(r0, &(0x7f0000001440)=[{&(0x7f00000000c0)=""/231, 0xe7}, {&(0x7f0000000000)=""/31, 0x1f}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/255, 0xff}, {&(0x7f00000012c0)=""/73, 0x49}, {&(0x7f0000001340)=""/114, 0x72}, {&(0x7f00000013c0)=""/94, 0x5e}], 0x7) 03:35:54 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x10010, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000100)=[@free_buffer={0x40086303, r1}], 0x1, 0x1000000, &(0x7f00000000c0)='-'}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x400000, 0x0) ioctl$VT_ACTIVATE(r2, 0x5606, 0xfffffffffffffffd) [ 2264.819858][T17803] binder: 17802:17803 ioctl c0306201 20000040 returned -14 [ 2264.834649][T17806] binder: 17800:17806 ioctl c0306201 20000040 returned -14 [ 2264.854086][T17806] binder: 17800:17806 ioctl c0306201 20000040 returned -14 03:35:54 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:54 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0xffffffffffffff06, 0x0) ioctl$KDENABIO(r0, 0x4b36) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000100)) fcntl$setownex(r1, 0xf, &(0x7f00000000c0)={0x1, r2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0063404000000000000000001296000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e3ff00000000"], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2264.984024][T18088] binder: 18046:18088 BC_FREE_BUFFER u0000000000000000 no match 03:35:54 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x8000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r1, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd65}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c1}, 0x8000) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0x40189206, &(0x7f0000000180)) [ 2265.029687][T18117] binder: 18046:18117 BC_FREE_BUFFER u0000000000000000 no match [ 2265.071103][T18120] binder: 18118:18120 ioctl c0306201 20000040 returned -14 03:35:54 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/4, 0x4, 0x0) 03:35:54 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:54 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000180)) 03:35:54 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:35:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000080)='-'}) write$binfmt_elf32(r0, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x5, 0x100000000, 0xba6, 0x4, 0x3, 0x6, 0x401, 0x17, 0x38, 0xd5, 0x3, 0x9, 0x20, 0x2, 0x80, 0x7, 0x2}, [{0x60000002, 0x5, 0x3000000, 0xe58, 0x80000001, 0x9, 0xbb, 0xffffffff}, {0x6, 0xc890, 0x7, 0x200, 0x5, 0x1, 0x7f, 0x2}], "98ecbdbc31c8a58798410d51753e7e71046775d1c70f1fca8c33536250da110f9ad1f3c09c9e5d2f06980ceb0b4f07b5010fe8e7c1cf7024053fdfc10dd37e622c6be3e104db527e32d7d91df64f1e0d7c88a82fe075e2a4036a6fef1b8fb6d7e2c189717677993bfbe8d7908c213e95561ab2388c293f7455c20b2b8a90be91693a3f3822d5ff314e47e580129ca11132c53476f5c1f982bd87c4e605d6d37085c6403741a815a59755596eebacc4cc09082d312fbb3e81809638", [[]]}, 0x233) 03:35:54 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x543]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:54 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2265.358075][T18235] binder: 18230:18235 ioctl c0306201 20000040 returned -14 [ 2265.366720][T18236] binder: 18229:18236 ioctl c0306201 20000040 returned -14 [ 2265.379335][T18235] binder: 18230:18235 ioctl c0306201 20000040 returned -14 [ 2265.386813][T18249] binder: 18229:18249 ioctl c0306201 20000040 returned -14 03:35:54 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:54 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0063404000000000000000000000000000fa0000bbc5cdedea9dd2275b678d8152510347b9eb800200000000d8bc08645764014b1e059c0000000000000000000000000000000000000000000000"], 0x1, 0x1000000, &(0x7f0000000240)='-'}) r1 = dup3(r0, r0, 0x80000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'bcsh0\x00', 0xd301}) 03:35:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x0, 0x2, 0x8, 0x4, 0x4}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000dc8d9b9531d9210ec07293f67a000000000000000000000000000000000000d35071b6f04f607b0473efd384d14a51eef7a0e6143bb5206c6617ecbdf32826eecba4cdb7ba443eb305ec00000069000000001485f909c2cd2d9dba01605a18648c133e924d376b41338c48f4e879adada06d1762834b4794ac9cc3fca5c0fca6b0ac8981bf2d57dd"], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2265.464106][T18331] binder: 18313:18331 ioctl c0306201 20000040 returned -14 [ 2265.472118][T18331] binder: 18313:18331 ioctl c0306201 20000040 returned -14 03:35:54 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x608]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2265.567720][T18349] binder: 18348:18349 ioctl 401c5820 20000080 returned -22 [ 2265.584716][T18351] binder: 18350:18351 ioctl c0306201 20000040 returned -14 [ 2265.588969][T18349] binder: 18348:18349 ioctl c0306201 20000040 returned -14 [ 2265.608361][T18349] binder: 18348:18349 ioctl 401c5820 20000080 returned -22 [ 2265.609374][T18351] binder: 18350:18351 ioctl c0306201 20000040 returned -14 03:35:55 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1, 0x1000000, &(0x7f0000000240)='-'}) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000100)={r2, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x3f, 0x9}, &(0x7f0000000280)=0x90) [ 2265.955920][T18559] binder: 18557:18559 ioctl c0306201 20000040 returned -14 [ 2265.964272][T18559] binder: 18557:18559 ioctl c0306201 20000040 returned -14 03:35:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2ca, 0x0, &(0x7f00000000c0), 0x2, 0x100000000000000, &(0x7f0000000240)='-'}) 03:35:55 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2266.197120][T18669] binder: 18665:18669 unknown command 0 [ 2266.203039][T18669] binder: 18665:18669 ioctl c0306201 20000040 returned -22 03:35:55 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000180)) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000040)=0x8, 0x4) 03:35:55 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/4, 0x1b4, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e22, 0x3, @ipv4={[], [], @rand_addr=0x8001}, 0x10001}}, 0x4, 0x2, 0x7f, 0x3f, 0x80}, &(0x7f00000001c0)=0x98) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000200)={r1, 0x3}, &(0x7f0000000240)=0x8) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f00000000c0)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000), 0x4) 03:35:55 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) syz_extract_tcp_res$synack(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_tables_targets\x00') getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x4, 0x20}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000140)=r2, 0x4) sendmmsg$inet_sctp(r1, &(0x7f00000033c0)=[{&(0x7f0000000280)=@in={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000002c0)="e749aca7b5d15db4770515f4f761882456", 0x11}, {&(0x7f0000000300)="8e2f02ecc80e95991f6e0627199468ffe792d785fd48e2d675e284cadcfc57498db98f34a0b392b7019dd4fbf8c458c9b90df5856cee0c5f8846df1b3ca61533fa2f2ae05675a308572ab8b483dc33e940d0b2cb4c7a04e882458ae0805551a5acc54b7e2f89a39bae53470f1cefdc607dd503faa544972f1b06bf917f2227a83078e439e219234dae18c5d99c3d58dd0e533ab585ca390ed649325c8a31e2ad7358362a6d9cdd4e7c1dde10d4974fed9e9a2b05670ea323451379954700921446d597a65bc6", 0xc6}, {&(0x7f0000000400)="9598439939dad5d0470955a699f8552b49b2ba4a678e2ae1b1a5a37a44f323c36c7f27a6723fc418adc0d83c8c1c44eb0d6e21e607d5ab6ebbaaa14475ae9cbaa5ee69b83120036376ac09afee6f1ed66ce25f26a3c5b04ec12ee22ff86f9d9b43cfd7e18ce88c25b885431a4b9b7c82a3d883beb1bc3d7099254f2b39769603c3ed80e1b21d6246a4d38ca9f87adf4fd450c6ffe1745869e065471db03d541573a6c59f25d6a2a8f37e37315ebbbe2cee8dfd57ff1d97b30b25cc39", 0xbc}, {&(0x7f00000004c0)="19b8d8f4ece7b0a9dabb322b51b1c0cc4239759d96a4a1b041109f59ba226dfc1a683905465add6f907bf63b128a346e065ee318dbb0993b8ef4ada24d0d66f9b888b56de3a835c9ec1833c43048e53644d9837247b34aba9d1a5687bdaec133b6662f1f257c64428c08fc41e047610b67550a7ddb5fc25cc7074ea090590ae23d118423316aeb5b42ddbdb92ce0f608bca87bbf56cc2ac7a462e981ac0e35a1d64ecabefcbe086e511f15103f11a880", 0xb0}, {&(0x7f0000000580)="db0187536ed88bb2870727cb7aad7ab5bfcd6a58710ecd4d9c54412e6df88be844d6b379ac9248919b9a3e929a4d55fc695b67e15ceb4165638f0086b2379a3e83c1f66f635c38", 0x47}, {&(0x7f0000000600)="c315bc5c01e986c2b0c8d7a5a89191bb45d9e4f6f8d4149a011aaad8059b88a1f4ba17f7fbedf97ac98ee280f4dcebd4be0bef42a449b95b97008934dcf926c5b626e2c24d6eff08b810161191ee52e6e53c82ff7719358f0b506642d05115dd5496944f0ab31faf9f90580ed8cfdc52f6bd977de8c3b950082ad79bc3336addbe96de294666de152b4c61f7f20cb6af337c50f6b6a6cc23c47f3230da83197fe215b29e55ec14f931a2fa0eadb78f1ba46360eb890915258be8e920f6c2905533356cec85deee4d414b6c1c9963ef13246bb7871c9b9bc7a215c62cb96f911102dde813e6f5a076f7b6", 0xea}, {&(0x7f0000000700)="5240890a5d69062fb5220c20182f1e1a23945bff9d21f606711f10aa83941ce27c436a864098603484a7377eee3870caf7bccb31dcdca8e479b6c7b86360", 0x3e}, {&(0x7f0000000740)="45811cd409ec47c2ecdaee22f8c2e63bfa9b11132163e969e8df313aa97db2132a84807552d0504bc6fe264fc322365d27cc4395553ad86c061c40b42b2274fca3c79e21d8cdc5a749c4504fd269ad328affc0f3d700b6ee09142e77ba5392ff45f5122d9c3c0c5e428fae67db55a4945ac3162c35d9ab248a74588d6b4a649fb46165195a8c21c733c743ec4014653574", 0x91}], 0x8, &(0x7f0000000880)=[@sndinfo={0x20, 0x84, 0x2, {0x401, 0x1, 0x100, 0x9, r2}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @authinfo={0x18, 0x84, 0x6, {0x4}}, @sndinfo={0x20, 0x84, 0x2, {0x5, 0x1, 0x6, 0x800, r2}}, @sndrcv={0x30, 0x84, 0x1, {0x6, 0xf5b, 0x8209, 0x1, 0xfffffffffffffffd, 0x100, 0x7fffffff, 0x9, r2}}, @authinfo={0x18, 0x84, 0x6, {0x7}}], 0xc0, 0x20000000}, {&(0x7f0000000940)=@in6={0xa, 0x4e22, 0x5359, @local, 0x7fffffff}, 0x1c, &(0x7f0000000980), 0x0, &(0x7f00000009c0)=[@dstaddrv6={0x20, 0x84, 0x8, @local}, @dstaddrv4={0x18, 0x84, 0x7, @empty}, @sndinfo={0x20, 0x84, 0x2, {0x1, 0x820e, 0x3, 0x83, r2}}], 0x58, 0x20000010}, {&(0x7f0000000a40)=@in6={0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x5f87}, 0x1c, &(0x7f0000001c40)=[{&(0x7f0000000a80)="0c66fa9fc4796c43f77b3fff992cadf3e0b395c5bfd03c9c797d08f7fa68643f4176d3579cfb19e442886bfb7355028ad4f837bb616a38258716626d9569e228d518e6997194058020ea27c66ffc5f6fd9639085e52f322704f27d88baaaee7da3a07d0f9bcd09f79cdba3b21f96bcc1e6143dc9ffaf6011c48097db706c28b72c2fb4f2cf35f583be7da8d5ed880aadb1bbf427571cb67450784fdbe1b2ba5d309f47201e8834fc22d036", 0xab}, {&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000001b40)="32ee6ab60fa78467db9eac17e5e32e0a089189a524aa97857c69b5a5a80ea5236a62e6e7795b6f84cf45fd8a775be3bcb630e3bfc29526a1fef5c5af5a0e658f3bbe4f3ec344f150e994645a29c2dd9c450ede0f82c82d15809688b40f2b9c1f9e72cbfd2f02136dec5857f5130e75fccaa1666c01cf3537297b01f20836f52862f2f4ce7eb26429b102ca4b25928fe3c580ea742cfbcf429d9ad8119cd7e2e6f98b9257bf15eee0a1e1b3db8b75c2134e407aa82b3ba46481dcf23e5db4516f8e1ad15796c33bb879447f12d454", 0xce}], 0x3, &(0x7f0000001c80)=[@init={0x18, 0x84, 0x0, {0x8, 0x7fffffff, 0x2}}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x3}}, @dstaddrv6={0x20, 0x84, 0x8, @local}, @sndinfo={0x20, 0x84, 0x2, {0x10000, 0x0, 0x1f, 0xd0, r2}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}, @sndrcv={0x30, 0x84, 0x1, {0x70d6, 0x7, 0x2, 0x96, 0x2a, 0xec8d, 0x2, 0x4, r2}}], 0xd8, 0x80}, {&(0x7f0000001d80)=@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001fc0)=[{&(0x7f0000001dc0)}, {&(0x7f0000001e00)="72b4d34f9fe0ffb1622828791b007ca20f0e", 0x12}, {&(0x7f0000001e40)="9d69c1e108ec429d5a3fa2e6d37afe97b2797f80e5fef990d6810119055294638cacf7d6a91044378b3f2b5afc28fd9725ab575a94b1", 0x36}, {&(0x7f0000001e80)="a49de02c9644e98a98f927ee9948fb2a0b4f13e0ad0658131f6efae2cbbbcb8a3a983e5d99aec103bd79c150f6219491e779a8e4dfd70dbe5cb7fd9acaae4359ac3b7c63441610c407bbe840a9cedbc6b348b4aa8a15f978c0b2300904a482026ed11742551f9000e14922feade3ccde25e082b4b146052ead559bcd41e137455ea7d09a32ca96d5da60f4090cb6dcd8b72cab529debc35e0364216f857ab785e8d92f962a77a7bcad09", 0xaa}, {&(0x7f0000001f40)="9da6cdf9239b2e812986d263e30a603ac04dffdf82295797015aa772885787d2bfff97693248b81c69e3a1004fa95b645cc76d9f3c2c5d2e5dba4de35d3f437a259b8ecc47b17414b8249e4bfb369aee0295211fa38583be069add338966dd5dde9f95402d52f057326488fd", 0x6c}], 0x5, 0x0, 0x0, 0x4000}, {&(0x7f0000002040)=@in={0x2, 0x4e22, @rand_addr=0x42d}, 0x10, &(0x7f00000032c0)=[{&(0x7f0000002080)="8b46948ed723f6b2483f025b4b4693b1c5cd776fbad33e462c29959af0e1f3854c183b26fd094f9a13a75697af7ca767243f1f4c2847b83a5a5b45", 0x3b}, {&(0x7f00000020c0)="de600f75", 0x4}, {&(0x7f0000002100)="1e1bb2a0b8c2e89c4623a4f25608c704c2eb76c578efb5b78a66da0d372d33494943f16cb6aa1630d2d97900692d5e8366726dc8ea15265aee73c9a81622666a7737ed87ba0e86bfb3137c245e53d733283eb820113f6e3df96898b9f286a7204f2f5546821ad1f726315725ce022fa2479c9c3d622012d7b958114f6cc6fdb43a3a589d04a4b0e832d3938b0a2cb4", 0x8f}, {&(0x7f00000021c0)="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", 0x1000}, {&(0x7f00000031c0)="0a305d19ad0c7b1a164b8e1c5b480ff446a3f0d287102a49250eab0bc596f142a09d3d2211840ef54c418be2ba7095c80b223246322a35d7ab7928b9304c954691087cabf5b4a37ea026d56405ff9cd541e2fed6afb9b5ff3f853854352774cf18e31e68585beed7336a85a5b00c3c29b5b072e50e9f64ba3456c112e06eaf04baa06b7d2a7ce34b33f9159051635a35d61976df3d152a7a229805c04b2e876f47ec49577e646be783cdb9e0b878b4d33e9ad71241c0872a2d7c5c008860aea52473a8a31fd2ed1a1f3b43a6717551fb3f53404e75bf552a1476e5835458a8f0b116f9e36b4a273d094bc9a499f694f8592c9f", 0xf3}], 0x5, &(0x7f0000003340)=[@sndrcv={0x30, 0x84, 0x1, {0x80, 0x100000000, 0x800c, 0x9, 0x7, 0x9, 0xff, 0x45, r2}}, @init={0x18, 0x84, 0x0, {0xffffffff, 0x466e, 0x8000, 0x9}}], 0x48, 0x800}], 0x5, 0x8001) 03:35:55 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000040)) 03:35:55 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x806]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x7a, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000100)="50dfcd40f0b5f1cf872d759d084baa73ffaba9c32a308ecca1386ad1c2b1a845e741253123ef3ab0"}) 03:35:55 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2266.327225][T18779] binder: 18770:18779 ioctl c0306201 20000040 returned -14 [ 2266.348887][T18782] binder: 18780:18782 ioctl c0306201 20000040 returned -14 [ 2266.357240][T18779] binder: 18770:18779 ioctl c0306201 20000040 returned -14 03:35:55 executing program 4: socket$isdn_base(0x22, 0x3, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000b886fb7300000000000000000e000000000000008235"], 0x1, 0x1000000, &(0x7f0000000240)='-'}) r1 = socket$isdn_base(0x22, 0x3, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x8000000000000, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$DRM_IOCTL_INFO_BUFS(r2, 0xc0106418, &(0x7f0000000180)={0x3f, 0x10001, 0x0, 0x2, 0x1, 0xeef}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000100)={0x77359400}, 0x10) 03:35:55 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:35:55 executing program 2: sysinfo(&(0x7f0000000100)=""/52) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/4, 0x4, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000500)=0x3458) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f00000000c0)={0x5b, 0x32314d4e, 0x2, @stepwise={0xd9, 0xc562, 0x5, 0x80, 0x0, 0x3}}) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000480)={0x53, 0xfffffffffffffffb, 0xbb, 0x200, @scatter={0x3, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/94, 0x5e}, {&(0x7f00000001c0)=""/45, 0x2d}, {&(0x7f0000000200)=""/64, 0x40}]}, &(0x7f0000000280)="c5c1963d72c624dea548e31847b0e7b0e5c892fcc17748701a27e89cc2edfe1b1c28f4ce67c3e991da4049287be92a12825ab21f1d0ebd758c8cad24522da54f598588b46aee8b58ac8d3b3b3984450e0bec2eae4fd864b7228ed51a885944c94c6c368ca056079592c3484f598c89b15c7165a5e6ce1aba72d4b425dc34bfce52b44796ec5ad03c025d3701b6f62c3194340f70d8e1233796ddf1fd9b601badb77af3e4c612d95f0ddf095608fb7d617c8cea922d43c6757a3ad7", &(0x7f0000000340)=""/198, 0x8, 0x10, 0x0, &(0x7f0000000440)}) 03:35:55 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe80]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2266.479165][T18891] binder: 18888:18891 ioctl c0306201 20000040 returned -14 [ 2266.517794][T18895] binder: 18888:18895 ioctl c0306201 20000040 returned -14 03:35:55 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:56 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000000037503bd700000000000000000000000000000000000000000000000000000000ffff00000000000000000000000000000000"], 0x1, 0x1000000, &(0x7f0000000240)='-'}) r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x9, 0x300) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000100)={0x6, 0x4, 0xffffffff, 0x1, 'syz0\x00', 0x5c}) r2 = semget$private(0x0, 0x3, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f00000000c0)={0x7fffffff, 0x4}) 03:35:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x9e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0e5f9d420ead632be01f21c510af45d4d317fd0f47b8b9e92dda3e93b0a7334c61e055dd7b7f0f5032d9c5980b27deb833d0109f825eb07f3c494cdaead73bcc74808e4080d04ca79e284d75275f9e67e1868915557e4b6d694"], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) r1 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$smack_current(r1, &(0x7f0000000180)='posix_acl_accesskeyringproc\x00', 0x1c) 03:35:56 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:56 executing program 3: ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000040)=0x72d1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 03:35:56 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x800007fe, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x14) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000100)={0x0, {0x9, 0xfff}}) write$P9_RLCREATE(r0, &(0x7f0000000140)={0x18, 0xf, 0x1, {{0x0, 0x1, 0x6}, 0xfffffffffffffffb}}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400201) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000180)) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000240)={0x0, 0x2, 0x9a, [], &(0x7f0000000200)=0x2}) 03:35:56 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/4, 0x4, 0x0) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x7, 0x4, 0x1, "775ac33107eb548a5beb7194155a0a83fd3117a20c22b04d612e71676eca42a7b04c59587416b7b5fedb60f98e5e1168afe9102467401d0e628954e3123f4c", 0x3a}, 0x60) [ 2267.212183][T19108] binder_transaction: 30 callbacks suppressed [ 2267.212199][T19108] binder: 19107:19108 transaction failed 29189/-22, size 0-0 line 2994 [ 2267.235112][T19116] binder: 19112:19116 transaction failed 29189/-22, size 72056494526300160-0 line 2994 03:35:56 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2900]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2267.264363][T19108] binder: 19107:19108 ioctl c0306201 20000040 returned -14 [ 2267.279120][T19116] binder: 19112:19116 ioctl c0306201 20000040 returned -14 [ 2267.316066][T19116] binder: 19112:19116 transaction failed 29189/-22, size 72056494526300160-0 line 2994 03:35:56 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)=0x0) ptrace$pokeuser(0x6, r2, 0x1, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:35:56 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/4, 0x4, 0x0) 03:35:56 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b00]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2267.360597][T19116] binder: 19112:19116 ioctl c0306201 20000040 returned -14 03:35:56 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x80, 0x0) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000580)={0x8, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="006340400000000000d34efa53fa4e8715418d420834d80a7700000000000000000100000000000700000000000000000000009c2f599e2db2d43b2e62290000000000000000000000000000000000000000400000000000000000010490a0c6821f7df79040de782f96826ec894627ed947fd0f5053f73128ee44f0297b84a8b0486b4c5f6cdeacc2ff5ee30800000000000000c6b76f40e565030a45632669"], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:35:56 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x7, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000280)={0x14, 0x88, 0xfa00, {r1, 0x3c, 0x0, @in6={0xa, 0x4e23, 0xff, @mcast2, 0x7f}}}, 0x90) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm_plock\x00', 0x400000000000040, 0x0) r3 = mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xb, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000000c0)={r3}) r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000020000000000"], 0x1, 0x1000000, &(0x7f0000000240)='-'}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x8000, 0x0) 03:35:56 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c00]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2267.492752][T19435] binder: 19430:19435 transaction failed 29189/-22, size 117440512--7205759403792793600 line 2994 [ 2267.527189][T19435] binder: 19430:19435 ioctl c0306201 20000040 returned -14 [ 2267.538128][T19466] binder: 19450:19466 transaction failed 29189/-22, size 0-0 line 2994 [ 2267.551113][T19466] binder: 19450:19466 ioctl c0306201 20000040 returned -14 03:35:56 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000000)=0x1000, &(0x7f00000000c0)=0x4) pread64(r0, &(0x7f0000000080)=""/4, 0x4, 0x0) 03:35:56 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2267.588442][T19466] binder: 19450:19466 transaction failed 29189/-22, size 0-0 line 2994 [ 2267.622415][T19466] binder: 19450:19466 ioctl c0306201 20000040 returned -14 03:35:56 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x20000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) [ 2267.763475][T19749] binder: 19708:19749 transaction failed 29189/-22, size 0-0 line 2994 [ 2267.773488][T19749] binder: 19708:19749 ioctl c0306201 20000040 returned -14 [ 2267.785550][T19750] binder: 19708:19750 transaction failed 29189/-22, size 0-0 line 2994 [ 2267.795364][T19750] binder: 19708:19750 ioctl c0306201 20000040 returned -14 03:35:57 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000180)) 03:35:57 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3300]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000780)={0x0, 0x0}, &(0x7f00000007c0)=0xc) lstat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f00000009c0)=0xe8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x80, 0x7, &(0x7f00000006c0)=[{&(0x7f0000000100)="3cff1e7885e89bceaff29bd041797da360b93d6a12b1046a5588b8f3534f807827f14b5535b0c194f2448fff8496f950410f772d346b", 0x36, 0x80}, {&(0x7f0000000140)="8e55bf3fdb56fe4ea97e19e8e7bec2ae761e28fdd60f59227ab3dfbb7dd5e15f51952a60f13e623965e4309283165f28f3f7bc85433bb4de24d959ac9e576104b74319bfc0f998de724d1f68e0632c13b6148d970f7a538ea5a8295e23cb020c1e83f8b1db20", 0x66, 0x7}, {&(0x7f0000000280)="1c96e56b48aa712119e72f6c98db513d1b44058b877119b496d1f577a48b898b2c24665635ec6719cbd5ef6bc0bddea8d3a6b4a8e025707e52f7dbb0f9c23f546b2a5724f449f259db4f9ebdc8db5363b452de2268de4df6df432ae3473a37d91d9b3af21bd5a38e00839fdba1ea08dbf4607a618ddb5f53152efd95f391302bed10dc8f83add11ee8c57556542c3076f990e6e70599c646e1d81318887ac71803cc9ca341219aee69294c49fc795b70fcff50f07e5200084d5ae1f1dc3b2c54d1040ce241d0698719faf2219a0ae76de5cdfbb829998cbd4924a95e65ba6bce316d2a2169689ba163960237e5bb3dae7e974ada", 0xf4, 0x9}, {&(0x7f0000000380)="08cca8a38785f49d3099f59029c4a53f37c7ac5fb395e31804e8403ab2ff9217c5ef07a3e69f9a1d4d8897c26dacc8f9e3bc95b40510d4d4aec2814bd3f77898eec9a3", 0x43, 0x8000}, {&(0x7f0000000400)="28ed93dd40b40408a37bd580e4440b6e7c3b1668a91b8a8cf9d6623766ff1201e92639e257961b76663c4638ccda82248dfa2d4253c224d1a79cd9abd2235eba9e677d1fdbcc3af890092f804d2f678f3a3f8d26bf5461fccc7e864289107acd0baf2bae946c4603725cd303d8a35f9a1fd604f8fb3c98499cea79a3b0a9bcbc12b952c43679952f7fa3527c34d38d269e37db8fe4652a0a6b04df1e3dc8a1c6c0282efb5beccee57ce598fc7fe1a844f19fb2408050cea3fb702c0e69029d0a5a444195f7e888257969e445335af9e7cf8bfd0a23675a2f7613bdd70fc16d837566ddb6f01f9ba5fa47a351", 0xec, 0x3}, {&(0x7f0000000500)="3a470325751831248be93c5991c626861d401828c7cb02ea01d4d632d50c503eb8bc7ad7f824396040c98eb62d88646a8301846cc8a73ddcedbfd819c798bb1bb186e31fa7a28aa29d6eb9419bf063ea980211a1cca54d50818bf793dc0d95422d199e0b8e64bb6054759722c16a89dd4bef9ba8c5b01f5da8aa685d70ad4eda0ef6cfa420200e96c51f", 0x8a, 0x6}, {&(0x7f00000005c0)="99e644733efc64db308c0810d140b7e7b8c8a9c11d8f80e200e1a4ab0f64ad31e41196a004fbebc623d78ee7a8983b4684d5b3e6e848813b3da17b96ad1bebfb3dfaab3e9ffbc01d8cbb03a558b52533713314dcf77d75c68603c38000ca7e1fa52e4fc715430f7600a84d2bcd99103c1cab8a6ad76871c5bac901e9bb5207c2200341d4f4b07cfe2b1d8744b0e06a8eeae8bcaf4dbf9f1b9ac9675b9ab18f758069d98a8d0751652909c9692d1b7c307208275267415b2976579a867360b5ff6d1c9824b8775f515fef04149368fbd961a611a0aa889e2e0385e4bccaa072", 0xdf, 0x2}], 0x10, &(0x7f0000000a00)={[{@delalloc='delalloc'}, {@noacl='noacl'}, {@nolazytime='nolazytime'}, {@nojournal_checksum='nojournal_checksum'}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@noblock_validity='noblock_validity'}], [{@seclabel='seclabel'}, {@fowner_eq={'fowner', 0x3d, r1}}, {@uid_lt={'uid<', r2}}, {@uid_gt={'uid>', r3}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000020a400000000000000000000000000000000000000000000000000000000000000000000"], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2268.143592][T19756] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 03:35:57 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x500, 0x70bd27, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:35:57 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000100)=']\x8f\bD\x00') ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x101, 0x0, 0xfffffffffffffffc}) pread64(r0, &(0x7f0000000080)=""/4, 0x4, 0x100000000) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) r2 = getpgrp(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000140)={r0, r0, 0x1}) 03:35:57 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x40000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000180)={0xa, 0x5, 0x1, 0xc, 'syz0\x00', 0x4a3}) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000de1d6fa7a788c3832a414129c4e5b004f5285efef97731a2d20be57b0d170c802afa41650b7528d3b134c04e491e4394ec4510a37df6be5d5de355a2e911157ea8cf0e7611f613782738f514875f67dc576195e1a332e130b8cf9c302116604b28b7ccfeb7230067682bc44a602778babb237788a7fe8f388f1ea1"], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:35:57 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3580]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x32e, 0x0, &(0x7f00000002c0)=[@request_death={0x400c630e, 0x0, 0x1}, @enter_looper, @increfs={0x40046304, 0x2}, @exit_looper, @transaction={0x40406300, {0x2, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280)=[0x40]}}], 0x1, 0x100000000000000, &(0x7f0000000140)="28be060000"}) [ 2268.340081][T19970] binder: 19965:19970 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2268.353760][T19971] binder: 19966:19971 transaction failed 29189/-22, size 0-0 line 2994 [ 2268.369058][T19970] binder: 19965:19970 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 2268.378024][T19971] binder: 19966:19971 ioctl c0306201 20000040 returned -14 03:35:57 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a00]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:57 executing program 4: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000002af5a50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1, 0x1000000, &(0x7f0000000240)='-'}) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x8, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000100)=0x30) r2 = dup3(r0, r0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f00000003c0)={'filter\x00', 0xef, "428406698f21204bf8c64c476d8a80c485c1740599f85a929882aa21f7e14ef0818a80306ad58fc00312f5eecfda26bcd982c413c7611d07b21142406757d313c2172c5b28e0a192e6d2bc789c2a7fc937ed1925d00029fd4cbb7ffdcf118beaccad09786908c0d31b96b13573ae95dd5538a5ba67751b1a1666a1d0b3f1d6e09c65c7e1eb307816ddbed1322b4477a07b0022aaec7fc113d7c9ad0ec77a330568c0425fb8cf39850251817c985fd0de09f16a2924f2b05b96178067c423a9a597cbdb8de166aabfe153590b1cd84c558c311a43ae5d978f1f136419fc5e185a8f1ecbd2f356461585ae5bbfe571d7"}, &(0x7f0000000140)=0x113) [ 2268.405563][T19970] binder: 19965:19970 got transaction to invalid handle [ 2268.418139][T19970] binder: 19965:19970 transaction failed 29201/-22, size 0-0 line 2994 [ 2268.434415][T19970] binder: 19965:19970 ioctl c0306201 20000100 returned -14 [ 2268.456761][T19970] binder: 19965:19970 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:35:57 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x8fffd, 0x0) pread64(r0, &(0x7f0000000080)=""/4, 0x4, 0x0) 03:35:57 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2268.501036][T19970] binder: 19965:19970 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 2268.514289][T19970] binder: 19965:19970 got transaction to invalid handle [ 2268.547656][T19970] binder: 19965:19970 ioctl c0306201 20000100 returned -14 03:35:58 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x1000, 0x1c000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000180)) 03:35:58 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000180)={0x0, 0xfb, 0x18, 0x2, 0x401, "f00c08592ffeb915cae86a7a05d44fae", "6705f3"}, 0x18, 0x1) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x8400, 0x0) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f00000000c0)=0x1, 0x4) 03:35:58 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2268.993609][T20094] binder: 20092:20094 ioctl c0306201 20000040 returned -14 03:35:58 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x40000, 0x0) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000140)={r1, 0x0, 0x6694, r2}) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0x40189206, &(0x7f0000000180)) 03:35:58 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/4, 0x4, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1024002}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x310, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3fff80000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40880}, 0x800) 03:35:58 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000100)={0x18, 0x23, 0x6, 0xe, 0x0, 0x0, 0x5, 0x10b}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000037eec51e663ed8c4d1b655c06b0000000000000062dcf3ac33e6a940000000000000000000000000"], 0x1, 0x1000000, &(0x7f0000000240)='-'}) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000140)={0x2, 0x1, 0xc91, 0x2, 0x4}, 0xc) 03:35:58 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:58 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSCTTY(r0, 0x540e, 0x294) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) exit(0x3cf2d893) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000180)) 03:35:58 executing program 5: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x70900, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:35:58 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4788]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2269.252765][T20302] binder: 20300:20302 ioctl c0306201 20000040 returned -14 [ 2269.270268][T20310] binder: 20300:20310 ioctl c0306201 20000040 returned -14 [ 2269.288238][T20307] binder: 20306:20307 ioctl c0306201 20000040 returned -14 03:35:58 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000600000000000000000000000000000000000000000000466a0000000000000000000000000000000000000000000000000000000097c6f29150d2000000000000000000"], 0x1, 0x1000000, &(0x7f0000000240)='-'}) 03:35:58 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4888]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:58 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/4, 0x4, 0x0) r1 = gettid() ioprio_get$pid(0x2, r1) 03:35:58 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6488]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x101000, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000080)) [ 2269.468807][T20521] binder: 20493:20521 got transaction to invalid handle [ 2269.485164][T20521] binder: 20493:20521 ioctl c0306201 20000040 returned -14 [ 2269.519450][T20527] binder: 20526:20527 ioctl c0306201 20000040 returned -14 [ 2269.529325][T20527] binder: 20526:20527 ioctl c0306201 20000040 returned -14 03:35:59 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000480)={0x40, @time={0x0, 0x989680}, 0x7, {0x7, 0x3}, 0x4, 0x2, 0x80000001}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000500)=0x8, 0x4) accept$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) get_thread_area(&(0x7f0000000440)={0x8001, 0xffffffffffffffff, 0x0, 0xd, 0x837, 0x3ff, 0x9, 0x3, 0x0, 0x4}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, r3, 0x4, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r5}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:35:59 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800e]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x19, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffe61, 0x1000000, &(0x7f0000000240)='-'}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x600, 0x0) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) 03:35:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0063090000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000458df5cffdd0594a56170000000000000000"], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x20000, 0x0) setsockopt$inet_dccp_int(r1, 0x21, 0xa3271eb73b8d313d, &(0x7f00000000c0), 0x4) 03:35:59 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/4, 0x4, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r1, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x44}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x800) 03:35:59 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000180)) [ 2270.165930][T20837] binder: 20835:20837 ioctl c0306201 20000040 returned -14 [ 2270.174980][T20839] binder: 20833:20839 unknown command 615168 [ 2270.196311][T20839] binder: 20833:20839 ioctl c0306201 20000040 returned -22 [ 2270.205369][T20837] binder: 20835:20837 ioctl c0306201 20000040 returned -14 03:35:59 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8035]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0xfffffffffffffffe) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1, 0x1000000, &(0x7f0000000240)='-'}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x430000, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000080)) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000280)=""/212) [ 2270.231469][T20839] binder: 20833:20839 unknown command 615168 [ 2270.240674][T20839] binder: 20833:20839 ioctl c0306201 20000040 returned -22 03:35:59 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20000, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000080)=""/4, 0x4, 0x0) 03:35:59 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80fe]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:35:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000240)='-'}) ioctl$void(r0, 0xc0045878) 03:35:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x200, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000000c0)={0x3f, {{0xa, 0x4e21, 0x8, @loopback, 0x8}}}, 0x88) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) [ 2270.460807][T21062] binder: 21061:21062 ioctl c0306201 20000040 returned -14 [ 2270.483886][T21062] binder: 21061:21062 ioctl c0306201 20000040 returned -14 [ 2270.492034][T21064] binder: 21063:21064 ioctl c0306201 20000040 returned -14 03:36:00 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x77359400}, 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 03:36:00 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:36:00 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x6, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0xfffffffffffffffd, 0x2, 0x7, 0x3}]}) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x140) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) creat(&(0x7f00000000c0)='./bus\x00', 0x80) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x101, &(0x7f0000000000)) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r4, 0x0) write$tun(r4, &(0x7f0000000500)=ANY=[@ANYRESDEC], 0x1) r5 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x8000000, 0x248, 0x3e6, 0x0, 0x0, 0x0, 0x4fe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xe6, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000030000000000000000000000000000000000006602272f3ff543c000000000000000000000000000000000000000bd82875709294270b0ef4ee05ac959cb2de6b7dc64508c5c50462a479abed38906a5b302a9118c3860d02485a6b02408eaef6767d5118c35528f7cf8102b36b2cb3c609f34badfad4abb438a9dedfe984bb84721976aacde0afe536e5d90ac9c9acd6b501ffa348fcba29eea257f11c3974511bf7d58d8c5d5d96f8691e57a7fbc4ae445f4d65b18d0117ca52049293aec3eedeebd96987c076981858553595ed8db3e"], 0x7e, 0x1000000, &(0x7f0000000280)="08acbded4c9e7bfd520e7c353af6de2108affca4c509e1e83de9af99741bc0f87536966c4fdc0da9b01fd34a47ebb4f022b74e64938486221444302ad61dd69033ad983141ffcdcfaf7cfe210359346124071dee0a15e59bb17a8bb17e850700b93a296ffce4960a9be268eba3adc6d0146b12db7a0cf2c64133fad0e2de"}) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x280000, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000340)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)={&(0x7f0000000240)='./file0\x00', 0x0, 0x8}, 0x10) 03:36:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fcntl$addseals(r0, 0x409, 0xa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:36:00 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f00000000c0)) 03:36:00 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8847]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2271.109435][T21277] binder: 21271:21277 ioctl c0306201 20000040 returned -14 [ 2271.136361][T21278] QAT: Invalid ioctl 03:36:00 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8848]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 03:36:00 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/4, 0x4, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000000)={0xffffffffffffffc3, 0x6d, 0x1}, 0x7) 03:36:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000000000000000000094c0ba0044678560d2da2e00000000000000000000000000000000000000000000000000000000ffffffff00"], 0x1, 0x100000000000000, &(0x7f0000000240)='-'}) 03:36:00 executing program 1: syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @random="11642e39803a", [], {@ipv6={0x86dd, {0x0, 0x6, "b6d17e", 0x67, 0x0, 0x0, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8864]}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev]}], @tipc=@payload_conn={{{0x1f, 0x0, 0x1000, 0x9, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3f, 0x3, 0x0, 0x200, 0x0, 0x0, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) [ 2271.297783][T21278] binder: 21273:21278 ioctl c0306201 20000040 returned -14 03:36:01 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc0109207, &(0x7f0000000200)) 03:36:01 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) [ 2271.961254][T21523] QAT: Invalid ioctl [ 2272.014074][T21529] binder: 21273:21529 ioctl c0306201 20000040 returned -14 [ 2427.731408][ T1043] INFO: task syz-executor.0:7642 blocked for more than 140 seconds. [ 2427.739524][ T1043] Not tainted 5.0.0-rc8-next-20190228 #45 [ 2427.745805][ T1043] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2427.754499][ T1043] syz-executor.0 D23632 7642 1 0x00000006 [ 2427.760828][ T1043] Call Trace: [ 2427.764152][ T1043] __schedule+0x817/0x1cc0 [ 2427.768556][ T1043] ? __sched_text_start+0x8/0x8 [ 2427.773438][ T1043] ? preempt_schedule+0x4b/0x60 [ 2427.778271][ T1043] ? ___preempt_schedule+0x16/0x18 [ 2427.783521][ T1043] schedule+0x92/0x180 [ 2427.787577][ T1043] rwsem_down_read_failed+0x213/0x420 [ 2427.793142][ T1043] ? __rwsem_down_read_failed_common.part.0+0x80/0x80 [ 2427.799918][ T1043] ? rcuwait_wake_up+0x11d/0x230 [ 2427.804875][ T1043] ? lock_downgrade+0x880/0x880 [ 2427.809708][ T1043] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2427.815990][ T1043] call_rwsem_down_read_failed+0x18/0x30 [ 2427.821640][ T1043] __percpu_down_read+0x8d/0xf0 [ 2427.826472][ T1043] uprobe_start_dup_mmap+0xbf/0xe0 [ 2427.831618][ T1043] copy_process.part.0+0x2bc1/0x79e0 [ 2427.836915][ T1043] ? debug_smp_processor_id+0x3c/0x280 [ 2427.842395][ T1043] ? perf_trace_lock_acquire+0xf5/0x580 [ 2427.847930][ T1043] ? __cleanup_sighand+0x60/0x60 [ 2427.852927][ T1043] _do_fork+0x257/0xfd0 [ 2427.857092][ T1043] ? fork_idle+0x1d0/0x1d0 [ 2427.861545][ T1043] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2427.866997][ T1043] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2427.872501][ T1043] ? do_syscall_64+0x26/0x610 [ 2427.877284][ T1043] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2427.883395][ T1043] ? do_syscall_64+0x26/0x610 [ 2427.888059][ T1043] __x64_sys_clone+0xbf/0x150 [ 2427.892943][ T1043] do_syscall_64+0x103/0x610 [ 2427.897517][ T1043] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2427.903608][ T1043] RIP: 0033:0x4563fa [ 2427.907495][ T1043] Code: 04 25 ff 7f 00 00 89 44 24 50 48 8b 6c 24 30 48 83 c4 38 c3 48 8b 74 24 48 e9 43 ff ff ff c7 44 24 50 00 00 00 00 48 8b 6c 24 <30> 48 83 c4 38 c3 e8 4b 3b 00 00 e9 c6 fe ff ff cc cc cc cc cc cc [ 2427.927128][ T1043] RSP: 002b:00007ffe7250f950 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2427.935567][ T1043] RAX: ffffffffffffffda RBX: 00007ffe7250f950 RCX: 00000000004563fa [ 2427.943589][ T1043] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2427.951712][ T1043] RBP: 00007ffe7250f990 R08: 0000000000000001 R09: 0000000002501940 [ 2427.959669][ T1043] R10: 0000000002501c10 R11: 0000000000000246 R12: 0000000000000001 [ 2427.967686][ T1043] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2427.975788][ T1043] INFO: task syz-executor.1:7645 blocked for more than 140 seconds. [ 2427.983792][ T1043] Not tainted 5.0.0-rc8-next-20190228 #45 [ 2427.990006][ T1043] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2427.998714][ T1043] syz-executor.1 D24016 7645 1 0x00000004 [ 2428.005074][ T1043] Call Trace: [ 2428.008357][ T1043] __schedule+0x817/0x1cc0 [ 2428.012808][ T1043] ? __sched_text_start+0x8/0x8 [ 2428.017644][ T1043] ? rwsem_down_read_failed+0x1db/0x420 [ 2428.023224][ T1043] ? _raw_spin_unlock_irq+0x28/0x90 [ 2428.028552][ T1043] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2428.033893][ T1043] schedule+0x92/0x180 [ 2428.037973][ T1043] rwsem_down_read_failed+0x213/0x420 [ 2428.043403][ T1043] ? __rwsem_down_read_failed_common.part.0+0x80/0x80 [ 2428.050155][ T1043] ? rcuwait_wake_up+0x11d/0x230 [ 2428.055836][ T1043] ? lock_downgrade+0x880/0x880 [ 2428.060686][ T1043] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2428.066960][ T1043] call_rwsem_down_read_failed+0x18/0x30 [ 2428.072602][ T1043] __percpu_down_read+0x8d/0xf0 [ 2428.077458][ T1043] uprobe_start_dup_mmap+0xbf/0xe0 [ 2428.082601][ T1043] copy_process.part.0+0x2bc1/0x79e0 [ 2428.087874][ T1043] ? debug_smp_processor_id+0x3c/0x280 [ 2428.093343][ T1043] ? perf_trace_lock_acquire+0xf5/0x580 [ 2428.098881][ T1043] ? __cleanup_sighand+0x60/0x60 [ 2428.103890][ T1043] _do_fork+0x257/0xfd0 [ 2428.108168][ T1043] ? fork_idle+0x1d0/0x1d0 [ 2428.112628][ T1043] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2428.118072][ T1043] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2428.123564][ T1043] ? do_syscall_64+0x26/0x610 [ 2428.128250][ T1043] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2428.134347][ T1043] ? do_syscall_64+0x26/0x610 [ 2428.139069][ T1043] __x64_sys_clone+0xbf/0x150 [ 2428.143786][ T1043] do_syscall_64+0x103/0x610 [ 2428.148388][ T1043] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2428.154302][ T1043] RIP: 0033:0x4563fa [ 2428.158183][ T1043] Code: 04 25 ff 7f 00 00 89 44 24 50 48 8b 6c 24 30 48 83 c4 38 c3 48 8b 74 24 48 e9 43 ff ff ff c7 44 24 50 00 00 00 00 48 8b 6c 24 <30> 48 83 c4 38 c3 e8 4b 3b 00 00 e9 c6 fe ff ff cc cc cc cc cc cc [ 2428.177812][ T1043] RSP: 002b:00007ffd9bb9af10 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2428.186256][ T1043] RAX: ffffffffffffffda RBX: 00007ffd9bb9af10 RCX: 00000000004563fa [ 2428.194294][ T1043] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2428.202274][ T1043] RBP: 00007ffd9bb9af50 R08: 0000000000000001 R09: 00000000019a0940 [ 2428.210249][ T1043] R10: 00000000019a0c10 R11: 0000000000000246 R12: 0000000000000001 [ 2428.218250][ T1043] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000001 [ 2428.226256][ T1043] INFO: task syz-executor.2:7648 blocked for more than 140 seconds. [ 2428.234304][ T1043] Not tainted 5.0.0-rc8-next-20190228 #45 [ 2428.240518][ T1043] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2428.249292][ T1043] syz-executor.2 D24208 7648 1 0x00000004 [ 2428.255649][ T1043] Call Trace: [ 2428.258931][ T1043] __schedule+0x817/0x1cc0 [ 2428.263383][ T1043] ? __sched_text_start+0x8/0x8 [ 2428.268226][ T1043] ? rwsem_down_read_failed+0x1db/0x420 [ 2428.273816][ T1043] ? _raw_spin_unlock_irq+0x28/0x90 [ 2428.279144][ T1043] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2428.284463][ T1043] schedule+0x92/0x180 [ 2428.288519][ T1043] rwsem_down_read_failed+0x213/0x420 [ 2428.294036][ T1043] ? __rwsem_down_read_failed_common.part.0+0x80/0x80 [ 2428.300782][ T1043] ? rcuwait_wake_up+0x11d/0x230 [ 2428.305748][ T1043] ? lock_downgrade+0x880/0x880 [ 2428.310584][ T1043] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2428.316867][ T1043] call_rwsem_down_read_failed+0x18/0x30 [ 2428.322544][ T1043] __percpu_down_read+0x8d/0xf0 [ 2428.327379][ T1043] uprobe_start_dup_mmap+0xbf/0xe0 [ 2428.332518][ T1043] copy_process.part.0+0x2bc1/0x79e0 [ 2428.337797][ T1043] ? debug_smp_processor_id+0x3c/0x280 [ 2428.343302][ T1043] ? perf_trace_lock_acquire+0xf5/0x580 [ 2428.348838][ T1043] ? __cleanup_sighand+0x60/0x60 [ 2428.353814][ T1043] _do_fork+0x257/0xfd0 [ 2428.357964][ T1043] ? fork_idle+0x1d0/0x1d0 [ 2428.362407][ T1043] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2428.367854][ T1043] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2428.373568][ T1043] ? do_syscall_64+0x26/0x610 [ 2428.378246][ T1043] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2428.384360][ T1043] ? do_syscall_64+0x26/0x610 [ 2428.389027][ T1043] __x64_sys_clone+0xbf/0x150 [ 2428.393739][ T1043] do_syscall_64+0x103/0x610 [ 2428.398316][ T1043] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2428.404227][ T1043] RIP: 0033:0x4563fa [ 2428.408107][ T1043] Code: 04 25 ff 7f 00 00 89 44 24 50 48 8b 6c 24 30 48 83 c4 38 c3 48 8b 74 24 48 e9 43 ff ff ff c7 44 24 50 00 00 00 00 48 8b 6c 24 <30> 48 83 c4 38 c3 e8 4b 3b 00 00 e9 c6 fe ff ff cc cc cc cc cc cc [ 2428.427755][ T1043] RSP: 002b:00007ffe0daac9d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2428.436199][ T1043] RAX: ffffffffffffffda RBX: 00007ffe0daac9d0 RCX: 00000000004563fa [ 2428.444199][ T1043] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2428.452209][ T1043] RBP: 00007ffe0daaca10 R08: 0000000000000001 R09: 0000000001eec940 [ 2428.460226][ T1043] R10: 0000000001eecc10 R11: 0000000000000246 R12: 0000000000000001 [ 2428.468251][ T1043] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000002 [ 2428.476256][ T1043] INFO: task syz-executor.3:7652 blocked for more than 140 seconds. [ 2428.484258][ T1043] Not tainted 5.0.0-rc8-next-20190228 #45 [ 2428.490473][ T1043] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2428.499176][ T1043] syz-executor.3 D24016 7652 1 0x00000004 [ 2428.505582][ T1043] Call Trace: [ 2428.508889][ T1043] __schedule+0x817/0x1cc0 [ 2428.513376][ T1043] ? __sched_text_start+0x8/0x8 [ 2428.518216][ T1043] ? preempt_schedule+0x4b/0x60 [ 2428.523097][ T1043] ? ___preempt_schedule+0x16/0x18 [ 2428.528193][ T1043] schedule+0x92/0x180 [ 2428.532348][ T1043] rwsem_down_read_failed+0x213/0x420 [ 2428.537717][ T1043] ? __rwsem_down_read_failed_common.part.0+0x80/0x80 [ 2428.544526][ T1043] ? rcuwait_wake_up+0x11d/0x230 [ 2428.549451][ T1043] ? lock_downgrade+0x880/0x880 [ 2428.554328][ T1043] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2428.560558][ T1043] call_rwsem_down_read_failed+0x18/0x30 [ 2428.566222][ T1043] __percpu_down_read+0x8d/0xf0 [ 2428.571088][ T1043] uprobe_start_dup_mmap+0xbf/0xe0 [ 2428.576625][ T1043] copy_process.part.0+0x2bc1/0x79e0 [ 2428.581990][ T1043] ? debug_smp_processor_id+0x3c/0x280 [ 2428.587435][ T1043] ? perf_trace_lock_acquire+0xf5/0x580 [ 2428.593008][ T1043] ? __cleanup_sighand+0x60/0x60 [ 2428.597956][ T1043] _do_fork+0x257/0xfd0 [ 2428.602197][ T1043] ? fork_idle+0x1d0/0x1d0 [ 2428.606605][ T1043] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2428.612211][ T1043] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2428.617666][ T1043] ? do_syscall_64+0x26/0x610 [ 2428.622422][ T1043] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2428.628485][ T1043] ? do_syscall_64+0x26/0x610 [ 2428.633187][ T1043] __x64_sys_clone+0xbf/0x150 [ 2428.637848][ T1043] do_syscall_64+0x103/0x610 [ 2428.642489][ T1043] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2428.648367][ T1043] RIP: 0033:0x4563fa [ 2428.652323][ T1043] Code: 04 25 ff 7f 00 00 89 44 24 50 48 8b 6c 24 30 48 83 c4 38 c3 48 8b 74 24 48 e9 43 ff ff ff c7 44 24 50 00 00 00 00 48 8b 6c 24 <30> 48 83 c4 38 c3 e8 4b 3b 00 00 e9 c6 fe ff ff cc cc cc cc cc cc [ 2428.671947][ T1043] RSP: 002b:00007ffcf04accf0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2428.680409][ T1043] RAX: ffffffffffffffda RBX: 00007ffcf04accf0 RCX: 00000000004563fa [ 2428.688445][ T1043] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2428.696436][ T1043] RBP: 00007ffcf04acd30 R08: 0000000000000001 R09: 00000000017aa940 [ 2428.704458][ T1043] R10: 00000000017aac10 R11: 0000000000000246 R12: 0000000000000001 [ 2428.712493][ T1043] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 2428.720465][ T1043] INFO: task syz-executor.5:7658 blocked for more than 140 seconds. [ 2428.728467][ T1043] Not tainted 5.0.0-rc8-next-20190228 #45 [ 2428.734831][ T1043] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2428.743533][ T1043] syz-executor.5 D24016 7658 1 0x00000004 [ 2428.749847][ T1043] Call Trace: [ 2428.753161][ T1043] __schedule+0x817/0x1cc0 [ 2428.757586][ T1043] ? __sched_text_start+0x8/0x8 [ 2428.762471][ T1043] ? preempt_schedule+0x4b/0x60 [ 2428.767309][ T1043] ? ___preempt_schedule+0x16/0x18 [ 2428.772468][ T1043] schedule+0x92/0x180 [ 2428.776521][ T1043] rwsem_down_read_failed+0x213/0x420 [ 2428.781925][ T1043] ? __rwsem_down_read_failed_common.part.0+0x80/0x80 [ 2428.788670][ T1043] ? rcuwait_wake_up+0x11d/0x230 [ 2428.793656][ T1043] ? lock_downgrade+0x880/0x880 [ 2428.798504][ T1043] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2428.804782][ T1043] call_rwsem_down_read_failed+0x18/0x30 [ 2428.810404][ T1043] __percpu_down_read+0x8d/0xf0 [ 2428.815283][ T1043] uprobe_start_dup_mmap+0xbf/0xe0 [ 2428.820379][ T1043] copy_process.part.0+0x2bc1/0x79e0 [ 2428.825718][ T1043] ? debug_smp_processor_id+0x3c/0x280 [ 2428.831191][ T1043] ? perf_trace_lock_acquire+0xf5/0x580 [ 2428.836740][ T1043] ? __cleanup_sighand+0x60/0x60 [ 2428.841733][ T1043] _do_fork+0x257/0xfd0 [ 2428.845887][ T1043] ? fork_idle+0x1d0/0x1d0 [ 2428.850286][ T1043] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2428.855771][ T1043] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2428.861246][ T1043] ? do_syscall_64+0x26/0x610 [ 2428.865906][ T1043] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2428.871994][ T1043] ? do_syscall_64+0x26/0x610 [ 2428.876685][ T1043] __x64_sys_clone+0xbf/0x150 [ 2428.881376][ T1043] do_syscall_64+0x103/0x610 [ 2428.885948][ T1043] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2428.891865][ T1043] RIP: 0033:0x4563fa [ 2428.895743][ T1043] Code: 04 25 ff 7f 00 00 89 44 24 50 48 8b 6c 24 30 48 83 c4 38 c3 48 8b 74 24 48 e9 43 ff ff ff c7 44 24 50 00 00 00 00 48 8b 6c 24 <30> 48 83 c4 38 c3 e8 4b 3b 00 00 e9 c6 fe ff ff cc cc cc cc cc cc [ 2428.915456][ T1043] RSP: 002b:00007ffd2c9886a0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2428.923895][ T1043] RAX: ffffffffffffffda RBX: 00007ffd2c9886a0 RCX: 00000000004563fa [ 2428.931926][ T1043] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2428.939893][ T1043] RBP: 00007ffd2c9886e0 R08: 0000000000000001 R09: 0000000000fc0940 [ 2428.947884][ T1043] R10: 0000000000fc0c10 R11: 0000000000000246 R12: 0000000000000001 [ 2428.955882][ T1043] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000005 [ 2428.963973][ T1043] INFO: task udevd:21506 blocked for more than 140 seconds. [ 2428.971308][ T1043] Not tainted 5.0.0-rc8-next-20190228 #45 [ 2428.977521][ T1043] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2428.986204][ T1043] udevd D27280 21506 3876 0x00000000 [ 2428.992551][ T1043] Call Trace: [ 2428.995826][ T1043] __schedule+0x817/0x1cc0 [ 2429.000222][ T1043] ? __sched_text_start+0x8/0x8 [ 2429.005092][ T1043] ? rwsem_down_read_failed+0x1db/0x420 [ 2429.010647][ T1043] ? _raw_spin_unlock_irq+0x28/0x90 [ 2429.015825][ T1043] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2429.021153][ T1043] schedule+0x92/0x180 [ 2429.025218][ T1043] rwsem_down_read_failed+0x213/0x420 [ 2429.030634][ T1043] ? __rwsem_down_read_failed_common.part.0+0x80/0x80 [ 2429.037388][ T1043] ? rcuwait_wake_up+0x11d/0x230 [ 2429.042358][ T1043] ? lock_downgrade+0x880/0x880 [ 2429.047195][ T1043] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2429.053479][ T1043] call_rwsem_down_read_failed+0x18/0x30 [ 2429.059105][ T1043] __percpu_down_read+0x8d/0xf0 [ 2429.064001][ T1043] uprobe_start_dup_mmap+0xbf/0xe0 [ 2429.069099][ T1043] copy_process.part.0+0x2bc1/0x79e0 [ 2429.074564][ T1043] ? mark_held_locks+0xf0/0xf0 [ 2429.079331][ T1043] ? __cleanup_sighand+0x60/0x60 [ 2429.084322][ T1043] ? find_held_lock+0x35/0x130 [ 2429.089077][ T1043] ? do_raw_spin_unlock+0x57/0x270 [ 2429.094244][ T1043] ? lock_downgrade+0x880/0x880 [ 2429.099092][ T1043] _do_fork+0x257/0xfd0 [ 2429.103280][ T1043] ? fork_idle+0x1d0/0x1d0 [ 2429.107685][ T1043] ? fd_install+0x4d/0x60 [ 2429.112062][ T1043] ? do_pipe2+0x9a/0x160 [ 2429.116292][ T1043] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2429.121782][ T1043] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2429.127226][ T1043] ? do_syscall_64+0x26/0x610 [ 2429.131952][ T1043] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2429.138018][ T1043] ? do_syscall_64+0x26/0x610 [ 2429.142739][ T1043] __x64_sys_clone+0xbf/0x150 [ 2429.147408][ T1043] do_syscall_64+0x103/0x610 [ 2429.152053][ T1043] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2429.157984][ T1043] RIP: 0033:0x7f997bf97f46 [ 2429.162515][ T1043] Code: Bad RIP value. [ 2429.166571][ T1043] RSP: 002b:00007ffe00e1f0a0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2429.175077][ T1043] RAX: ffffffffffffffda RBX: 00007ffe00e1f0a0 RCX: 00007f997bf97f46 [ 2429.183100][ T1043] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2429.191102][ T1043] RBP: 00007ffe00e1f100 R08: 0000000000005402 R09: 0000000000005402 [ 2429.199056][ T1043] R10: 00007f997c8b4a70 R11: 0000000000000246 R12: 0000000000000000 [ 2429.207070][ T1043] R13: 00007ffe00e1f0c0 R14: 0000000000000005 R15: 0000000000000005 [ 2429.215095][ T1043] INFO: task udevd:22563 blocked for more than 140 seconds. [ 2429.222403][ T1043] Not tainted 5.0.0-rc8-next-20190228 #45 [ 2429.228622][ T1043] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2429.237312][ T1043] udevd D28048 22563 3876 0x00000000 [ 2429.243653][ T1043] Call Trace: [ 2429.246924][ T1043] __schedule+0x817/0x1cc0 [ 2429.251583][ T1043] ? __sched_text_start+0x8/0x8 [ 2429.256425][ T1043] ? rwsem_down_read_failed+0x1db/0x420 [ 2429.262026][ T1043] ? _raw_spin_unlock_irq+0x28/0x90 [ 2429.267215][ T1043] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2429.272748][ T1043] schedule+0x92/0x180 [ 2429.276826][ T1043] rwsem_down_read_failed+0x213/0x420 [ 2429.282271][ T1043] ? __rwsem_down_read_failed_common.part.0+0x80/0x80 [ 2429.289017][ T1043] ? rcuwait_wake_up+0x11d/0x230 [ 2429.294000][ T1043] ? lock_downgrade+0x880/0x880 [ 2429.298854][ T1043] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2429.305158][ T1043] call_rwsem_down_read_failed+0x18/0x30 [ 2429.310830][ T1043] __percpu_down_read+0x8d/0xf0 [ 2429.315710][ T1043] uprobe_start_dup_mmap+0xbf/0xe0 [ 2429.320900][ T1043] copy_process.part.0+0x2bc1/0x79e0 [ 2429.326214][ T1043] ? mark_held_locks+0xf0/0xf0 [ 2429.331227][ T1043] ? __cleanup_sighand+0x60/0x60 [ 2429.336263][ T1043] ? find_held_lock+0x35/0x130 [ 2429.341090][ T1043] ? do_raw_spin_unlock+0x57/0x270 [ 2429.346212][ T1043] ? lock_downgrade+0x880/0x880 [ 2429.351098][ T1043] _do_fork+0x257/0xfd0 [ 2429.355257][ T1043] ? fork_idle+0x1d0/0x1d0 [ 2429.359725][ T1043] ? fd_install+0x4d/0x60 [ 2429.364109][ T1043] ? do_pipe2+0x9a/0x160 [ 2429.368345][ T1043] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2429.373835][ T1043] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2429.379295][ T1043] ? do_syscall_64+0x26/0x610 [ 2429.384034][ T1043] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2429.390094][ T1043] ? do_syscall_64+0x26/0x610 [ 2429.394974][ T1043] __x64_sys_clone+0xbf/0x150 [ 2429.399654][ T1043] do_syscall_64+0x103/0x610 [ 2429.404269][ T1043] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2429.410148][ T1043] RIP: 0033:0x7f997bf97f46 [ 2429.414625][ T1043] Code: Bad RIP value. [ 2429.418675][ T1043] RSP: 002b:00007ffe00e1f0a0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2429.427117][ T1043] RAX: ffffffffffffffda RBX: 00007ffe00e1f0a0 RCX: 00007f997bf97f46 [ 2429.435154][ T1043] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2429.443167][ T1043] RBP: 00007ffe00e1f100 R08: 0000000000005823 R09: 0000000000005823 [ 2429.451159][ T1043] R10: 00007f997c8b4a70 R11: 0000000000000246 R12: 0000000000000000 [ 2429.459113][ T1043] R13: 00007ffe00e1f0c0 R14: 0000000000000005 R15: 0000000000000005 [ 2429.467156][ T1043] INFO: task syz-executor.4:21487 blocked for more than 140 seconds. [ 2429.475243][ T1043] Not tainted 5.0.0-rc8-next-20190228 #45 [ 2429.481513][ T1043] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2429.490167][ T1043] syz-executor.4 D27792 21487 7656 0x00000004 [ 2429.496529][ T1043] Call Trace: [ 2429.499820][ T1043] __schedule+0x817/0x1cc0 [ 2429.504297][ T1043] ? __sched_text_start+0x8/0x8 [ 2429.509128][ T1043] ? percpu_down_write+0x6a/0x440 [ 2429.514182][ T1043] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2429.519909][ T1043] schedule+0x92/0x180 [ 2429.524002][ T1043] percpu_down_write+0x342/0x440 [ 2429.528937][ T1043] ? __percpu_down_read+0xf0/0xf0 [ 2429.534016][ T1043] register_for_each_vma+0x8c/0xde0 [ 2429.539206][ T1043] ? lock_downgrade+0x880/0x880 [ 2429.544080][ T1043] ? set_orig_insn+0x60/0x60 [ 2429.548716][ T1043] __uprobe_register+0x45a/0x7c0 [ 2429.553702][ T1043] ? lockdep_init_map+0x10c/0x5b0 [ 2429.558716][ T1043] uprobe_register_refctr+0x2e/0x40 [ 2429.564040][ T1043] probe_event_enable+0x51d/0xc40 [ 2429.569110][ T1043] ? pcpu_balance_workfn+0x12a0/0x12a0 [ 2429.574611][ T1043] ? traceprobe_set_print_fmt+0x3a/0xa0 [ 2429.580147][ T1043] ? __uprobe_perf_filter.part.0+0x110/0x110 [ 2429.586180][ T1043] trace_uprobe_register+0x4ba/0x960 [ 2429.591493][ T1043] perf_trace_event_init+0x500/0x990 [ 2429.596777][ T1043] perf_uprobe_init+0x1db/0x290 [ 2429.601718][ T1043] perf_uprobe_event_init+0x106/0x1a0 [ 2429.607080][ T1043] perf_try_init_event+0x137/0x3f0 [ 2429.612226][ T1043] perf_event_alloc.part.0+0x1e1a/0x2fb0 [ 2429.617857][ T1043] ? __perf_event_read+0xe10/0xe10 [ 2429.623024][ T1043] ? kasan_check_read+0x11/0x20 [ 2429.627871][ T1043] ? do_raw_spin_unlock+0x57/0x270 [ 2429.633013][ T1043] __do_sys_perf_event_open+0x830/0x24d0 [ 2429.638636][ T1043] ? perf_event_set_output+0x4e0/0x4e0 [ 2429.644139][ T1043] ? put_timespec64+0xda/0x140 [ 2429.648905][ T1043] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2429.654397][ T1043] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2429.659868][ T1043] ? do_syscall_64+0x26/0x610 [ 2429.664593][ T1043] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2429.670678][ T1043] ? do_syscall_64+0x26/0x610 [ 2429.675337][ T1043] __x64_sys_perf_event_open+0xbe/0x150 [ 2429.680911][ T1043] do_syscall_64+0x103/0x610 [ 2429.685495][ T1043] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2429.691617][ T1043] RIP: 0033:0x457e29 [ 2429.695506][ T1043] Code: Bad RIP value. [ 2429.699574][ T1043] RSP: 002b:00007f9efc085c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2429.708010][ T1043] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457e29 [ 2429.716070][ T1043] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 2429.724101][ T1043] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2429.732088][ T1043] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f9efc0866d4 [ 2429.740059][ T1043] R13: 00000000004c4491 R14: 00000000004d7bf8 R15: 00000000ffffffff [ 2429.748089][ T1043] [ 2429.748089][ T1043] Showing all locks held in the system: [ 2429.755902][ T1043] 1 lock held by khungtaskd/1043: [ 2429.760960][ T1043] #0: 000000003e87e961 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e [ 2429.770393][ T1043] 1 lock held by rsyslogd/7515: [ 2429.775233][ T1043] #0: 000000003d9dbe6a (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 2429.783852][ T1043] 2 locks held by getty/7606: [ 2429.788510][ T1043] #0: 0000000099807c41 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 2429.797490][ T1043] #1: 000000003a892262 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 2429.807141][ T1043] 2 locks held by getty/7607: [ 2429.811842][ T1043] #0: 000000008132462d (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 2429.820795][ T1043] #1: 000000001b9b7c29 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 2429.830376][ T1043] 2 locks held by getty/7608: [ 2429.835029][ T1043] #0: 00000000e01bb1dc (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 2429.844004][ T1043] #1: 000000001ccfaa70 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 2429.853578][ T1043] 2 locks held by getty/7609: [ 2429.858228][ T1043] #0: 00000000fd5fbc12 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 2429.867185][ T1043] #1: 000000005f4a5d25 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 2429.876761][ T1043] 2 locks held by getty/7610: [ 2429.881456][ T1043] #0: 000000007793c519 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 2429.890413][ T1043] #1: 00000000cc570b7b (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 2429.899991][ T1043] 2 locks held by getty/7611: [ 2429.904707][ T1043] #0: 000000003dead16a (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 2429.913680][ T1043] #1: 0000000078c82395 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 2429.923281][ T1043] 2 locks held by getty/7612: [ 2429.927954][ T1043] #0: 000000001390618b (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 2429.936929][ T1043] #1: 000000001901e5f1 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 2429.946493][ T1043] 1 lock held by syz-executor.0/7642: [ 2429.951930][ T1043] #0: 00000000ed079093 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bc1/0x79e0 [ 2429.961449][ T1043] 1 lock held by syz-executor.1/7645: [ 2429.966794][ T1043] #0: 00000000ed079093 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bc1/0x79e0 [ 2429.976531][ T1043] 1 lock held by syz-executor.2/7648: [ 2429.981941][ T1043] #0: 00000000ed079093 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bc1/0x79e0 [ 2429.991427][ T1043] 1 lock held by syz-executor.3/7652: [ 2429.996774][ T1043] #0: 00000000ed079093 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bc1/0x79e0 [ 2430.006383][ T1043] 1 lock held by syz-executor.5/7658: [ 2430.011760][ T1043] #0: 00000000ed079093 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bc1/0x79e0 [ 2430.021260][ T1043] 1 lock held by syz-executor.4/8893: [ 2430.026609][ T1043] #0: 000000000d8443f3 (event_mutex){+.+.}, at: perf_trace_destroy+0x28/0x100 [ 2430.035732][ T1043] 1 lock held by syz-executor.2/12313: [ 2430.041216][ T1043] #0: 00000000ed079093 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bc1/0x79e0 [ 2430.051445][ T1043] 1 lock held by udevd/21506: [ 2430.056113][ T1043] #0: 00000000ed079093 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bc1/0x79e0 [ 2430.065601][ T1043] 1 lock held by udevd/22563: [ 2430.070306][ T1043] #0: 00000000ed079093 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bc1/0x79e0 [ 2430.079759][ T1043] 2 locks held by syz-executor.0/23316: [ 2430.085323][ T1043] #0: 0000000082b75ab4 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 2430.094342][ T1043] #1: 00000000e8b096dd (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 2430.104048][ T1043] 5 locks held by syz-executor.4/21487: [ 2430.109576][ T1043] #0: 00000000af5a51ac (&sig->cred_guard_mutex){+.+.}, at: __do_sys_perf_event_open+0x6d2/0x24d0 [ 2430.120219][ T1043] #1: 00000000cf88211d (&pmus_srcu){....}, at: perf_event_alloc.part.0+0xd47/0x2fb0 [ 2430.129676][ T1043] #2: 000000000d8443f3 (event_mutex){+.+.}, at: perf_uprobe_init+0x1d0/0x290 [ 2430.138599][ T1043] #3: 000000004b12700a (&uprobe->register_rwsem){+.+.}, at: __uprobe_register+0x3c9/0x7c0 [ 2430.148612][ T1043] #4: 00000000ed079093 (&dup_mmap_sem){++++}, at: percpu_down_write+0x6a/0x440 [ 2430.157760][ T1043] [ 2430.160129][ T1043] ============================================= [ 2430.160129][ T1043] [ 2430.168555][ T1043] NMI backtrace for cpu 1 [ 2430.172929][ T1043] CPU: 1 PID: 1043 Comm: khungtaskd Not tainted 5.0.0-rc8-next-20190228 #45 [ 2430.181582][ T1043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2430.191617][ T1043] Call Trace: [ 2430.194889][ T1043] dump_stack+0x172/0x1f0 [ 2430.199208][ T1043] nmi_cpu_backtrace.cold+0x63/0xa4 [ 2430.204452][ T1043] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 2430.210071][ T1043] nmi_trigger_cpumask_backtrace+0x1be/0x236 [ 2430.216047][ T1043] arch_trigger_cpumask_backtrace+0x14/0x20 [ 2430.221916][ T1043] watchdog+0x9b2/0xeb0 [ 2430.226079][ T1043] kthread+0x357/0x430 [ 2430.230173][ T1043] ? reset_hung_task_detector+0x30/0x30 [ 2430.235705][ T1043] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 2430.241928][ T1043] ret_from_fork+0x3a/0x50 [ 2430.246446][ T1043] Sending NMI from CPU 1 to CPUs 0: [ 2430.251972][ C0] NMI backtrace for cpu 0 [ 2430.251978][ C0] CPU: 0 PID: 21362 Comm: kworker/u4:0 Not tainted 5.0.0-rc8-next-20190228 #45 [ 2430.251982][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2430.251985][ C0] Workqueue: bat_events batadv_nc_worker [ 2430.251989][ C0] RIP: 0010:mark_lock+0x21/0x1380 [ 2430.251998][ C0] Code: 2e 0f 1f 84 00 00 00 00 00 55 4c 8d 4e 20 89 d1 48 b8 00 00 00 00 00 fc ff df 48 89 e5 41 57 49 89 ff 41 56 41 89 d6 4c 89 ca <41> 55 48 c1 ea 03 41 bd 01 00 00 00 41 54 41 d3 e5 49 89 f4 53 48 [ 2430.252000][ C0] RSP: 0018:ffff888055dd79d0 EFLAGS: 00000046 [ 2430.252006][ C0] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000008 [ 2430.252009][ C0] RDX: ffff88805568e9f0 RSI: ffff88805568e9d0 RDI: ffff88805568e100 [ 2430.252013][ C0] RBP: ffff888055dd79e0 R08: 000000000000056a R09: ffff88805568e9f0 [ 2430.252016][ C0] R10: ffff88805568e9d0 R11: 0000000000000002 R12: ffff88805568e9f2 [ 2430.252020][ C0] R13: 0000000000000000 R14: 0000000000000008 R15: ffff88805568e100 [ 2430.252023][ C0] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 2430.252027][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2430.252030][ C0] CR2: 0000000001846000 CR3: 0000000093c34000 CR4: 00000000001426f0 [ 2430.252032][ C0] Call Trace: [ 2430.252034][ C0] __lock_acquire+0x55d/0x4710 [ 2430.252037][ C0] ? mark_held_locks+0xf0/0xf0 [ 2430.252039][ C0] ? debug_smp_processor_id+0x3c/0x280 [ 2430.252042][ C0] ? perf_trace_lock_acquire+0xf5/0x580 [ 2430.252045][ C0] ? perf_trace_lock+0x510/0x510 [ 2430.252047][ C0] ? find_held_lock+0x35/0x130 [ 2430.252049][ C0] ? mark_held_locks+0xa4/0xf0 [ 2430.252052][ C0] lock_acquire+0x16f/0x3f0 [ 2430.252054][ C0] ? batadv_nc_purge_paths+0xd8/0x370 [ 2430.252057][ C0] ? batadv_nc_to_purge_nc_path_coding+0x170/0x170 [ 2430.252060][ C0] _raw_spin_lock_bh+0x33/0x50 [ 2430.252062][ C0] ? batadv_nc_purge_paths+0xd8/0x370 [ 2430.252065][ C0] batadv_nc_purge_paths+0xd8/0x370 [ 2430.252067][ C0] batadv_nc_worker+0x2cf/0x760 [ 2430.252070][ C0] process_one_work+0x98e/0x1790 [ 2430.252072][ C0] ? pwq_dec_nr_in_flight+0x320/0x320 [ 2430.252075][ C0] ? lock_acquire+0x16f/0x3f0 [ 2430.252077][ C0] worker_thread+0x98/0xe40 [ 2430.252079][ C0] kthread+0x357/0x430 [ 2430.252082][ C0] ? process_one_work+0x1790/0x1790 [ 2430.252085][ C0] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 2430.252087][ C0] ret_from_fork+0x3a/0x50 [ 2430.252677][ T1043] Kernel panic - not syncing: hung_task: blocked tasks [ 2430.495356][ T1043] CPU: 1 PID: 1043 Comm: khungtaskd Not tainted 5.0.0-rc8-next-20190228 #45 [ 2430.503999][ T1043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2430.514042][ T1043] Call Trace: [ 2430.517333][ T1043] dump_stack+0x172/0x1f0 [ 2430.521658][ T1043] panic+0x2cb/0x65c [ 2430.525533][ T1043] ? __warn_printk+0xf3/0xf3 [ 2430.530105][ T1043] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2430.535812][ T1043] ? printk_safe_flush+0xf2/0x140 [ 2430.540814][ T1043] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2430.547039][ T1043] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 2430.552651][ T1043] ? nmi_trigger_cpumask_backtrace+0x1a7/0x236 [ 2430.558798][ T1043] ? nmi_trigger_cpumask_backtrace+0x19e/0x236 [ 2430.564938][ T1043] watchdog+0x9c3/0xeb0 [ 2430.569083][ T1043] kthread+0x357/0x430 [ 2430.573140][ T1043] ? reset_hung_task_detector+0x30/0x30 [ 2430.578666][ T1043] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 2430.584888][ T1043] ret_from_fork+0x3a/0x50 [ 2430.590287][ T1043] Kernel Offset: disabled [ 2430.594615][ T1043] Rebooting in 86400 seconds..