fffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418", 0x9f) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0xfffffe67, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:09 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0xa8) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) dup2(r2, r3) r4 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xfffffffffffffffc, 0x4001) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000040)={{r1}, 0x6, 0x6, 0x7}) [ 963.513537] binder: 26365:26372 ioctl c0306201 0 returned -14 [ 963.515561] binder: 26368:26371 ioctl c0306201 0 returned -14 [ 963.520830] binder: 26367:26373 ioctl c0306201 0 returned -14 [ 963.528480] binder: 26366:26369 ioctl c0306201 0 returned -14 02:06:09 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0xc00) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) dup2(r2, r3) [ 963.590901] binder: 26365:26378 ioctl c0306201 0 returned -14 [ 963.616395] binder: 26366:26369 ioctl c0306201 0 returned -14 02:06:09 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x40002, 0x1) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) dup2(r2, r3) 02:06:09 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) getsockopt$llc_int(r3, 0x10c, 0x1, &(0x7f00000001c0), &(0x7f0000000280)=0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000000000000bfa30000000000004503000000fefff67a0af0ffe8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000100b7050000220000006a0a00fe00000000850000000b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3487bb07eb78c27b090941bd3108d31287801000000000000000012cf6956e09d1938013c217e0f6ab2366e8a87554c101f03733d40c62753ecd1f46f09beb1bbfad9bae24b4e8a96ec60f2af47f99376e43836ba33fd5a447f936e000755861103bb45e5d53c9fe36bbd35e53c6376c0c2b1daa58a9c34444bb7e9673476d017fc94c5857ead931db6cd370e93b6d5a74cc1d2c50896249ed7420f8680a730d876c36a1f3f1b8eb12d9390a49f2d99b5df916269392e0d0000556ec919d0b1681369d448c6f8c9969baa463b36d25ac1628ef858a5cc77c14c8df67f20fd224829af6de3d5ef71857496714db96c6db18ea5189cfbddd6e4de3617adabc339334b97b11911905d6692a33f1f370c05e1f134e5f90a326b0cb5268e40f5ba9b5360a516c3f87f05e5d1af657c445131edb61670ff2c62117e96eba22382758239e69127d5656e63bf02af42a5ac113879bfc27d7e6ba1f41301065efb1685e65f30df092251d556a89c2886ea64bc457280330dc9cdb6db023433e9ba97796a7823d241795ab1258fe937312fc5e921e8758153be202f000055a4921970e28e6238580101b710cf8b82bcab02c12fe01bd8df4e97c67e8a3693b23668c55eed4e24eafa16a4f43b6729990a9321531e5eb006b547c13cdfa2fa211d07a29377ea1c5aa7f5d58331ad45fc89ac44c9d2d6b3ac03ce76fc9d341f076264f8cf493901ad919329a295f63be4e91417b9cd09cf47272d46666571f24d71fcff2a9e869c2144f5775c37084acc57b5793f25f853f7a98965e5bd9ff5253f787eb321572355c706d6d2e27c475fd077876a4405b72b00000000000000b79d8029af8de217c23f79e68fe48420cbb226a752b817fc17efaa1268c6"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BLKIOOPT(r5, 0x1279, &(0x7f0000000100)) dup2(r2, r0) 02:06:09 executing program 3: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@setneightbl={0x1c, 0x43, 0x1, 0x0, 0x0, {0x2}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)=0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r4, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r5}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r2, r3, 0x0, 0x3, &(0x7f0000000040)='M/\x00', r5}, 0x30) gettid() tkill(r0, 0x4) ptrace(0x10, r0) ptrace$peeksig(0x2, r0, 0x0, 0x0) 02:06:09 executing program 3: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() tkill(r1, 0x1000000000016) ptrace(0x10, r0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@setneightbl={0x1c, 0x43, 0x1, 0x0, 0x0, {0x2}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xb3, 0x1}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x4}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20001000}, 0x10044080) ptrace$peeksig(0x2, r0, 0x0, 0x0) 02:06:10 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)) write(0xffffffffffffffff, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0xfffffe67, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:10 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:10 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 02:06:10 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418", 0x9f) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0xfffffe67, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 964.362241] binder: 26411:26415 ioctl c0306201 0 returned -14 [ 964.373741] binder: 26413:26418 ioctl c0306201 0 returned -14 [ 964.373857] binder: 26412:26416 ioctl c0306201 0 returned -14 [ 964.395847] binder: 26414:26417 ioctl c0306201 0 returned -14 [ 964.439885] binder: 26411:26424 ioctl c0306201 0 returned -14 [ 964.449018] binder: 26414:26425 ioctl c0306201 0 returned -14 [ 964.500923] binder: 26414:26427 ioctl c0306201 0 returned -14 02:06:10 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$KVM_GET_DEBUGREGS(r4, 0x8080aea1, &(0x7f0000000000)) dup2(r2, r3) 02:06:10 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0xfffffe67, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:10 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:10 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a3", 0xa0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0xfffffe67, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:10 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) [ 965.210949] binder: 26437:26440 ioctl c0306201 0 returned -14 [ 965.217431] binder: 26436:26438 ioctl c0306201 0 returned -14 [ 965.233449] binder: 26439:26444 ioctl c0306201 0 returned -14 [ 965.238325] binder: 26442:26445 ioctl c0306201 0 returned -14 [ 965.281836] binder: 26437:26448 ioctl c0306201 0 returned -14 [ 965.293870] binder: 26442:26450 ioctl c0306201 0 returned -14 [ 965.347984] binder: 26442:26452 ioctl c0306201 0 returned -14 02:06:11 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_delete(r4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@setneightbl={0x1c, 0x43, 0x1, 0x0, 0x0, {0x2}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0) sendmsg$nl_crypto(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@delrng={0x10, 0x14, 0x200, 0x70bd25, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x4080) dup2(r2, r3) 02:06:11 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x4400, 0x0) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000040)=0x1000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0xaa203, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {0x0, 0x2}, {0x6, 0x13, @udp='udp:syz2\x00'}}}, 0x2c}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="3002fb803ad938df1309cd9b85c4675b2e3954b4839776648e05cac3d93a9b21f6f5b67b8c005fd9bc11b4883258806d79eb0aaeb9a75350b3b3e396fb84ebdcf804c4e28e3e3a72c8d46e8a3b92a56b641b05f55758622973e3", @ANYRES16=r5, @ANYBLOB="000025bd7000fbdbdf2501000000000000000841000000140018000000036574683a6272696467653000"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) r6 = socket$inet6(0xa, 0x2, 0x0) dup2(r6, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000040)={r7, 0x9, 0xfffd}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={r7, 0x80, 0x0, 0x2, 0xb3b}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000100)={r7, 0x3ff, 0x5}, 0x8) 02:06:12 executing program 3: geteuid() clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() tkill(r1, 0x1000000000016) ptrace(0x10, r0) ptrace$peeksig(0x2, r0, 0x0, 0x0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@random={'system.', '\x00'}, &(0x7f0000000080)=""/2, 0x2) 02:06:12 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000000)={0x0, [0x8001, 0x40, 0xff, 0x6, 0x2, 0xfdf, 0xfff9, 0x1, 0x2, 0x7, 0x13f, 0x7, 0x77, 0x748, 0x7ff, 0x2, 0x1f, 0x400, 0x81, 0x3, 0x0, 0x1f, 0x0, 0x400, 0x35, 0x81, 0x5, 0xcb00, 0xfff, 0x3, 0x2, 0x6, 0x1000, 0x6, 0x4, 0x651, 0x0, 0x6, 0x1, 0x6, 0x0, 0x807, 0x20, 0x3, 0x4e, 0x7, 0x81, 0x1000], 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = dup3(r4, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x6c, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000040)={r7, 0x9, 0xfffd}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={r7, 0x80, 0x0, 0x2, 0xb3b}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000080)={r7, 0xa3, "14c9a941bdc4c2aef69c7de46e6a577a32e699160c049984387e6aec62b8f43ccae3feb5fa45f4c27d585c93b106fb73ea8299e6063a7bcfc68b8033887a0d2393701611239252d71beb590c75be1cab7e330f1918cf7f61d33bfa5b1deb2225ed7ea3f20083855e1d37a65ad88b34a818dea86952eca6e0b7b2f2dad15bbae452a6298c22bf5ae11202d0b7999bbe5ea4756c3f75f505c7872d288483a82ccaa8a68e"}, &(0x7f0000000140)=0xab) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) dup2(r3, r8) 02:06:12 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0xfffffe67, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:12 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:12 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a3", 0xa0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0xfffffe67, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:12 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) [ 966.934551] binder: 26471:26475 ioctl c0306201 0 returned -14 [ 966.941660] binder: 26473:26476 ioctl c0306201 0 returned -14 [ 966.958083] binder: 26470:26479 ioctl c0306201 0 returned -14 [ 966.966916] binder: 26472:26480 ioctl c0306201 0 returned -14 [ 966.997593] binder: 26473:26486 ioctl c0306201 0 returned -14 [ 967.019882] binder: 26470:26487 ioctl c0306201 0 returned -14 [ 967.049824] binder: 26473:26490 ioctl c0306201 0 returned -14 02:06:13 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:06:13 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0xfffffe67, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:13 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:13 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a3", 0xa0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0xfffffe67, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:13 executing program 3: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x14600, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000040)={0x101, 0x2, 0xff, 0xdb3, 0x1, "2957d0c93e1e2d17"}) tkill(r1, 0x1000000000016) ptrace(0x10, r0) ptrace$peeksig(0x2, r0, 0x0, 0x0) [ 967.764254] binder: 26493:26495 ioctl c0306201 0 returned -14 [ 967.778972] binder: 26494:26496 ioctl c0306201 0 returned -14 [ 967.795971] ptrace attach of "/root/syz-executor.3"[26477] was attempted by "/root/syz-executor.3"[26498] 02:06:13 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000000)={0x1, 0x1001, 0x2}) ioctl$VIDIOC_G_INPUT(r1, 0x80045626, &(0x7f0000000040)) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) dup2(r2, r3) [ 967.824154] binder: 26499:26502 ioctl c0306201 0 returned -14 [ 967.841557] binder: 26501:26508 ioctl c0306201 0 returned -14 [ 967.860355] binder: 26493:26509 ioctl c0306201 0 returned -14 02:06:13 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x80000, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000080)=0x8) [ 967.885692] binder: 26499:26516 ioctl c0306201 0 returned -14 02:06:13 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@random={'trusted.', '\x00'}) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='trusted.overlay.upper\x00', &(0x7f0000000340)={0x0, 0xfb, 0x9e, 0x7, 0x1e, "76181c2bbc5785581c6ffd76697789ad", "5b3ff05654f65ceae8042a71e95a70ee81fbc5a9789b95ddd2ffeab1b3ce1b4c645dd5c10fea7798869ab7135eab0f553fbfc13b1260973b33d7395176c8e96a4a72d9e35f8199da0c2b9404b8643e4295ade2f524b0ad5274c49973af922a5047e594c8570e81e6d918ce4434312933f8eecf06e166be143bd1e1a57b77304d589b9168e1a1a23b68"}, 0x9e, 0x2) getpeername(r0, &(0x7f0000000000)=@tipc=@id, &(0x7f0000000080)=0x80) dup2(r2, r3) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@setneightbl={0x1c, 0x43, 0x1, 0x0, 0x0, {0x2}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0) r5 = accept(r4, 0x0, &(0x7f0000000140)) recvfrom$netrom(r5, &(0x7f00000001c0)=""/96, 0x60, 0x0, &(0x7f0000000240)={{0x3, @default, 0x2}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @null, @null, @default, @bcast]}, 0x48) 02:06:13 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000000)=""/34, &(0x7f0000000040)=0x22) dup2(r2, r3) 02:06:13 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000000)="29974c31801046aa4f65a2b03906699b0bc73d9e21b16addbadbc3384921e9891bd5e7fd838ad2f9341b449d124610f178df40fafd6cc87f954f4be245b14c78e9911e0e5fd2e4e773975a44667d29de6e4081ca318756c325f9d4c798fc119589eb36b6be902dc5a33731aad9d73fe3e12148bdec61bb20c9bc55d845e06285"}, 0x20) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) dup2(r2, r3) 02:06:13 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000440)={0x200000000000000, 0x5000, 0xff, 0x5, 0x10}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x5000000000004) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000400)={&(0x7f0000000040)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000000c0)="4389351904b132e00d466727c0df80e224f473f6803de3e55d03c7f14d7955ad8a735659da269cee91b18c949e8a1a454d3fb984233d73851ba0cd2d510408172ed045c3a557de01bb67b317ed8e0b36f9d1afaf1809a1f692c783addf5f03", 0x5f}, {&(0x7f0000000140)="146d7c51962ff29835e3", 0xa}, {&(0x7f00000001c0)="28153b508c2d8a2d8cd59c96b4ee4a51aefc0a5fcbb89084b1ba5ee81a7783d6ee5177e6d78cc4876a53a1a75ae9ba4ec405cb0650171656b541b574cb0b0cba1d2b4cea0d2277e5be98fabae473ae49ddc02947e2dd97961362c6955c2684b909708b78d240b1b0bd6a1c16191e731c3fb70c2669d7c5a7e76b0f796e4018470d00b9302af7e6b79c743bc2a9a6d38a70b8253e2a192c99c6d412d5ef86185fd836ae29031cee", 0xa7}, {&(0x7f0000000280)="e49360bd089b3bafbc905028365099598be02a84b6abf80946c88305f9bb4344ba", 0x21}, {&(0x7f00000002c0)="0ff0a0fff5487f504f27ba43f4397474c67b4ae4a6ec8052491351e98f60a6ef794370c44f15b13862b523678e4ab51992153dbaf39b4de4f226946e4acce5ced77facf62cc905c97ac30751fdae6c7d077091637d0933c855bcdcf0954243aa84334ef867e99c57f9d76f00e1debf414979632386a3036eae142aee58a769d50587b7ccae6b4b39978bb940196ae31d4e67bf469e3820a65c540fbbbd36a6b33fe75f37e571a6bd4e3f", 0xaa}], 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x220}, 0x20000001) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) dup2(r4, r5) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r5, 0xc080661a, &(0x7f0000000780)={{0x1, 0x0, @descriptor="b294424cdf5519e3"}}) 02:06:14 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:14 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480), 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0xfffffe67, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:14 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:14 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000780)={0xfffffe67, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 968.590810] binder: 26555:26557 ioctl c0306201 0 returned -14 [ 968.597273] binder: 26556:26558 ioctl c0306201 0 returned -14 [ 968.641441] binder: 26560:26563 ioctl c0306201 0 returned -14 [ 968.657570] binder: 26562:26565 ioctl c0306201 0 returned -14 [ 968.664492] binder: 26556:26568 ioctl c0306201 0 returned -14 [ 968.694685] binder: 26560:26571 ioctl c0306201 0 returned -14 02:06:14 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="02002bbd7000ffdbdfa06b00000c080002149ae1b57c95a5296bc6be1198ca3bb1cecf49543cdaee7c82016091"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000828bd7000fedbdf2501000000080002000200000008000200020000000800020003000000b0000c8014000b8008000a00d4b20000080009004dd870732c000b8008000ad80db3ad8cba6d6d00e957000008000a006d42000000000a00183e000008000a0034ef000024000b8008000900fac28016080009008f5b233808000900cf29e58b48dc2700fda49b7c24000b804afe0900ac5cc41a08000a00a072000008000900b1a0a71e08000a009fea000024000b80080009003a778b2a0800c9000400000008000a00a8a700000800090049024b7d08000100030000000000088000000780"], 0xe4}, 0x1, 0x0, 0x0, 0xc000}, 0x2) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="ba010000", @ANYRES32=r2, @ANYBLOB="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"/462], 0x1d4}}, 0x2400c014) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0xac, r4, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x5c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x40000001}, 0x2005) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="834da6ad68af22ae092d94be401491c518b4a7403eb3ade374b37aaf06cbd373486bfb258e5aa26c94ef41a983d90ac1ce3f07cda2be5818f92039fb15917e026b8b144e9ef9d8d126c133c9702c4aa472d44005872a32347174ab7b1fe9a3492ec8a007da17b26116fe0eae4c3f71148e96fe0aab7cbdecbc070b88b3ca9f4bb534209a7b29522346d9b181619d8b7986322b34bb4691a8637522bc50c247a987072d10fb16fecaa34277e7c749a7d6d36a54d19c6eaf8f62430f36ac040919f48417f5c5f5ba641369a491a8dde427241c4672d4", @ANYRES16=r4, @ANYBLOB="020027bd7000fedbdf250100aecb9e75ce5b2a6222c96f3e8bb80000"], 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000800) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0xa4, r4, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x44, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52ad4a5d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x378b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17cf502c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x48eecdf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c0ebd9a}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5bc13e3a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3f4df84f}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40010}, 0x4004800) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYRES64, @ANYRESHEX=r1, @ANYBLOB="010028bd7000fcdbdf25040000000800016503000000140004800500030082000000050003000100000004000c800800020002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000326bd7000fcdbdf250400000008000100fdffffff0800c9ce38870000"], 0x24}, 0x1, 0x0, 0x0, 0x4040805}, 0x4044000) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x50, r4, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x34, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4d3a}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe694}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4e45}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17487761}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2a80}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000000) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x40c8a041}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)=ANY=[@ANYBLOB="58800000", @ANYRES16=r4, @ANYBLOB="040056410000fddbdf25030000004400088014000780080006004900000008000500a7ce7f252c00078008000500f9c8e56108000500f996440508000600bf00000008000600ce000000080005008b56d630"], 0x58}, 0x1, 0x0, 0x0, 0x8008805}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r4, 0x9055c669f393211c, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x408c0}, 0x2) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1a49}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r4, 0x0, 0x1, 0x25dfdbfc}, 0xfffffffffffffe28}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000000) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000001400)={0x35c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0xdc, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1069ef3e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x74e2}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd07e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x669d8186}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5f52}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8e3}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc0ca83a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a4959e9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x308e82ec}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x16eab7b1}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x94df8d4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1120}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22d5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x185be80b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6f16}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29c85645}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd97a}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa1f6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x255f5cd9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11fd2817}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3005}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70dc611c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5131812e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x90e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xb8, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xba}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xed}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a92995}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c328652}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x27}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa3}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x64}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5810cdec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31d336d5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x53}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1eaf5aac}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x53}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x708e9148}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xeb}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x66deeba6}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x128, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x55}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xad}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x754f57cd}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x96578d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6641130e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59629644}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74325340}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x80088}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7b662da8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5fdfd445}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3415939c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9c}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x58103d6b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x60421f74}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40e3bbb7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d7aedc2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41c666b1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x17bf376b}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62f78359}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45863d56}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x53dfdf9b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xcf607b0}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6382be06}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28685fc7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x50, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4cbc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb242}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1127cb5d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7fffffff}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6faf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbd6f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdf18}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1365}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3afa5d1f}]}]}]}, 0x35c}}, 0x80) dup2(r2, r3) 02:06:16 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480), 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0xfffffe67, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:16 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@setneightbl={0x1c, 0x43, 0x1, 0x0, 0x0, {0x2}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)=0x0) syz_open_procfs(r2, &(0x7f00000000c0)='net/fib_trie\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x2) dup2(r0, r3) ioctl$TIOCNXCL(r3, 0x540d) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) accept$inet(r4, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) dup2(r6, r7) 02:06:16 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0xfffffe67, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:16 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000780)={0xfffffe67, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:16 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:16 executing program 3: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() tkill(r1, 0x1000000000016) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001440), 0xfffffc41) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x4) r2 = socket$inet(0x2, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r5, &(0x7f00000000c0)="4ce417346c1e73c21e65b283d094053500", 0x11, 0x4000040, &(0x7f0000000100)={0x2, 0x2, @multicast1}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="aa600000", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x6c, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000040)={r6, 0x9, 0xfffd}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={r6, 0x80, 0x0, 0x2, 0xb3b}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x80, 0xcdc0, 0x200, 0x800, 0x3fbb, 0xc783, 0x1f, 0x100, r6}, 0x20) ptrace(0x10, r0) ptrace$peeksig(0x2, r0, 0x0, 0x0) 02:06:16 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000000)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@setneightbl={0x1c, 0x43, 0x1, 0x0, 0x0, {0x2}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {0x0, 0x2}, {0x6, 0x13, @udp='udp:syz2\x00'}}}, 0x2c}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r6, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x3, @media='ib\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) dup2(r2, r3) [ 970.845316] binder: 26587:26590 ioctl c0306201 0 returned -14 [ 970.852415] binder: 26585:26591 ioctl c0306201 0 returned -14 [ 970.873357] binder: 26589:26594 ioctl c0306201 0 returned -14 [ 970.881187] binder: 26586:26597 ioctl c0306201 0 returned -14 [ 970.931454] binder: 26589:26607 ioctl c0306201 0 returned -14 [ 970.936995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=26606 comm=syz-executor.4 02:06:16 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PDEATHSIG(0x1, 0x21) r2 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r3, 0xc0245720, &(0x7f00000000c0)={0x1}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x5e402, 0x0) write$P9_RFSYNC(r1, &(0x7f0000000040)={0x7, 0x33, 0x1}, 0x7) dup2(r2, r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$DRM_IOCTL_CONTROL(r5, 0x40086414, &(0x7f0000000080)={0x0, 0x2}) [ 970.970048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=26606 comm=syz-executor.4 02:06:17 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000780)={0xfffffe67, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:17 executing program 0 (fault-call:9 fault-nth:0): r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:06:17 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:17 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480), 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0xfffffe67, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 971.668598] binder: 26621:26622 ioctl c0306201 0 returned -14 [ 971.694929] binder: 26625:26626 ioctl c0306201 0 returned -14 [ 971.713754] binder: 26628:26630 ioctl c0306201 0 returned -14 [ 971.721542] binder: 26627:26629 ioctl c0306201 0 returned -14 [ 971.736407] binder: 26621:26633 ioctl c0306201 0 returned -14 [ 971.767567] binder: 26628:26637 ioctl c0306201 0 returned -14 [ 971.788968] FAULT_INJECTION: forcing a failure. [ 971.788968] name failslab, interval 1, probability 0, space 0, times 0 [ 971.800706] CPU: 0 PID: 26639 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 [ 971.808709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 971.818058] Call Trace: [ 971.820735] dump_stack+0x1b2/0x283 [ 971.824352] should_fail.cold+0x10a/0x154 [ 971.828489] should_failslab+0xd6/0x130 [ 971.832443] kmem_cache_alloc_trace+0x2b7/0x3f0 [ 971.837103] binder_get_thread+0x1b3/0x7b0 [ 971.841326] binder_ioctl+0x170/0xeeb [ 971.845106] ? check_preemption_disabled+0x35/0x240 [ 971.850101] ? binder_ioctl_write_read.isra.0+0x710/0x710 [ 971.855622] ? binder_ioctl_write_read.isra.0+0x710/0x710 [ 971.861152] do_vfs_ioctl+0x75a/0xfe0 [ 971.864945] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 971.870550] ? ioctl_preallocate+0x1a0/0x1a0 [ 971.874988] ? security_file_ioctl+0x76/0xb0 [ 971.879373] ? security_file_ioctl+0x83/0xb0 [ 971.883801] SyS_ioctl+0x7f/0xb0 [ 971.887179] ? do_vfs_ioctl+0xfe0/0xfe0 [ 971.891148] do_syscall_64+0x1d5/0x640 [ 971.895043] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 971.900229] RIP: 0033:0x45ca59 [ 971.903417] RSP: 002b:00007f6efe653c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 971.911123] RAX: ffffffffffffffda RBX: 00000000004e18e0 RCX: 000000000045ca59 02:06:17 executing program 4 (fault-call:10 fault-nth:0): r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 971.918394] RDX: 0000000020000780 RSI: 00000000c0306201 RDI: 0000000000000003 [ 971.925666] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 971.932934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 971.940201] R13: 0000000000000219 R14: 00000000004c4625 R15: 00007f6efe6546d4 [ 971.948627] binder: 26621:26639 ioctl c0306201 20000780 returned -12 [ 971.992836] FAULT_INJECTION: forcing a failure. [ 971.992836] name failslab, interval 1, probability 0, space 0, times 0 [ 972.004205] CPU: 0 PID: 26647 Comm: syz-executor.4 Not tainted 4.14.184-syzkaller #0 [ 972.012076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 972.021453] Call Trace: [ 972.024035] dump_stack+0x1b2/0x283 [ 972.027653] should_fail.cold+0x10a/0x154 [ 972.031795] should_failslab+0xd6/0x130 [ 972.035755] kmem_cache_alloc_trace+0x2b7/0x3f0 [ 972.040418] binder_transaction+0xf6c/0x5ec0 [ 972.044822] ? perf_trace_lock+0x109/0x4b0 [ 972.049043] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 972.053964] ? binder_poll+0x230/0x230 [ 972.057872] ? lock_downgrade+0x6e0/0x6e0 [ 972.062000] ? __might_fault+0x177/0x1b0 [ 972.066055] binder_thread_write+0x66f/0x1f10 [ 972.070548] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 972.075457] ? binder_transaction+0x5ec0/0x5ec0 [ 972.080105] ? check_preemption_disabled+0x35/0x240 [ 972.085100] ? __might_fault+0x104/0x1b0 [ 972.089139] ? lock_acquire+0x170/0x3f0 [ 972.093090] ? lock_downgrade+0x6e0/0x6e0 [ 972.097219] ? __might_fault+0x177/0x1b0 [ 972.101273] binder_ioctl_write_read.isra.0+0x158/0x710 [ 972.106614] ? lock_downgrade+0x6e0/0x6e0 [ 972.110740] ? binder_thread_write+0x1f10/0x1f10 [ 972.115474] ? do_raw_spin_unlock+0x164/0x250 [ 972.119955] binder_ioctl+0x2ce/0xeeb [ 972.123754] ? check_preemption_disabled+0x35/0x240 [ 972.128746] ? binder_ioctl_write_read.isra.0+0x710/0x710 [ 972.134268] ? binder_ioctl_write_read.isra.0+0x710/0x710 [ 972.139784] do_vfs_ioctl+0x75a/0xfe0 [ 972.143585] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 972.149189] ? ioctl_preallocate+0x1a0/0x1a0 [ 972.153582] ? security_file_ioctl+0x76/0xb0 [ 972.157969] ? security_file_ioctl+0x83/0xb0 [ 972.162505] SyS_ioctl+0x7f/0xb0 [ 972.165847] ? do_vfs_ioctl+0xfe0/0xfe0 [ 972.169811] do_syscall_64+0x1d5/0x640 [ 972.173688] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 972.178967] RIP: 0033:0x45ca59 [ 972.182147] RSP: 002b:00007efdba15ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 972.189945] RAX: ffffffffffffffda RBX: 00000000004e18e0 RCX: 000000000045ca59 [ 972.197197] RDX: 0000000020000780 RSI: 00000000c0306201 RDI: 0000000000000003 [ 972.204443] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 972.211735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 972.218996] R13: 0000000000000219 R14: 00000000004c4625 R15: 00007efdba15b6d4 02:06:18 executing program 0 (fault-call:9 fault-nth:1): r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:06:18 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 02:06:18 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:18 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102", 0x51) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0xfffffe67, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 972.488032] binder: 26648:26649 ioctl c0306201 0 returned -14 [ 972.515289] binder: 26650:26651 ioctl c0306201 0 returned -14 [ 972.553282] binder: 26648:26654 ioctl c0306201 0 returned -14 [ 972.568732] binder: 26656:26658 ioctl c0306201 0 returned -14 [ 972.578326] binder: 26655:26659 ioctl c0306201 0 returned -14 [ 972.621495] binder: 26656:26663 ioctl c0306201 0 returned -14 [ 972.628037] binder: 26650:26664 ioctl c0306201 0 returned -14 02:06:19 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x9de648433f84845a, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000080)={'veth0_to_team\x00', @local}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r6, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r7, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) ioctl$FICLONE(r6, 0x40049409, r7) 02:06:19 executing program 4 (fault-call:10 fault-nth:1): r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:19 executing program 2 (fault-call:9 fault-nth:0): r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 02:06:19 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:19 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102", 0x51) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0xfffffe67, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:19 executing program 3: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$vhost_msg(0xffffffffffffffff, 0x0, 0xff57) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="00000000000000000000a957f401"], 0x14}}, 0x0) ptrace$poke(0x5, r1, &(0x7f0000000000), 0x7fffffff) gettid() tkill(0x0, 0x116) ptrace(0x10, r0) ptrace$peeksig(0x2, r0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mq_notify(r4, &(0x7f0000001100)={0x0, 0x13, 0x4, @thr={&(0x7f0000000080)="b14c0762bd2423b1b4975e61e5bd1f324d4b0998bd86fa08792033ca0fbb1852237631118f5dd1758948ee54c151bcf4a54a5e2326b9146d82ced7915972749437e2cd0696f6b34a1db4539b63166cca381be4ffb9f09bdf9d2c90cc3fe58130a89ee2e14c2229d842d88127dd9ebdc0de25e66d7efe05d13777dca3", &(0x7f0000000100)="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"}}) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) getpgrp(r5) [ 973.901942] binder: 26673:26678 ioctl c0306201 0 returned -14 [ 973.908846] binder: 26675:26679 ioctl c0306201 0 returned -14 [ 973.919087] binder: 26677:26680 ioctl c0306201 0 returned -14 [ 973.930490] binder: 26676:26682 ioctl c0306201 0 returned -14 [ 973.961494] binder: 26673:26688 ioctl c0306201 0 returned -14 [ 973.977799] FAULT_INJECTION: forcing a failure. [ 973.977799] name failslab, interval 1, probability 0, space 0, times 0 [ 973.989546] CPU: 1 PID: 26691 Comm: syz-executor.4 Not tainted 4.14.184-syzkaller #0 [ 973.989793] binder: 26676:26692 ioctl c0306201 0 returned -14 [ 973.997454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 973.997460] Call Trace: [ 973.997481] dump_stack+0x1b2/0x283 [ 973.997501] should_fail.cold+0x10a/0x154 [ 973.997520] should_failslab+0xd6/0x130 [ 973.997532] kmem_cache_alloc_trace+0x2b7/0x3f0 [ 973.997549] binder_transaction+0xfdb/0x5ec0 [ 973.997564] ? perf_trace_lock+0x109/0x4b0 [ 973.997577] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 973.997608] ? binder_poll+0x230/0x230 [ 973.997618] ? lock_downgrade+0x6e0/0x6e0 [ 973.997635] ? __might_fault+0x177/0x1b0 [ 973.997652] binder_thread_write+0x66f/0x1f10 [ 974.017891] FAULT_INJECTION: forcing a failure. [ 974.017891] name failslab, interval 1, probability 0, space 0, times 0 [ 974.019669] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 974.019687] ? binder_transaction+0x5ec0/0x5ec0 [ 974.019695] ? HARDIRQ_verbose+0x10/0x10 [ 974.019706] ? check_preemption_disabled+0x35/0x240 [ 974.019721] ? __might_fault+0x104/0x1b0 [ 974.096397] ? lock_acquire+0x170/0x3f0 [ 974.100359] ? lock_downgrade+0x6e0/0x6e0 [ 974.104494] ? __might_fault+0x177/0x1b0 [ 974.108565] binder_ioctl_write_read.isra.0+0x158/0x710 [ 974.113927] ? lock_downgrade+0x6e0/0x6e0 [ 974.118072] ? binder_thread_write+0x1f10/0x1f10 [ 974.122819] ? do_raw_spin_unlock+0x164/0x250 [ 974.127324] binder_ioctl+0x2ce/0xeeb [ 974.131114] ? check_preemption_disabled+0x35/0x240 [ 974.136137] ? binder_ioctl_write_read.isra.0+0x710/0x710 [ 974.141669] ? binder_ioctl_write_read.isra.0+0x710/0x710 [ 974.147203] do_vfs_ioctl+0x75a/0xfe0 [ 974.150990] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 974.156596] ? ioctl_preallocate+0x1a0/0x1a0 [ 974.160996] ? security_file_ioctl+0x76/0xb0 [ 974.165389] ? security_file_ioctl+0x83/0xb0 [ 974.169788] SyS_ioctl+0x7f/0xb0 [ 974.173148] ? do_vfs_ioctl+0xfe0/0xfe0 [ 974.177113] do_syscall_64+0x1d5/0x640 [ 974.180990] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 974.186176] RIP: 0033:0x45ca59 [ 974.189347] RSP: 002b:00007efdba15ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 974.197038] RAX: ffffffffffffffda RBX: 00000000004e18e0 RCX: 000000000045ca59 [ 974.204291] RDX: 0000000020000780 RSI: 00000000c0306201 RDI: 0000000000000003 [ 974.211547] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 974.218828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 974.226097] R13: 0000000000000219 R14: 00000000004c4625 R15: 00007efdba15b6d4 [ 974.233369] CPU: 0 PID: 26694 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 974.241364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 974.250712] Call Trace: [ 974.253297] dump_stack+0x1b2/0x283 [ 974.256918] should_fail.cold+0x10a/0x154 [ 974.261057] should_failslab+0xd6/0x130 [ 974.265011] kmem_cache_alloc_trace+0x2b7/0x3f0 [ 974.269677] binder_get_thread+0x1b3/0x7b0 [ 974.273909] binder_ioctl+0x170/0xeeb [ 974.277695] ? check_preemption_disabled+0x35/0x240 [ 974.282703] ? binder_ioctl_write_read.isra.0+0x710/0x710 [ 974.288231] ? binder_ioctl_write_read.isra.0+0x710/0x710 [ 974.293747] do_vfs_ioctl+0x75a/0xfe0 [ 974.297532] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 974.303136] ? ioctl_preallocate+0x1a0/0x1a0 [ 974.307547] ? security_file_ioctl+0x76/0xb0 [ 974.311936] ? security_file_ioctl+0x83/0xb0 [ 974.316337] SyS_ioctl+0x7f/0xb0 [ 974.319684] ? do_vfs_ioctl+0xfe0/0xfe0 [ 974.323652] do_syscall_64+0x1d5/0x640 [ 974.327525] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 974.332694] RIP: 0033:0x45ca59 [ 974.335863] RSP: 002b:00007efdf7cf6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 974.343553] RAX: ffffffffffffffda RBX: 00000000004e18e0 RCX: 000000000045ca59 [ 974.350816] RDX: 0000000000000000 RSI: 00000000c0306201 RDI: 0000000000000003 [ 974.358068] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 974.365325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 974.372584] R13: 0000000000000219 R14: 00000000004c4625 R15: 00007efdf7cf76d4 [ 974.401019] binder: 26675:26694 ioctl c0306201 0 returned -12 02:06:20 executing program 2 (fault-call:9 fault-nth:1): r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 02:06:20 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 02:06:20 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102", 0x51) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0xfffffe67, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 974.704189] binder: 26673:26698 ioctl c0306201 0 returned -14 [ 974.715884] binder: 26673:26688 ioctl c0306201 0 returned -14 02:06:20 executing program 4 (fault-call:10 fault-nth:2): r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:20 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000040)) 02:06:20 executing program 3: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@setneightbl={0x1c, 0x43, 0x1, 0x0, 0x0, {0x2}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = accept(r0, &(0x7f0000000240)=@x25, &(0x7f0000000180)=0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700)='nl80211\x00') r4 = memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) r5 = geteuid() fsetxattr$system_posix_acl(r4, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="020000000100000800002a2861f897dfe943ad000010e2c7d96af714418a01737f483ac13a9adc35d1159a5b3c1e27047528fb9bc5d777462c18159ba9702737772179a54326d5baa6f91ba1665908ab9ac7794550449ba9f43422c0dbad5398514572e7a3216260eaefa0", @ANYRES32=r2, @ANYBLOB="000000f0ff0000006e0800ff", @ANYRES32=r5, @ANYBLOB="a45cddb69ce73002f9439329c3bb92960ac3cdc687bdbaee1434d5828b7d0eb1bc40704145d352365744e385e54d992f72bbddd49fb3cbb833786fb5443ca098f13673b206ef25311d7c512fe52d9cb8569867b9f9a0492f9bb9920dec2c40f304b797cce0a17db6ab8989ef2bdc7607de18fe9c96e5a59c06000000000000007544435397fc5c312daafc6269e4cc5184b5d0a3ce6f4fd3bca24c07630f28331768317dffbffc7f8c86cbfedbb32b303c10a7bcf337fe5c73a7ecaf451b66cbf3899fa53fa59a9bd515e67866a7124fcac2c880be4e8d776b65b595eef53a005d4efd3686883ab50deeea652d66afc15d500c8698d48b1d53c8137b348e229ded6afa85da8f7d5cd537486bc2c356c0dbcb6611628aa2251463bb09fcba0fa3a75da1d37b9a94749e26545aae7b7fe6023517e9c23ff80c64aa350220b177911be2302e7afacc6e55bec3d96ae84d4de579967984bd33708aa8b2389862845705ca0de82b420a8e0ea0588907273dce76541926043134ee9715b19c3ea3cde5784fc10a26bb47519bf03933a0cabf839276601fc0550911d603e530945deddeca00"/436, @ANYRES64, @ANYRESDEC=r3], 0x7, 0x0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r3, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x31}}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x38}}, 0x1) r6 = getpid() r7 = gettid() tkill(r7, 0x1000000000016) ptrace(0x10, r6) ptrace$peeksig(0x2, r6, 0x0, 0x0) setresgid(0x0, 0xee00, 0x0) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r9, 0xee00, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00', 0x19, 0x4, 0x758, [0x20000a00, 0x0, 0x0, 0x20000b06, 0x20000c54], 0x0, &(0x7f0000000140), &(0x7f0000000a00)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x11, 0x10, 0x5de62c936f7b2313, 'netpci0\x00', 'geneve1\x00', 'bond_slave_0\x00', 'bridge_slave_1\x00', @dev={[], 0x3d}, [0x0, 0x0, 0x0, 0x0, 0xff], @dev={[], 0x12}, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x9e, 0xd6, [@state={{'state\x00', 0x0, 0x8}, {{0x80000001}}}], [], @arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x44f8e990c5b1ec26}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{0x11, 0x6, 0x8035, 'veth1\x00', 'dummy0\x00', 'bond0\x00', 'ip6gre0\x00', @dev={[], 0x37}, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], @remote, [0xff, 0x0, 0xff, 0xff], 0xe6, 0xe6, 0x11e, [@owner={{'owner\x00', 0x0, 0x18}, {{0x0, 0x0, 0x0, r9, 0x2, 0x3}}}, @mac={{'mac\x00', 0x0, 0x10}, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}}}], [], @common=@dnat={'dnat\x00', 0x10, {{@local, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x22eb, 'netpci0\x00', 'macvlan0\x00', 'ipvlan0\x00', 'veth1\x00', @remote, [0xff, 0xff, 0xff, 0xff], @dev={[], 0x29}, [0x0, 0x0, 0x0, 0x0, 0xff], 0xee, 0xee, 0x126, [@realm={{'realm\x00', 0x0, 0x10}, {{0x200, 0x3ff, 0x1}}}, @limit={{'limit\x00', 0x0, 0x20}, {{0x7, 0x401, 0x4, 0x8001, 0x80, 0x10001}}}], [], @arpreply={'arpreply\x00', 0x10, {{@random="bfafb80746a4", 0xffffffffffffffff}}}}, {0x3, 0x7, 0x884c, 'bond_slave_1\x00', 'bridge0\x00', 'veth1_vlan\x00', 'veth0_to_team\x00', @random="d15869ebae78", [0xff, 0xff, 0xff, 0xff], @multicast, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], 0x316, 0x346, 0x37e, [@bpf0={{'bpf\x00', 0x0, 0x210}, {{0x5, [{0x9f4, 0x5, 0x9, 0x1000}, {0x7fff, 0x9, 0xf2, 0x10000}, {0x4, 0xff, 0x8, 0x1}, {0x1000, 0x7, 0x4c}, {0x6, 0x1a, 0x5, 0xe8}, {0x6, 0x3f, 0x0, 0x49}, {0x9, 0x99, 0x1f}, {0x1000, 0x0, 0x33, 0x7fff}, {0x1c2, 0x80, 0x23, 0x1}, {0xec8a, 0x2a, 0x10, 0x8}, {0xee, 0x80, 0x0, 0x7fffffff}, {0x1, 0x4f, 0x0, 0xfffffff8}, {0x29c, 0x5, 0x8, 0x7}, {0xf092, 0xba, 0x81}, {0xfff, 0xfb, 0x56, 0x85f4}, {0x9, 0x20, 0x5, 0x7f}, {0x0, 0xf8, 0x5, 0x6}, {0x4000, 0x2, 0x7f, 0x2}, {0x7c9, 0x0, 0x1c, 0x7}, {0x7, 0xb3, 0x9, 0x80}, {0x0, 0xff, 0x9, 0x3}, {0x9, 0x7, 0xd0, 0x48b}, {0x4, 0x1, 0x7, 0x6}, {0x0, 0x3, 0x61, 0x4}, {0x9, 0x1, 0x4, 0x5}, {0x7fff, 0x6, 0x81, 0xffffffff}, {0x1, 0x0, 0x2b, 0x5}, {0x7, 0x1, 0x8, 0x400}, {0xfff, 0x1f, 0x8, 0x80000001}, {0x3ff, 0x80, 0x0, 0x4}, {0x11, 0x0, 0x5, 0x3}, {0x2, 0x5f, 0x3d, 0x3f}, {0x5, 0x40, 0x3, 0x4}, {0x8, 0x5, 0xe1, 0x6}, {0x7, 0xb7, 0x0, 0x8}, {0x9, 0x1, 0x4, 0xfa}, {0x3, 0x7, 0x2, 0x6}, {0x101, 0x7f, 0x80, 0x72}, {0xeb87, 0x5, 0x0, 0x7}, {0x667, 0x1f, 0x29, 0x5c7}, {0x20, 0x2, 0x4b, 0x10000}, {0x2, 0x7, 0x2, 0x3}, {0x2, 0x26, 0x6, 0x705}, {0x773, 0x2, 0xf9, 0xffffffff}, {0xfc00, 0x6, 0x2, 0xfff}, {0x8, 0x36, 0x2, 0x10001}, {0x7, 0xa2, 0xff, 0xe8}, {0x7, 0xff, 0x6a, 0x8}, {0x0, 0x0, 0x40, 0xfffffffc}, {0x800, 0x0, 0x5, 0x6928faf4}, {0x6, 0xf7, 0x3, 0x6}, {0x8000, 0x0, 0x1, 0x1f}, {0xc7, 0x7, 0x80, 0xfffffffe}, {0x1ff, 0x7, 0x2, 0x2}, {0x0, 0x30, 0x4, 0x81}, {0x2, 0x7, 0x38, 0x3}, {0x4, 0x50, 0x1, 0x20}, {0x3, 0x3, 0xf3, 0x2}, {0xb1dd, 0x7, 0xff, 0x81}, {0xfe, 0xc0, 0x81, 0x2}, {0x6, 0x80, 0x3f, 0x10001}, {0xde2, 0x8, 0x1f, 0x400}, {0x100, 0x9, 0x6, 0x4}, {0x8efc, 0x1, 0x7}], {0x4}}}}, @stp={{'stp\x00', 0x0, 0x48}, {{0x6, {0x0, 0x5c7a, 0x401, @link_local, [0x0, 0xb7f39bb4ffbb71ff, 0xff, 0xff, 0xff, 0xff], 0x81, 0x101, 0x0, 0x100, @remote, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0x4e24, 0x4e20, 0x288, 0x7, 0x80, 0xff, 0x1, 0x8, 0x1, 0x100}, 0x0, 0x3d0}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}], @arpreply={'arpreply\x00', 0x10, {{@remote, 0xfffffffffffffffd}}}}]}]}, 0x7d0) [ 974.790374] binder: 26703:26706 ioctl c0306201 0 returned -14 [ 974.810698] binder: 26702:26708 ioctl c0306201 0 returned -14 [ 974.821391] binder: 26705:26710 ioctl c0306201 0 returned -14 [ 974.867793] FAULT_INJECTION: forcing a failure. [ 974.867793] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 974.880125] binder: 26712:26713 ioctl c0306201 0 returned -14 [ 974.888276] CPU: 1 PID: 26714 Comm: syz-executor.4 Not tainted 4.14.184-syzkaller #0 [ 974.896181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 974.905537] Call Trace: [ 974.908149] dump_stack+0x1b2/0x283 [ 974.911789] should_fail.cold+0x10a/0x154 [ 974.915949] __alloc_pages_nodemask+0x22b/0x2730 [ 974.920722] ? trace_hardirqs_on+0x10/0x10 [ 974.924962] ? check_preemption_disabled+0x35/0x240 [ 974.929982] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 974.934822] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 974.939774] ? lock_acquire+0x170/0x3f0 [ 974.943767] ? binder_update_page_range.constprop.0+0xd6a/0x1890 [ 974.949922] alloc_pages_current+0xe7/0x1e0 [ 974.954246] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 974.959702] binder_update_page_range.constprop.0+0x31b/0x1890 [ 974.961279] binder: 26702:26726 ioctl c0306201 0 returned -14 [ 974.965686] binder_alloc_new_buf_locked+0xa01/0x1010 [ 974.965710] binder_alloc_new_buf+0x3a/0x60 [ 974.965729] binder_transaction+0x14ad/0x5ec0 [ 974.985585] ? perf_trace_lock+0x109/0x4b0 [ 974.989846] ? binder_poll+0x230/0x230 [ 974.993738] ? lock_downgrade+0x6e0/0x6e0 [ 974.997900] ? __might_fault+0x177/0x1b0 [ 975.001305] binder: 26705:26728 ioctl c0306201 0 returned -14 [ 975.001966] binder_thread_write+0x66f/0x1f10 [ 975.001984] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 975.017249] ? binder_transaction+0x5ec0/0x5ec0 [ 975.022005] ? HARDIRQ_verbose+0x10/0x10 [ 975.026072] ? check_preemption_disabled+0x35/0x240 [ 975.031089] ? __might_fault+0x104/0x1b0 [ 975.035157] ? lock_acquire+0x170/0x3f0 [ 975.039135] ? lock_downgrade+0x6e0/0x6e0 [ 975.043289] ? __might_fault+0x177/0x1b0 [ 975.047363] binder_ioctl_write_read.isra.0+0x158/0x710 [ 975.052753] ? lock_downgrade+0x6e0/0x6e0 [ 975.056911] ? binder_thread_write+0x1f10/0x1f10 [ 975.059234] binder: 26705:26722 ioctl c0306201 0 returned -14 [ 975.061662] ? do_raw_spin_unlock+0x164/0x250 [ 975.061688] binder_ioctl+0x2ce/0xeeb [ 975.061703] ? check_preemption_disabled+0x35/0x240 [ 975.061718] ? binder_ioctl_write_read.isra.0+0x710/0x710 [ 975.061740] ? binder_ioctl_write_read.isra.0+0x710/0x710 [ 975.091916] do_vfs_ioctl+0x75a/0xfe0 [ 975.095700] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 975.101309] ? ioctl_preallocate+0x1a0/0x1a0 [ 975.105712] ? security_file_ioctl+0x76/0xb0 [ 975.110102] ? security_file_ioctl+0x83/0xb0 [ 975.114490] SyS_ioctl+0x7f/0xb0 [ 975.117843] ? do_vfs_ioctl+0xfe0/0xfe0 [ 975.121821] do_syscall_64+0x1d5/0x640 [ 975.125701] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 975.130312] binder: 26712:26731 ioctl c0306201 0 returned -14 [ 975.130877] RIP: 0033:0x45ca59 [ 975.130883] RSP: 002b:00007efdba15ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 975.130895] RAX: ffffffffffffffda RBX: 00000000004e18e0 RCX: 000000000045ca59 [ 975.130902] RDX: 0000000020000780 RSI: 00000000c0306201 RDI: 0000000000000003 [ 975.130908] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 975.130915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 975.130921] R13: 0000000000000219 R14: 00000000004c4625 R15: 00007efdba15b6d4 [ 975.145857] binder_alloc: 26704: binder_alloc_buf failed for page at ffffc900019a0000 02:06:21 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670", 0x79) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0xfffffe67, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:21 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 02:06:21 executing program 4 (fault-call:10 fault-nth:3): r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 975.612778] binder: 26733:26734 ioctl c0306201 0 returned -14 [ 975.652369] binder: 26735:26737 ioctl c0306201 0 returned -14 02:06:21 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r6, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) write(r6, &(0x7f0000000540)="b0a3cdef47f59ec515deebcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1e0e4fef97bdd899d359dadcfe32b0000000052533e4df2c20324dda85d95c10200004d82000004000000468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c3452e0748eff41bcbb919a232c61803d8bc20427fa658227b9ac37760a750c0428363d14cc0180ea8965e29182878326b4a952ff8b006f2938", 0xda) r7 = openat$cgroup_procs(r5, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write(r7, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674bb4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c00000000", 0xa1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x80, 0x0, 0x2, 0xb3b}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000280)={0x0, 0x65, "7e71b6f87cf71c7b84341217a7aab17fb5a0d1d64ee343813946a6eb3862a5ddecedbd70983e8ff6cbe03d64b5dafc09d24e2006f9db716932c0dd55c3964bd63d3678448769d98314d4df7565cc23686359412f833e493e2bb521d42071d390e12814ab5f"}, &(0x7f00000001c0)=0x6d) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) [ 975.659453] binder: 26712:26731 ioctl c0306201 0 returned -14 02:06:21 executing program 3: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() gettid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)) r1 = getpid() r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000080)=0x8000, 0x4) sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) tkill(r0, 0xf) ptrace(0x10, r0) ptrace$peeksig(0x2, r0, 0x0, 0x0) 02:06:21 executing program 0: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r3, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) r5 = dup2(r2, r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:06:21 executing program 3: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() tkill(r1, 0x1000000000016) ptrace(0x10, r0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r3 = getpgrp(r2) ptrace$peeksig(0x2, r3, 0x0, 0x0) [ 975.705816] binder: 26743:26746 ioctl c0306201 0 returned -14 [ 975.727291] binder: 26735:26752 ioctl c0306201 0 returned -14 [ 975.734751] FAULT_INJECTION: forcing a failure. [ 975.734751] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 975.778375] CPU: 0 PID: 26753 Comm: syz-executor.4 Not tainted 4.14.184-syzkaller #0 [ 975.786304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 975.795679] Call Trace: [ 975.798277] dump_stack+0x1b2/0x283 [ 975.801919] should_fail.cold+0x10a/0x154 [ 975.806081] __alloc_pages_nodemask+0x22b/0x2730 [ 975.810852] ? fs_reclaim_acquire+0x10/0x10 [ 975.815193] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 975.820038] ? rcu_read_lock_sched_held+0x10a/0x130 [ 975.825053] ? __alloc_pages_nodemask+0x1a8a/0x2730 [ 975.830084] ? trace_hardirqs_on+0x10/0x10 [ 975.834318] ? check_preemption_disabled+0x35/0x240 [ 975.839345] alloc_pages_current+0xe7/0x1e0 [ 975.839767] binder: 26755:26758 ioctl c0306201 0 returned -14 [ 975.843666] pte_alloc_one+0x15/0x100 [ 975.843680] __pte_alloc+0x21/0x280 [ 975.843695] __get_locked_pte+0x3f6/0x5b0 [ 975.843710] vm_insert_page+0x213/0x7c0 [ 975.843726] ? __get_locked_pte+0x5b0/0x5b0 [ 975.869461] ? alloc_pages_current+0xef/0x1e0 [ 975.873942] binder_update_page_range.constprop.0+0x3ea/0x1890 [ 975.879904] binder_alloc_new_buf_locked+0xa01/0x1010 [ 975.885082] binder_alloc_new_buf+0x3a/0x60 [ 975.889385] binder_transaction+0x14ad/0x5ec0 [ 975.893981] ? perf_trace_lock+0x109/0x4b0 [ 975.898210] ? binder_poll+0x230/0x230 [ 975.902089] ? lock_downgrade+0x6e0/0x6e0 [ 975.906221] ? __might_fault+0x177/0x1b0 [ 975.910280] binder_thread_write+0x66f/0x1f10 [ 975.914767] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 975.919693] ? binder_transaction+0x5ec0/0x5ec0 [ 975.924347] ? HARDIRQ_verbose+0x10/0x10 [ 975.928394] ? check_preemption_disabled+0x35/0x240 [ 975.933396] ? __might_fault+0x104/0x1b0 [ 975.937444] ? lock_acquire+0x170/0x3f0 [ 975.941399] ? lock_downgrade+0x6e0/0x6e0 [ 975.945540] ? __might_fault+0x177/0x1b0 [ 975.949587] binder_ioctl_write_read.isra.0+0x158/0x710 [ 975.954932] ? lock_downgrade+0x6e0/0x6e0 [ 975.959062] ? binder_thread_write+0x1f10/0x1f10 [ 975.963798] ? do_raw_spin_unlock+0x164/0x250 [ 975.968292] binder_ioctl+0x2ce/0xeeb [ 975.972073] ? check_preemption_disabled+0x35/0x240 [ 975.977080] ? binder_ioctl_write_read.isra.0+0x710/0x710 [ 975.982607] ? binder_ioctl_write_read.isra.0+0x710/0x710 [ 975.988128] do_vfs_ioctl+0x75a/0xfe0 [ 975.991922] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 975.997527] ? ioctl_preallocate+0x1a0/0x1a0 [ 976.001924] ? security_file_ioctl+0x76/0xb0 [ 976.006310] ? security_file_ioctl+0x83/0xb0 [ 976.010699] SyS_ioctl+0x7f/0xb0 [ 976.014045] ? do_vfs_ioctl+0xfe0/0xfe0 [ 976.018000] do_syscall_64+0x1d5/0x640 [ 976.021872] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 976.027042] RIP: 0033:0x45ca59 [ 976.030222] RSP: 002b:00007efdba15ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 976.037920] RAX: ffffffffffffffda RBX: 00000000004e18e0 RCX: 000000000045ca59 [ 976.045170] RDX: 0000000020000780 RSI: 00000000c0306201 RDI: 0000000000000003 [ 976.052418] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 976.059670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 976.066917] R13: 0000000000000219 R14: 00000000004c4625 R15: 00007efdba15b6d4 [ 976.081958] binder: 26735:26763 ioctl c0306201 0 returned -14 [ 976.088222] binder: 26743:26757 ioctl c0306201 0 returned -14 [ 976.099261] binder_alloc: 26736: binder_alloc_buf failed to map page at 20ffc000 in userspace 02:06:22 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670", 0x79) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0xfffffe67, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:22 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) [ 976.420546] binder: 26770:26771 ioctl c0306201 0 returned -14 02:06:22 executing program 4 (fault-call:10 fault-nth:4): r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:22 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000240)={0x400, 0x2, &(0x7f0000000100)=[0xf5, 0x1000], &(0x7f0000000140)=[0x80, 0x100, 0xffff, 0x44600000, 0x80000000, 0x6, 0x3, 0x8, 0x5], &(0x7f00000001c0)=[0x4, 0x1, 0x6], &(0x7f0000000200)=[0x4, 0x392, 0x400, 0x4d2], 0x0, 0x7}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) getsockname$tipc(r4, &(0x7f0000000080)=@id, &(0x7f00000000c0)=0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@setneightbl={0x1c, 0x43, 0x1, 0x0, 0x0, {0x2}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0) getsockopt$SO_COOKIE(r6, 0x1, 0x39, &(0x7f0000000280), &(0x7f00000002c0)=0x8) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x80, 0x0) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000300)={0xc, @raw_data="5e60d87704b5a98cee8b4813d5a2bf95b5b0dc5aa68047a16c19c043982d5e220c8c64cb84992042ae5772502439172257fdd6b80c4fbfff93a8a81ffbf965cfc6b6a9c65c52af1aba65f4d2c10129f4fc278ed64829b5df962211614a7a733d68b88194483f978dcc350c9199d2ad5c68a57634461e5a69d35821c9ab8edff63be72de3e48e793c2df27982c87b851017bc363452cec28a4df36e2905a15a62f27e3ecea97277b270062f0375601d533faca62b8a39611b93414ae3ba112f18278fd5b881871759"}) close(0xffffffffffffffff) [ 976.469018] binder: 26772:26773 ioctl c0306201 0 returned -14 [ 976.528582] binder: 26772:26779 ioctl c0306201 0 returned -14 [ 976.537159] binder: 26780:26781 ioctl c0306201 0 returned -14 [ 976.600638] FAULT_INJECTION: forcing a failure. [ 976.600638] name failslab, interval 1, probability 0, space 0, times 0 [ 976.617015] binder: 26772:26788 ioctl c0306201 0 returned -14 [ 976.624306] CPU: 1 PID: 26785 Comm: syz-executor.4 Not tainted 4.14.184-syzkaller #0 [ 976.632205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 976.641560] Call Trace: [ 976.644155] dump_stack+0x1b2/0x283 [ 976.647792] should_fail.cold+0x10a/0x154 [ 976.651950] should_failslab+0xd6/0x130 [ 976.655925] kmem_cache_alloc+0x28e/0x3c0 [ 976.660079] ptlock_alloc+0x1d/0x70 [ 976.663707] pte_alloc_one+0x57/0x100 [ 976.667510] __pte_alloc+0x21/0x280 [ 976.671141] __get_locked_pte+0x3f6/0x5b0 [ 976.675290] vm_insert_page+0x213/0x7c0 [ 976.679266] ? __get_locked_pte+0x5b0/0x5b0 [ 976.683592] ? alloc_pages_current+0xef/0x1e0 [ 976.688177] binder_update_page_range.constprop.0+0x3ea/0x1890 [ 976.694161] binder_alloc_new_buf_locked+0xa01/0x1010 [ 976.698319] binder: 26780:26790 ioctl c0306201 0 returned -14 [ 976.699356] binder_alloc_new_buf+0x3a/0x60 [ 976.699374] binder_transaction+0x14ad/0x5ec0 [ 976.699388] ? perf_trace_lock+0x109/0x4b0 [ 976.718413] ? binder_poll+0x230/0x230 [ 976.722300] ? lock_downgrade+0x6e0/0x6e0 [ 976.726455] ? __might_fault+0x177/0x1b0 [ 976.730523] binder_thread_write+0x66f/0x1f10 [ 976.735030] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 976.739960] ? binder_transaction+0x5ec0/0x5ec0 [ 976.744624] ? HARDIRQ_verbose+0x10/0x10 [ 976.748976] ? check_preemption_disabled+0x35/0x240 [ 976.753998] ? __might_fault+0x104/0x1b0 [ 976.758064] ? lock_acquire+0x170/0x3f0 [ 976.762038] ? lock_downgrade+0x6e0/0x6e0 [ 976.766191] ? __might_fault+0x177/0x1b0 [ 976.770261] binder_ioctl_write_read.isra.0+0x158/0x710 [ 976.775630] ? lock_downgrade+0x6e0/0x6e0 [ 976.779780] ? binder_thread_write+0x1f10/0x1f10 [ 976.784541] ? do_raw_spin_unlock+0x164/0x250 [ 976.789069] binder_ioctl+0x2ce/0xeeb [ 976.792871] ? check_preemption_disabled+0x35/0x240 [ 976.797889] ? binder_ioctl_write_read.isra.0+0x710/0x710 [ 976.803444] ? binder_ioctl_write_read.isra.0+0x710/0x710 [ 976.808989] do_vfs_ioctl+0x75a/0xfe0 [ 976.812794] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 976.818417] ? ioctl_preallocate+0x1a0/0x1a0 [ 976.822841] ? security_file_ioctl+0x76/0xb0 [ 976.827248] ? security_file_ioctl+0x83/0xb0 [ 976.831660] SyS_ioctl+0x7f/0xb0 [ 976.835021] ? do_vfs_ioctl+0xfe0/0xfe0 [ 976.839006] do_syscall_64+0x1d5/0x640 [ 976.842910] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 976.848097] RIP: 0033:0x45ca59 02:06:22 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000001000000000000001f00", @ANYRES32=r9, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x108, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x900}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0xd8, 0x2, [@TCA_CGROUP_ACT={0x36, 0x1, [@m_mirred={0xd0, 0x0, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}]}, {0x1b, 0x6, "3c0a793afd329cce9533c4396b8dcc136902ea634a913e"}}}]}]}}]}, 0x108}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000001800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000000700)={0x50, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x24000, 0xffffffffffffffff}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 976.851280] RSP: 002b:00007efdba15ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 976.858989] RAX: ffffffffffffffda RBX: 00000000004e18e0 RCX: 000000000045ca59 [ 976.866255] RDX: 0000000020000780 RSI: 00000000c0306201 RDI: 0000000000000003 [ 976.873521] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 976.880779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 976.888039] R13: 0000000000000219 R14: 00000000004c4625 R15: 00007efdba15b6d4 [ 976.891630] binder: 26791:26792 ioctl c0306201 0 returned -14 [ 976.903970] binder_alloc: 26775: binder_alloc_buf failed to map page at 20ffc000 in userspace [ 976.949106] binder: 26791:26795 ioctl c0306201 0 returned -14 02:06:22 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670", 0x79) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0xfffffe67, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:23 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 977.235288] binder: 26797:26798 ioctl c0306201 0 returned -14 02:06:23 executing program 4 (fault-call:10 fault-nth:5): r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:23 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000040)) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) [ 977.310682] binder: 26799:26803 ioctl c0306201 0 returned -14 [ 977.373573] binder: 26807:26809 ioctl c0306201 0 returned -14 [ 977.388201] binder: 26799:26810 ioctl c0306201 0 returned -14 [ 977.404652] FAULT_INJECTION: forcing a failure. [ 977.404652] name failslab, interval 1, probability 0, space 0, times 0 [ 977.416373] CPU: 1 PID: 26812 Comm: syz-executor.4 Not tainted 4.14.184-syzkaller #0 [ 977.424249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 977.433586] Call Trace: [ 977.436157] dump_stack+0x1b2/0x283 [ 977.439765] should_fail.cold+0x10a/0x154 [ 977.443896] should_failslab+0xd6/0x130 [ 977.447849] kmem_cache_alloc_trace+0x2b7/0x3f0 [ 977.452501] binder_alloc_new_buf_locked+0x468/0x1010 [ 977.457698] binder_alloc_new_buf+0x3a/0x60 [ 977.462014] binder_transaction+0x14ad/0x5ec0 [ 977.466508] ? perf_trace_lock+0x109/0x4b0 [ 977.470740] ? binder_poll+0x230/0x230 [ 977.474605] ? lock_downgrade+0x6e0/0x6e0 [ 977.478746] ? __might_fault+0x177/0x1b0 [ 977.482789] binder_thread_write+0x66f/0x1f10 [ 977.487309] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 977.492217] ? binder_transaction+0x5ec0/0x5ec0 [ 977.496863] ? HARDIRQ_verbose+0x10/0x10 [ 977.500909] ? check_preemption_disabled+0x35/0x240 [ 977.505906] ? __might_fault+0x104/0x1b0 [ 977.509949] ? lock_acquire+0x170/0x3f0 [ 977.513900] ? lock_downgrade+0x6e0/0x6e0 [ 977.518028] ? __might_fault+0x177/0x1b0 [ 977.522110] binder_ioctl_write_read.isra.0+0x158/0x710 [ 977.527460] ? lock_downgrade+0x6e0/0x6e0 [ 977.531592] ? binder_thread_write+0x1f10/0x1f10 [ 977.536333] ? do_raw_spin_unlock+0x164/0x250 [ 977.540813] binder_ioctl+0x2ce/0xeeb [ 977.544640] ? check_preemption_disabled+0x35/0x240 [ 977.549722] ? binder_ioctl_write_read.isra.0+0x710/0x710 [ 977.555295] ? binder_ioctl_write_read.isra.0+0x710/0x710 [ 977.560811] do_vfs_ioctl+0x75a/0xfe0 [ 977.564593] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 977.570209] ? ioctl_preallocate+0x1a0/0x1a0 [ 977.574606] ? security_file_ioctl+0x76/0xb0 [ 977.579011] ? security_file_ioctl+0x83/0xb0 [ 977.583414] SyS_ioctl+0x7f/0xb0 [ 977.586757] ? do_vfs_ioctl+0xfe0/0xfe0 [ 977.590726] do_syscall_64+0x1d5/0x640 [ 977.594599] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 977.599767] RIP: 0033:0x45ca59 [ 977.602951] RSP: 002b:00007efdba15ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 977.610636] RAX: ffffffffffffffda RBX: 00000000004e18e0 RCX: 000000000045ca59 [ 977.617881] RDX: 0000000020000780 RSI: 00000000c0306201 RDI: 0000000000000003 [ 977.625127] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 977.632392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 977.639639] R13: 0000000000000219 R14: 00000000004c4625 R15: 00007efdba15b6d4 [ 977.648235] binder_alloc: binder_alloc_new_buf_locked: 26804 failed to alloc new buffer struct [ 977.690994] binder: 26791:26796 ioctl c0306201 0 returned -14 [ 977.703092] binder: 26807:26815 ioctl c0306201 0 returned -14 02:06:23 executing program 0: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000700)=[{&(0x7f00000001c0)="4292f39baa7bfb56d085c6a30250a625d62f5d7dd5105ba812b978a270b9e619e6cbd601003bd80ccebb5c3c31f9afc9a85433ea2a4af3d9c8924d845ac22f74db3ee34e83a5ac0af96f9d900d0484bda7946645d9eab7825d9d9a4f329d8081137cd4f1", 0x64}, {&(0x7f0000000240)="309b4241369ec4d51d2696a86c5fd06872cb30edf02920d8e1852852f255fd3dc518febdb5f9dd9c59701eb971031f4634f47c9ff5eba592cca24ccbd4c510ad04a5055d815c9c662866a8e5bebda489510318d118494ffbad786f87891aad923f80133c842666c2fa259c263cfb103cf9f232951856903f0134cd3ca12b", 0x7e}, {&(0x7f00000002c0)="fdeae898a9ad21d9d67df215cc8bbec5edb4aba6e45aa53c0ea50ccdbc2973", 0x1f}, {&(0x7f0000000300)="be93f6c8f1014d942a0b31cf69d36d895c050630b39659db0622cfbbc7e21cd7f8c63021ef66c061ba6877b047a1b2915e54d7d5ef03ae964757354e83cff430e87ebb47b8a786fc08ef0f9f959f1dff8bad932244acaec2e810518bbe62110e478edfc852241e9e17a41317249802e76e9ae0110fc15800bc21a3efe237791832b59b94e7b78064afa4e4b38517d6964ef3f98935961217457fe1d3395b0ebbdd749bd104ce2775798bb49658f32a7058c5efac85da6b86d00e1a871b84df50bab7e5700d11b3a070f11ef67850ab923fa9d8a3a2b14a1c5f741643bb7ee32ac1ab8323b93ba3bd30", 0xe9}, {&(0x7f0000000400)="c99bebf2dccea45c0956be21c1e76455a5a3c62b4b8b307b15470ccfdf2eab669aa277bd83647a9fd36f6bbec91e7b729c96b36e516ab67f438ebeb6ab139e808ed1a25c", 0x44}, {&(0x7f0000000540)="3167767196e2c90f940d7d324443cdf1bdd8ddc311cb7a477367517946d9d20c93acfb397997b26a0bf66624e3a28dfe39481bdc0c3fbd20ac34d11b89b0b848c5e239eff4a018e0ec23f3545f239f948fdab8168beae66b97c8abc9c69c8c77ca09c3f564b3324990be7f8674275cf87e46dd2b785c1e69985596f8a90b10111c52184afb663f0333c7f4366ba6f689c4c9ac7014f230df82f9e6b5cc41e4d7bd5293390693c5ee5bbb904e6948388775fc13cf038e63945c77affa821fad5115ef", 0xc2}, {&(0x7f0000000640)="91f65fb9486fa1480000000000000081df7f8beea6a8bb984395da2b298eb79359fadc3da51bb5b441a9cb3c9af80b92fbc52fb86b8fc84886a7fbf580785c9900d7a0829f8cbb8bf5b07ee30b884f5de23ef464abae54ce59fa31ddea282897f9e682cfdec7027b690f0100ffff", 0x6e}, {&(0x7f00000006c0)}], 0x8, 0x12) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000080)=0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r2 = dup2(r0, r1) pipe(&(0x7f0000000180)={0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$VIDIOC_DBG_S_REGISTER(r4, 0x4038564f, &(0x7f0000000100)={{0x1, @name="35e44a44f44e8919e4013d97e08997baa2cfc03a22dda9702fe65299a6e7a90a"}, 0x8, 0x0, 0xcf4}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r2}, 0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 977.765587] binder: 26817:26818 ioctl c0306201 0 returned -14 [ 977.864236] binder: 26817:26820 ioctl c0306201 0 returned -14 02:06:23 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814", 0x8d) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0xfffffe67, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 978.052188] binder: 26822:26823 ioctl c0306201 0 returned -14 02:06:24 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000000)={0x4, 0x18000000, 0xfb3, 0x2}) clone(0x51be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() gettid() r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) tkill(r2, 0x1000000000016) ptrace(0x10, r1) ptrace$peeksig(0x2, r1, 0x0, 0x0) 02:06:24 executing program 4 (fault-call:10 fault-nth:6): r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:24 executing program 5 (fault-call:9 fault-nth:0): r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:06:24 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000080)={0x1, 0x2}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) write$P9_RUNLINKAT(r2, &(0x7f00000000c0)={0x7, 0x4d, 0x2}, 0x7) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = dup2(r3, r1) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$PPPIOCGFLAGS(r4, 0x8004745a, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) 02:06:24 executing program 0: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xe70b) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="a75b272816502d2a60e67bc5a6ec4a5a25db27123f11844d55247841852ea3b769bcb61718c0db70125d6a46dc287e6693e21acabdfa3986788c9a4f06c1412e7564f14268138214888a6f2ea22e1402d767c6c429a1847d8e48c24a60b2b222026fd0ad735de3bde188d273ddd545b28222e4f0cce08201", 0x78}], 0x1, 0x0) sigaltstack(&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet6(0xa, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0xa840, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x2) dup2(0xffffffffffffffff, r2) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r7, 0x3ff, 0xa8}, 0xc) [ 978.798414] binder: 26831:26832 ioctl c0306201 0 returned -14 [ 978.815099] binder: 26834:26838 ioctl c0306201 0 returned -14 02:06:24 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814", 0x8d) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0xfffffe67, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 978.868040] binder: 26834:26846 ioctl c0306201 0 returned -14 [ 978.870017] binder: 26845:26847 ioctl c0306201 0 returned -14 [ 978.920366] FAULT_INJECTION: forcing a failure. [ 978.920366] name failslab, interval 1, probability 0, space 0, times 0 [ 978.933621] CPU: 0 PID: 26853 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 978.941540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 978.950943] Call Trace: [ 978.953522] dump_stack+0x1b2/0x283 [ 978.957149] should_fail.cold+0x10a/0x154 [ 978.961350] should_failslab+0xd6/0x130 [ 978.965307] kmem_cache_alloc_trace+0x2b7/0x3f0 [ 978.969960] binder_get_thread+0x1b3/0x7b0 [ 978.974309] binder_ioctl+0x170/0xeeb [ 978.978102] ? check_preemption_disabled+0x35/0x240 [ 978.983157] ? binder_ioctl_write_read.isra.0+0x710/0x710 [ 978.988721] ? binder_ioctl_write_read.isra.0+0x710/0x710 [ 978.994283] do_vfs_ioctl+0x75a/0xfe0 [ 978.998078] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 979.003747] ? ioctl_preallocate+0x1a0/0x1a0 [ 979.008152] ? security_file_ioctl+0x76/0xb0 [ 979.012657] ? security_file_ioctl+0x83/0xb0 [ 979.017047] SyS_ioctl+0x7f/0xb0 [ 979.020408] ? do_vfs_ioctl+0xfe0/0xfe0 [ 979.024375] do_syscall_64+0x1d5/0x640 [ 979.028258] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 979.033428] RIP: 0033:0x45ca59 [ 979.036601] RSP: 002b:00007fa3ded47c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 979.044309] RAX: ffffffffffffffda RBX: 00000000004e18e0 RCX: 000000000045ca59 [ 979.051576] RDX: 0000000020000780 RSI: 00000000c0306201 RDI: 0000000000000003 [ 979.058908] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 979.066170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 979.073450] R13: 0000000000000219 R14: 00000000004c4625 R15: 00007fa3ded486d4 [ 979.088423] binder: 26834:26853 ioctl c0306201 20000780 returned -12 02:06:25 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000001c0)=""/202, 0xca) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) [ 979.598424] binder: 26831:26832 ioctl c0306201 0 returned -14 02:06:25 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x424241) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:25 executing program 5 (fault-call:9 fault-nth:1): r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 979.651275] binder: 26862:26864 ioctl c0306201 0 returned -14 02:06:25 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000000c0)={0xf000000, 0x9, 0x6, r2, 0x0, &(0x7f0000000080)={0x990900, 0x6, [], @string=&(0x7f0000000040)}}) pipe(&(0x7f0000000180)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r5, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r6, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) vmsplice(r6, &(0x7f00000001c0)=[{&(0x7f0000000280)="14af405dbbecd0dd1b7ce574b87713a86ca2f1794b6ac51eda0fffb1af2dcb88f38ba19e12e15b54a929682e924e9b9d54d1954d1f40a25d369196fd4cc0677178478a0bd1b2361224a934225f00ae734f031e7eda41755e6e41653d560b5ca7b951e208138557636eb8bc51921b53367ee53c83a964e1a9baf2516bdafe05b285ab178a8017f690ead82a6f4e6e285bdf39e2241e8cc07e1375818db18550710853dc17b4a769fa2fb2926f722dde70f1d6a38d220cd527894464267264"}, {&(0x7f0000000380)="8b4865dcd443f8780799be904b08a4ec44ccaba7cfd99a94939afed2abc5bb8fcfcbdc045be60cfaaa1c6a8e960d319c7fe5c56706912332da48085dcc310889315f83bc3071c26174d66ee50c1094cecd689d1335856869cbded57c3a2b1b7422b54558f4461125ee21"}, {&(0x7f0000000100)="467869df65e19151400af579a170dd9a6ccefd6d28cffb864d40cfe38157154c14e2ffea8d57e331f3b2cf"}, {&(0x7f0000000440)="4ebcfcfb168b01a7c354e1479d591f810ec0488adc395c3594d915d06b5eda7c4c86d0571da5e3c8f31ac6000e40ba059bfc93d38186e6d4d83a8219f5d15320baa594ac8b5b5c5a3f8538de8ec4208e94bdc0139cd097edd3a9af08fc8f7350aaa143b52234e6944bd1cd1664cbac8e734e9eb070fa08d3ac4924fe4f05465f501ee39dba67eae8a3e747b4014b7436126b84daf83e3ecc306b064ef7e1381b43e3c781da3d3570cd3d3a163d2555fcd94e2387b040d4b8aadb62dfb6da3e84e98586b6ac20306ed5e8be8685b3f0219eb4f1c907fe00"}], 0x100000000000034f, 0x2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:06:25 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814", 0x8d) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0xfffffe67, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 979.708299] binder: 26866:26867 ioctl c0306201 0 returned -14 [ 979.755133] binder: 26870:26873 ioctl c0306201 0 returned -14 [ 979.756118] binder: 26871:26875 ioctl c0306201 0 returned -14 [ 979.771664] binder: 26862:26876 ioctl c0306201 0 returned -14 [ 979.775922] binder: 26866:26877 ioctl c0306201 0 returned -14 [ 979.846633] binder: 26870:26881 ioctl c0306201 0 returned -14 [ 979.871137] binder: 26870:26881 ioctl c0205649 200000c0 returned -22 02:06:26 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)}], 0x1, 0x0) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000040)={0x604, 0x847}) r3 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$SNDCTL_DSP_GETIPTR(r4, 0x800c5011, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) [ 980.477172] binder: 26886:26887 ioctl c0306201 0 returned -14 [ 980.541302] binder: 26870:26881 ioctl c0306201 0 returned -14 [ 980.549143] binder: 26870:26881 ioctl c0306201 0 returned -14 [ 980.565154] binder: 26870:26881 ioctl c0205649 200000c0 returned -22 [ 980.598231] binder: 26886:26897 ioctl c0306201 0 returned -14 02:06:27 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000080)={@none, 0x10001}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000000c0)={0x101, 0x0, 0x2, 0x4, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={r6, 0xc80}, &(0x7f00000001c0)=0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:27 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:06:27 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaa", 0x97) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0xfffffe67, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:27 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0xf) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:06:27 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x38d002, 0x0) ioctl$TIOCSLCKTRMIOS(r4, 0x5457, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 02:06:27 executing program 3: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() gettid() pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f00000000c0)=[0x9871, 0x80000000]) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xf, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x7, 0x107, 0x0, &(0x7f0000000540)="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", 0x0, 0x7, 0x0, 0x5c, 0x0, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x40) fcntl$getownex(r2, 0x10, &(0x7f0000000000)) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x28, 0x0, 0xffffffffffffffff, 0x4c6}, 0x0) tkill(r3, 0x2b) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000440)={0x1, @sdr={0x32314d4e, 0x9}}) ptrace(0x10, r0) ptrace$peeksig(0x2, r0, 0x0, 0x0) [ 981.839590] binder: 26900:26903 ioctl 400443c9 20000080 returned -22 [ 981.853503] binder: 26902:26906 ioctl c0306201 0 returned -14 [ 981.861824] binder: 26904:26908 ioctl c0306201 0 returned -14 [ 981.872363] binder: 26901:26910 ioctl c0306201 0 returned -14 [ 981.873237] binder: 26905:26909 ioctl c0306201 0 returned -14 [ 981.880831] binder: 26901:26910 ioctl c0306201 0 returned -14 02:06:27 executing program 3: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() getpgrp(r1) tkill(r1, 0x1000000000016) ptrace(0x10, r0) ptrace$peeksig(0x2, r0, 0x0, 0x0) [ 981.916106] binder: 26902:26916 ioctl c0306201 0 returned -14 [ 981.997868] binder: 26905:26927 ioctl c0306201 0 returned -14 02:06:28 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:28 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaa", 0x97) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0xfffffe67, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 982.636302] binder: 26902:26916 ioctl c0306201 0 returned -14 [ 982.647029] binder: 26902:26916 ioctl c0306201 0 returned -14 [ 982.666890] binder: BINDER_SET_CONTEXT_MGR already set [ 982.672661] binder: 26901:26918 ioctl c0306201 0 returned -14 02:06:28 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r3 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) pipe(&(0x7f0000000180)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x40, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x0, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r6, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xe, &(0x7f0000000280)=ANY=[@ANYRES64=r6], &(0x7f00000001c0)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0xb, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2, 0x7}, 0x10, r5}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r7, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/timer\x00', 0x100) write(r8, &(0x7f0000000a80)="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", 0x1f1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) 02:06:28 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000100)=[{&(0x7f0000000500)}, {&(0x7f00000001c0)="05aacf06af010a054d722c1ae5c51e9396139cb10fcdce524dbb7d1b7c5b3bba5f776e5ca8b084707721da9bee9759dd0ea9ff0836a642f10f64efa23659c08c88b6def3ef28b42fea2b20b094944522ec", 0x51}], 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) syz_open_procfs(r5, &(0x7f0000000240)='net/icmp\x00') vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000040)={{0x52, 0x7f}, 'port1\x00', 0x0, 0x40000, 0x95, 0x0, 0x1, 0xe, 0x471, 0x0, 0x4, 0x1}) 02:06:28 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) rt_sigqueueinfo(0xffffffffffffffff, 0x28, &(0x7f0000000200)={0x2e, 0x3, 0x85}) r1 = syz_open_dev$binderN(0x0, 0x0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x40400, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x45, 0x0, 0x0}) [ 982.695013] binder: 26930:26932 ioctl 40046207 0 returned -16 [ 982.758010] binder: 26934:26940 ioctl c0306201 0 returned -14 [ 982.765759] binder: 26937:26942 ioctl c0306201 0 returned -14 [ 982.776480] binder: 26938:26946 ioctl c0306201 0 returned -14 [ 982.782626] binder: 26939:26945 ioctl c0306201 0 returned -14 [ 982.822860] binder: 26937:26952 ioctl c0306201 0 returned -14 [ 982.840887] binder: 26938:26954 ioctl c0306201 0 returned -14 [ 982.876214] binder: 26937:26955 ioctl 40a85321 20000040 returned -22 [ 982.898977] binder: 26939:26956 ioctl c0306201 0 returned -14 02:06:29 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x7fff, 0x2, 0x7, 0x5, 0x0, 0x9, 0x0, 0xfc, 0xe5, 0x3f, 0x80, 0x85, 0x4}, {0x3cb, 0x1000, 0x3, 0x2, 0x5, 0x9, 0x80, 0xbe, 0xac, 0x1, 0x8, 0xff, 0x8}, {0xe84c, 0x4, 0x9, 0x3, 0x42, 0xcb, 0x3, 0x5, 0x6, 0x2, 0x5, 0x3, 0x2}], 0x6}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x103240, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r4, 0x40405514, &(0x7f0000000140)={0x3, 0x1, 0x17800000, 0x2, 'syz1\x00', 0x800}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 983.502826] binder: 26960:26961 ioctl 8048ae66 20000080 returned -22 02:06:29 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaa", 0x97) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0xfffffe67, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:29 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000000000000bfa30000000000004503000000fefff67a0af0ffe8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000100b7050000220000006a0a00fe00000000850000000b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3487bb07eb78c27b090941bd3108d31287801000000000000000012cf6956e09d1938013c217e0f6ab2366e8a87554c101f03733d40c62753ecd1f46f09beb1bbfad9bae24b4e8a96ec60f2af47f99376e43836ba33fd5a447f936e000755861103bb45e5d53c9fe36bbd35e53c6376c0c2b1daa58a9c34444bb7e9673476d017fc94c5857ead931db6cd370e93b6d5a74cc1d2c50896249ed7420f8680a730d876c36a1f3f1b8eb12d9390a49f2d99b5df916269392e0d0000556ec919d0b1681369d448c6f8c9969baa463b36d25ac1628ef858a5cc77c14c8df67f20fd224829af6de3d5ef71857496714db96c6db18ea5189cfbddd6e4de3617adabc339334b97b11911905d6692a33f1f370c05e1f134e5f90a326b0cb5268e40f5ba9b5360a516c3f87f05e5d1af657c445131edb61670ff2c62117e96eba22382758239e69127d5656e63bf02af42a5ac113879bfc27d7e6ba1f41301065efb1685e65f30df092251d556a89c2886ea64bc457280330dc9cdb6db023433e9ba97796a7823d241795ab1258fe937312fc5e921e8758153be202f000055a4921970e28e6238580101b710cf8b82bcab02c12fe01bd8df4e97c67e8a3693b23668c55eed4e24eafa16a4f43b6729990a9321531e5eb006b547c13cdfa2fa211d07a29377ea1c5aa7f5d58331ad45fc89ac44c9d2d6b3ac03ce76fc9d341f076264f8cf493901ad919329a295f63be4e91417b9cd09cf47272d46666571f24d71fcff2a9e869c2144f5775c37084acc57b5793f25f853f7a98965e5bd9ff5253f787eb321572355c706d6d2e27c475fd077876a4405b72b00000000000000b79d8029af8de217c23f79e68fe48420cbb226a752b817fc17efaa1268c6"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) tee(r1, r4, 0x164, 0x6) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f00000039c0)={0x6, 0x0, &(0x7f0000003980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000003a40)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000003a00)={&(0x7f0000003940)=[0xa11], 0x1, 0x80000, r5}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r6, &(0x7f0000000140)={&(0x7f0000000040)=@vsock={0x28, 0x0, 0xffffffff, @local}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="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", 0x1000}, {&(0x7f00000000c0)="67615e575d03c3e1a26d1f41e61b6379ceee0a5bb5c40398fe2e464529f3cf4da6f4a81ddae44d635e9c73725e5c9849cbd5d2f8d6a89f94c85e7d22f23c05250892", 0x42}, {&(0x7f00000001c0)="6536e077da4259d3edcead131bd0c655e84a98e3d4a199c549c6a5d8dca8a9f2448e834e2f05bf31ff28646913700d03f1af59c724388777280e2903efde1070fbe9188be129e15bbd2321454366c8a02309a9443e99858235cfaef06a1038890b84e97167c7c813e4b9734381adcbfb9dc309039944dce0b256e837af61c5be38ca62c744bfa317feae42bd1df18d1bbdfbc3f0c3b5e2e3", 0x98}, {&(0x7f0000000280)="49f765dc19878ed31979682d4d2bccbb2b76fea59b3fdad0455c5efe41acd736af296fc49b6bb9fd787064ee89b7394cc3f7ab3da377bce54835ef973d6648cfbdbab0f044c70c517b747d65b3a42ff3b203830f5ce8ecab4638e3e6e492cbf0aa9bd9da602680d7a6b4903eff226fa10f1f918c55a9011542e547541c7047b86f26c93ce10b3dbd0013a9d4741ce60b538ee27d30e592a7515f3adc95bc9a88cc17062839b34cd1358ce797e1529f2bfb46e5b1671d12c326d338160ffb1a8fcd4d23580bab84c00870bb616941f6d785e2abcf02", 0xd5}, {&(0x7f0000000380)="2e98f706c908e448387f6a01bbcef2fa3e2813f03bede3f53205d46e3e31b6fd38efab611255608c2be8f02fab3fb339919d28fd439e61824a4e799dce850048ce78895b973bc51446e8cce84d90931ad4bc401e3432449358470d43ee215f81d30d34e90722a906ee32b67bbbb1c2f272280993a1fae99f08e60d41dc01d0d2e18a66e1c5e6868f0968beb9ca3710741b6486c2af8fd74bc288b64fb6", 0x9d}], 0x6, &(0x7f00000025c0)=[{0x80, 0x108, 0x6, "76ee8f188ba38262272d707fe916a779817e00e5a43cec4659d3c843698cfffcabbc627d49f143c5d299392e05665e9f0fdcd0d947152fb2aedad4e777a8bdbf767e179efe899e692d0b03dda92eaa9e13794155436895aa0980ab30e7cfb42d8b9e13919930cc34572906f16d"}, {0x1010, 0x109, 0x2, "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"}, {0xb8, 0x3a, 0x8, "c50271a38d6a2a74bd9721d69a0c5a22c78159668856516efe8912bb9ddd6071df5b03f7c79629031ee60ad8719d0d4b6df36257df04047c83dd07b2185bf91bf7658fff959508f8401718731486ed8844dc83c070f4b2cf5a37aef7f58d11cd6849c73c6376383aee32174f40a5465fb6caa16aa7617b151f7a64bdd40f41c8822fedc1e1971cdd7e2e16d259271f8cf553e693b34f4ced236844f52ca88ce6aa9c09fdb22a"}, {0x18, 0x101, 0x200, "fd"}, {0x100, 0x3a, 0x800, "53cc9aae78a81b09cf4210e4090d0b2edaf5b2a53f866eabc3f0b0095b3e701a24954bef94d790fa89457f6f8c12346f0f20001c47457da1b8387485d5aef2db3272d0c79db0e70a7120736ab6fe985e0ec8d2bde32fee39c57bfd0e49c9e9474a60d48481043216b923a23f7373587299371445e176b8c9f046139ce968f88ebcac96fd0a576c4e3fc28a4f9a90881e842297bd7fea2cb97f3c04e4f14934994ed7252310eaeb7f42c48ccedb4507082969da70988957c85b66111b384d41bffb40b5f0e48a72e68a0d22bbdb67460083fc668484848891ffa3a1087fcc9ba4f449c4d10b3154f1e8445d8314ebb5"}, {0x90, 0xff, 0x2, "2feb6ebd141b9dea96525336425233e9508b40498643b5000eca733ff5c86eb9624ad2594d78ba7a01607aa696699eb45f045b64051fd4786f755b18dce7989641c45aa53ba8afdc4fd9bed9f887354f9ef96aea97f5ad1056a5872f2e0a279dfa0e573f07fa8c26b3e006a5fabd9ae115dee22dff891ded114f5fa20f"}, {0x70, 0xff, 0x8, "2119374f262ea99288b00896ccfc8f66a78618f6553d454018a88e4b7350e02fe486933b4ae914a176165ddb7efda35661cf308bab673c597dcbd7486cb8a679e8846cd2372fb25ae64271ea8dd65a8d2defa20dcfe88fef696815d5d4"}], 0x1360}, 0x4000084) ioctl$KVM_SET_TSS_ADDR(r3, 0xae47, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000440)={0x1, 0x4, [@empty, @random="6f4c8c3d082b", @broadcast, @empty]}) write(r7, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 02:06:29 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r3, 0x4040ae70, &(0x7f0000000440)={0x5, 0x0, 0x10001, 0x602}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f00000004c0)={0xa16200, 0x9, 0xfff, 0x1, 0x3, [0x4, 0x2, 0x1, 0xffff], [0x4, 0xff, 0x40, 0xff], [0x0, 0x7, 0xffffffff, 0x4e2], [0x0, 0x956, 0x5, 0x1f]}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r5, 0x80045530, &(0x7f0000000480)=""/53) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r6, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) vmsplice(r6, &(0x7f00000002c0)=[{&(0x7f00000000c0)="94e78bc294e0c6bc6c5da084227e669cc0ba5ae5a26c8113ae820505f64e1884942d1fbe0d99f66d47a9b602f165a3e9dc57ce17d67115731d441abccc7e36a1f1f4c42dd0570ead6a62832a1e4dbe38226cda77ff337fc95fb903b19a99400141fe9d6e3f2112197b72a2d26dfa35d20375535258fa16f8bf22629f4650f1", 0x7f}, {&(0x7f0000000a80)="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", 0x1000}, {&(0x7f00000001c0)="c6335abf74ea8972bd61dc8465b16dea58d961d647f39b6369c795c02debaeb83f16ac0e7078b2ab417a013c3aa31fb260a290024f03df", 0x37}, {&(0x7f0000001a80)="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", 0x1000}, {&(0x7f0000000280)="8f0c15cefe1e", 0x6}], 0x5, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, &(0x7f0000000380)=""/13, &(0x7f00000003c0)=0xd) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 983.550676] binder: 26937:26955 ioctl c0306201 0 returned -14 [ 983.573471] binder: 26937:26952 ioctl c0306201 0 returned -14 02:06:29 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x2) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@setneightbl={0x50, 0x43, 0x800, 0x0, 0x0, {0x2}, [@NDTA_PARMS={0x2c, 0x6, 0x0, 0x1, [@NDTPA_RETRANS_TIME={0xc, 0x5, 0x3}, @NDTPA_APP_PROBES={0x8, 0x9, 0x5}, @NDTPA_DELAY_PROBE_TIME={0xc, 0x7, 0x2}, @NDTPA_IFINDEX={0x8}]}, @NDTA_THRESH3={0x8, 0x4, 0x68bc}, @NDTA_THRESH3={0x8}]}, 0x50}}, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000080)=0xc) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f)='?', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e22, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="0250676a005ef4468dd14341da", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000040)={r5, 0x9, 0xfffd}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={r5, 0x80, 0x0, 0x2, 0xb3b}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0x9, 0x3, 0x201, 0x2, 0x7fff, 0x20, 0x1, 0x36bb, r5}, 0x20) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 983.625378] binder: 26968:26969 ioctl c0306201 0 returned -14 [ 983.637383] binder: 26967:26972 ioctl c0306201 0 returned -14 [ 983.644172] binder: 26966:26970 ioctl c0306201 0 returned -14 [ 983.670125] binder: 26974:26975 ioctl c0306201 0 returned -14 [ 983.715295] binder: 26966:26980 ioctl 400454d1 20000440 returned -22 [ 983.732813] binder: 26974:26981 ioctl c0306201 0 returned -14 [ 983.752810] binder: 26968:26982 ioctl c06864b8 200004c0 returned -22 [ 983.761986] binder: 26968:26982 ioctl c0306201 0 returned -14 [ 983.769443] binder: 26966:26983 ioctl c0306201 0 returned -14 02:06:30 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="cf381088b32948359f8dd0b49c3e2319246f9c5c4c5f08112f75f876851e99feee64ffac608eec133322a6d55ffd65d5fcf11b2f0f74d5cf2b28f9267a10ca6ecf09cfdb58ab1f943dfcaf5eb58a135799cd8f0bd0e9364b107cf94ec88acab72bb0f1d4410cea9cf5"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 984.319899] binder: 26986:26988 unknown command -2012202801 [ 984.331034] binder: 26986:26988 ioctl c0306201 20000200 returned -22 [ 984.417302] binder: 26968:26979 ioctl c0306201 0 returned -14 [ 984.426551] binder: 26968:26985 ioctl c06864b8 200004c0 returned -22 [ 984.445607] binder: 26968:26979 ioctl c0306201 0 returned -14 [ 984.470692] binder: 26974:26984 ioctl c0306201 0 returned -14 02:06:30 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c", 0x9c) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0xfffffe67, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:30 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000380)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r3, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) write(r3, &(0x7f0000000040)="b0a3cd0315de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811560818af91afd3bce1422670d6f2d054d8b163442b51683ff77374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c00000000", 0xa8) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000280)={0x9e0000, 0x1, 0x6, r4, 0x0, &(0x7f00000001c0)={0x9a0908, 0x4, [], @p_u32=&(0x7f0000000100)=0x400}}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0x14, 0x0, &(0x7f00000002c0)=[@acquire_done={0x40106309, 0x1}], 0x99, 0x0, &(0x7f0000000540)="9638b73e6ef6dab1dd56311dbddfacf56680049b11fe1675fb8beddb321236d91c3779dcb024e3ae530f4ce2d56c17e5349e009b7484c8bc3fa5f9a6c174a0c9abccc1d13cc66217f32e2d2f0125fef2e85ea27a462fb5dde4e32ff62a2d333afb4e3db682d6d08e8bc2f14c49ddce4fac44f61e8c1153d770f7397ec20fa8bafdf350ed9e1b96aa0685e37ffb825a1a3e13217f5a0ea380ec"}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$ppp(r7, &(0x7f0000000600)="51f7079e57f03968ede93dafe37437aede314eb31057b76c4af9971d525caafb094d8d00ce018bbf335ad9a0f5380337b45bd1902dbd75d50dacf205651eaa48d761c1f975bb959fecae4ba8cc4c7552a719659d1a4a6716b34bca195f27d0692cc88fbeb8b68cba43c6de2bbc9ea687d5115addfde66dc280384a33c760c6eb5d19a1df22dfb8db3a1827586a96ed82444d19c503f3201d2f28d0f17a8243780eddcf9537921dd232a98e5940cea160f01c19a57760dd914e943199c4676045ca3ebe56e07b680a413fd1f1353846dace59ab1309a4c9188dd2c7042c9ed15ff6fbed4e9a48db1a057a", 0xea) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 02:06:30 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00$\x00\a\a\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d"], 0x48}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendmmsg$alg(r5, &(0x7f0000000180)=[{0xb, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100), 0x5}], 0x492492492492642, 0x0) preadv(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:06:30 executing program 5: lookup_dcookie(0x7a925a0f, &(0x7f00000007c0)=""/4096, 0x1000) userfaultfd(0x80000) r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) r3 = accept4$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10, 0x80000) connect$vsock_stream(r3, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r5, 0xee00, 0x0) setfsgid(r5) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$FICLONERANGE(r7, 0x4020940d, &(0x7f0000000040)={{r2}, 0x7, 0x9, 0x80}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:06:30 executing program 3: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) move_pages(r2, 0x2, &(0x7f0000000000)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil], &(0x7f0000000080)=[0x9], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x5) tkill(r1, 0x1000000000016) r3 = getpid() r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@setneightbl={0x1c, 0x43, 0x1, 0x0, 0x0, {0x2}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x400}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_QTHRESH={0x8}]}, 0x3c}}, 0x0) sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) ptrace(0x10, r3) ptrace$peeksig(0x2, r0, 0x0, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) [ 984.980224] binder: 26996:27000 ioctl c0306201 0 returned -14 [ 984.992243] binder: 26998:27001 ioctl c0306201 0 returned -14 [ 985.003274] binder: 26999:27003 ioctl c0306201 0 returned -14 [ 985.013192] binder: 26997:27004 ioctl c0306201 0 returned -14 [ 985.015494] binder: 26996:27000 ioctl c0205648 20000280 returned -22 02:06:30 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000000000000bfa30000000000004503000000fefff67a0af0ffe8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000100b7050000220000006a0a00fe00000000850000000b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3487bb07eb78c27b090941bd3108d31287801000000000000000012cf6956e09d1938013c217e0f6ab2366e8a87554c101f03733d40c62753ecd1f46f09beb1bbfad9bae24b4e8a96ec60f2af47f99376e43836ba33fd5a447f936e000755861103bb45e5d53c9fe36bbd35e53c6376c0c2b1daa58a9c34444bb7e9673476d017fc94c5857ead931db6cd370e93b6d5a74cc1d2c50896249ed7420f8680a730d876c36a1f3f1b8eb12d9390a49f2d99b5df916269392e0d0000556ec919d0b1681369d448c6f8c9969baa463b36d25ac1628ef858a5cc77c14c8df67f20fd224829af6de3d5ef71857496714db96c6db18ea5189cfbddd6e4de3617adabc339334b97b11911905d6692a33f1f370c05e1f134e5f90a326b0cb5268e40f5ba9b5360a516c3f87f05e5d1af657c445131edb61670ff2c62117e96eba22382758239e69127d5656e63bf02af42a5ac113879bfc27d7e6ba1f41301065efb1685e65f30df092251d556a89c2886ea64bc457280330dc9cdb6db023433e9ba97796a7823d241795ab1258fe937312fc5e921e8758153be202f000055a4921970e28e6238580101b710cf8b82bcab02c12fe01bd8df4e97c67e8a3693b23668c55eed4e24eafa16a4f43b6729990a9321531e5eb006b547c13cdfa2fa211d07a29377ea1c5aa7f5d58331ad45fc89ac44c9d2d6b3ac03ce76fc9d341f076264f8cf493901ad919329a295f63be4e91417b9cd09cf47272d46666571f24d71fcff2a9e869c2144f5775c37084acc57b5793f25f853f7a98965e5bd9ff5253f787eb321572355c706d6d2e27c475fd077876a4405b72b00000000000000b79d8029af8de217c23f79e68fe48420cbb226a752b817fc17efaa1268c6"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 985.078776] binder: 26997:27011 ioctl c0306201 0 returned -14 [ 985.087835] binder: 26999:27013 ioctl c0306201 0 returned -14 [ 985.091041] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=27014 comm=syz-executor.3 [ 985.135489] binder: 26996:27015 ioctl c0306201 0 returned -14 02:06:31 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) accept4$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x0) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 02:06:31 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c", 0x9c) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0xfffffe67, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 985.801090] binder: 26997:27011 ioctl c0306201 0 returned -14 [ 985.809475] binder: 26997:27011 ioctl c0306201 0 returned -14 02:06:31 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x40000, 0x0) ioctl$KVM_GET_NESTED_STATE(r6, 0xc080aebe, &(0x7f00000007c0)={{0x0, 0x0, 0x80}}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r7, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x1e}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 02:06:31 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x802) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000040)="8edc7f8172c16c985b1556d314a287f2c1a206d2749b850b9a32d125c6f3c47e873741c5ede5813363", 0x29}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 985.842203] binder: 27023:27026 ioctl c0306201 0 returned -14 [ 985.842208] binder: 27024:27028 ioctl c0306201 0 returned -14 02:06:31 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 985.893634] binder: 27033:27036 ioctl c0306201 0 returned -14 [ 985.900156] binder: 27034:27037 ioctl c0306201 0 returned -14 [ 985.962208] binder: 27034:27041 ioctl c0306201 0 returned -14 [ 985.966621] binder: 27033:27042 ioctl c0306201 0 returned -14 [ 986.023684] binder: 27023:27051 ioctl c0306201 0 returned -14 02:06:32 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x530, 0xffffffff, 0x200, 0x200, 0xd0, 0xffffffff, 0xffffffff, 0x460, 0x460, 0x460, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7fff, 0xffe0}}}, {{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@mh={{0x28, 'mh\x00'}, {"b032"}}, @common=@unspec=@quota={{0x38, 'quota\x00'}, {0x1, 0x0, 0x7f, {0x743d5e3c}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ipv6={@private2={0xfc, 0x2, [], 0x1}, @dev={0xfe, 0x80, [], 0x22}, [0xff, 0x16a50fbb72f17df5, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff000000], 'rose0\x00', 'bridge_slave_1\x00', {}, {}, 0x89, 0x8, 0x4, 0x24}, 0x0, 0x138, 0x260, 0x0, {}, [@common=@srh1={{0x90, 'srh\x00'}, {0x32, 0xff, 0x1, 0x6, 0xffff, @remote, @private2, @dev={0xfe, 0x80, [], 0xc}, [0xff, 0xff000000, 0xff, 0xff000000], [0x0, 0xff000000, 0xffffffff, 0x100fffffe], [0xffffffff, 0xff, 0x0, 0xff], 0x2040, 0x10}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x85, 'system_u:object_r:init_var_run_t:s0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) connect$rose(r5, &(0x7f0000000080)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$getflags(r3, 0x401) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 02:06:32 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c", 0x9c) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0xfffffe67, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 986.674669] binder: 27052:27055 ioctl c0306201 0 returned -14 [ 986.684760] binder: 27054:27057 ioctl c0306201 0 returned -14 [ 986.697206] binder: 27033:27042 ioctl c0306201 0 returned -14 [ 986.703408] binder: 27034:27041 ioctl c0306201 0 returned -14 [ 986.704994] binder: 27033:27042 ioctl c0306201 0 returned -14 [ 986.711746] binder: 27034:27041 ioctl c0306201 0 returned -14 02:06:32 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x501000, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r3 = dup2(r1, r0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:06:32 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x8c, r5, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf494}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x6}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0xd}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x36}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x490, 0x0, 0x248, 0xc0, 0x0, 0x358, 0x3f8, 0x3f8, 0x3f8, 0x3f8, 0x3f8, 0x6, &(0x7f00000002c0), {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0xffffff00, 'veth0_to_bond\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x0, 0x2, 0x15}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x6}}, @common=@inet=@ipcomp={{0x30, 'ipcomp\x00'}, {[0x4d6, 0x4d6], 0x1}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2a}}}, {{@ip={@loopback, @private=0xa010100, 0xff000000, 0x0, 'dummy0\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x11, 0x1, 0x4}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x8, 0x2}}}, {{@ip={@multicast1, @local, 0xff, 0xff000000, 'ip6_vti0\x00', 'veth0_macvtap\x00', {}, {}, 0x84, 0x1, 0x30}, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00', 0x0, 0x2, 0x0, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x14}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4, 0x1}}}, {{@ip={@loopback, @multicast1, 0xff000000, 0x0, 'veth0_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {0xff}, 0x8, 0x3}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x7, @multicast1, 0x4e20}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000040)={0x0, 'vcan0\x00', 0x3}, 0x18) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000080)) 02:06:32 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="056304400c36ff5e710c8d7d4f09a0a320724eea90edaa281bc4664aeee26ee6b9aa61e1e46733b451ba271cb7a9d936ee41b03a132a8227581fa41558376fdbab9fe5b1a797965f3be56495eca0380b4c35816f6b79476e9f060ec8d73dbec2ea34c4456020faac6aa5a65361b8298f9dad0aed12a825ca1a983a33c78f7b1b75125e8df5d4a02a86db5f75ec66d49ea3f3ebccef487d946f6b31b0afa4fe2813667f47afd96c459e357266dd42c2ada1916bcbd67d6c520e73d2c2ead7c276f47967b81bf6d6073d936cb1a13783cf6bc29cddf08db73d78fe76a3d4919169f14ef364babd14cea827fd71ac0039b215103e4f479257959636367e"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 986.806556] binder: 27064:27065 ioctl c0306201 0 returned -14 [ 986.814342] binder: 27062:27066 ioctl c0306201 0 returned -14 [ 986.867518] binder: 27064:27073 ioctl c0306201 0 returned -14 [ 986.868914] binder: 27052:27074 ioctl c0306201 0 returned -14 [ 986.873765] binder: 27062:27075 ioctl c0306201 0 returned -14 [ 987.591506] binder: 27062:27075 ioctl c0306201 0 returned -14 [ 987.591550] binder: 27064:27073 ioctl c0306201 0 returned -14 [ 987.598213] binder: 27062:27075 ioctl c0306201 0 returned -14 02:06:33 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418", 0x9f) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0xfffffe67, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:33 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$SIOCRSSCAUSE(r2, 0x89e1, &(0x7f0000000040)=0x6124) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000024000705000001000000000000001f00", @ANYRES32=r7, @ANYBLOB="00000400f1ffff020000000000000000687462cc1c0002001e00cfd61c52f35662e5cce1c1fe820003"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x108, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x900}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0xd8, 0x2, [@TCA_CGROUP_ACT={0x36, 0x1, [@m_mirred={0xd0, 0x0, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}]}, {0x1b, 0x6, "3c0a793afd329cce9533c4396b8dcc136902ea634a913e"}}}]}]}}]}, 0x108}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000080)={@mcast2, r7}, 0x14) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f0000000540)="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", 0xfffffffffffffc3b) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 02:06:33 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/btrfs-control\x00', 0x20600, 0x0) write(r4, &(0x7f0000000300)="cff4277f28a9084852dca7abafd36a467e06ca9aab50a4db25f3a4fcd6c526e7b4262ff4bc40ca38c65f3cc397ae0c019cfced7722ae68f5c79cf64741f2f27f6ec4759adb712cf257e1190f49f7a6dfebfc67e48e392bc3943f99b0b214c3b3a47d543c3d9f4eda859ab8ce453b013d935226c8c0683e5d3355a17d3d1ab8f2794debf7734b6cf0e46444624565e88e252bd473cc222af8b96428c8fb87", 0x9e) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000240)="619cca3ecdaa110eb20be5a0954d1f5ad536cf6a690bd28e5dd062d8c7d2d439ad1784ad0be3898a34da555506336686fa4715db7f85076b54287f094c0688d566867e8995caef2720545ed47415a43b557cc1eac4", 0x55}], 0x1, 0x0) r5 = dup3(r3, 0xffffffffffffffff, 0x80000) ioctl$VIDIOC_SUBDEV_G_EDID(r5, 0xc0285628, &(0x7f0000000200)={0x0, 0x6, 0xff, [], &(0x7f0000000100)=0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000740)={0x44, 0x0, &(0x7f00000005c0)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000500)={@ptr={0x70742a85, 0x0, &(0x7f00000003c0)=""/183, 0xb7, 0x2, 0x20}, @fda={0x66646185, 0x0, 0x2, 0x3c}, @ptr={0x70742a85, 0x1, &(0x7f0000000480)=""/68, 0x44, 0x1, 0x1f}}, &(0x7f0000000580)={0x0, 0x28, 0x48}}}], 0xcd, 0x0, &(0x7f0000000640)="30ae8eeb5cd8abc5c196a8f9360b68c615b5c5225a71a493dc983c7d2df62962b0f76a308ac75b652c5602a8360a12e5263f18170c20a4885440c3ac0bd6410c6cc36edb3069e716d96fcb48a7e474a05223f7b724ec53cef532e6c3378147022144b277bef8921de86a9b5deac8d4ff81a6fbe7622125976b07267ed792402967dc619c14a67cdc3f6acec12ea884e4225ba49b5099361b76fc0f80a2b0c670f84f78b7ea1fecdbc97df448ff505d78804576b0989c7c4c2f4865c819afbdd572c8a26c4f18e5d2b6c057cd07"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v2={0x2000000, [{0x9}, {0x6, 0x3}]}, 0x14, 0x2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:06:33 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="317404276912e44640"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:33 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000040)={0x9, {0xff, 0x10000, 0x80000001, 0xa0}}) r1 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = dup2(r2, r1) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000080)="dd4da4370149dd75b342c3100a1eeef2a6c967446c24fd745823ad557535b55ae8af35abc4ad093727dbde3705a8c17a258a5d2b9bf1b2d798d1400d75a05b108701017d1ec31ebbe758e8430391ddb78ff9083245b2ff36b698bfd1bdd4d5cda5e1119d81f75ba2b2a9330f03bb1c14c4bc33076e2ea25bdddcbf44063ec2130818cd6aad4b839c2e92f9187290fc186c40353421abf1d1f1704c0a9f34afafb88da18b76af7bc29538983c00292bee546dd0ab66bc4c", 0xb7}], 0x1, 0x1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:06:33 executing program 3: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@setneightbl={0x1c, 0x43, 0x1, 0x0, 0x0, {0x2}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x234, r1, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x190c}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1a3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x90}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffff7}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x20}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8e22}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xae}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7268}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0xec, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xdb, 0x3, "1cddaec12e5a3660e01581e053eba784dfdc53313c3184994da4dffe67a0b1ed68bf3031d493fcc604515d970f2ab8504697d0d8d60582fc56edcc15e01998c8d3428108d602553fdf6805b6fd259b4953a2fe2ef9a593d7fd7e4c446e86f745197f79a17e26554d45a0af3f40857a01067a66a7bd08c0305d08e9d654f13cb050009d4fff6b417cb761c720b510409945d09e717501572e063e525f07c2477045407c365dfe51c6f5702ce63d0eff981678636f0b1235d59cd8355ad898e98c4782c5a8a6c24b3ed907bb9aea4b964f580994e2159ea7"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x4040081}, 0x5) r2 = getpid() r3 = gettid() tkill(r3, 0x1000000000016) ptrace(0x10, r2) ptrace$peeksig(0x2, r2, 0x0, 0x0) [ 988.019083] binder: 27085:27087 ioctl c0306201 0 returned -14 [ 988.046242] binder: 27088:27092 ioctl c0306201 0 returned -14 [ 988.053304] binder: 27089:27093 unknown command 654603313 [ 988.062929] binder: 27086:27095 ioctl c0306201 0 returned -14 [ 988.070580] binder: 27089:27093 ioctl c0306201 20000200 returned -22 [ 988.091346] binder: 27085:27100 ioctl 89e1 20000040 returned -22 [ 988.099924] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 988.111117] binder: 27085:27100 ioctl c0306201 0 returned -14 [ 988.114794] binder: 27090:27101 ioctl c0306201 0 returned -14 [ 988.130057] binder: 27086:27103 ioctl c0306201 0 returned -14 [ 988.175834] binder: 27090:27106 ioctl c0306201 0 returned -14 02:06:34 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r5, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) stat(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r5, r7, r8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 02:06:34 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418", 0x9f) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0xfffffe67, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:34 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)={0x79, 0x0, [0x5, 0x100, 0xffffffffffffff4c, 0x5]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 988.855428] binder: 27109:27110 ioctl c0306201 0 returned -14 [ 988.878585] binder: 27086:27103 ioctl c0306201 0 returned -14 02:06:34 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$VIDIOC_ENUMSTD(r4, 0xc0485619, &(0x7f0000000040)={0xf086, 0x2, "4c32250572ddcbd6c71a576a21b39ab53a593704862d6ee1", {0xc92}, 0x698}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:06:34 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000001c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f0000000240)={r4}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$IMSETDEVNAME(r2, 0x80184947, &(0x7f0000000040)={0x7, 'syz1\x00'}) r5 = dup2(r1, r0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 988.902737] binder: 27112:27117 ioctl c0306201 0 returned -14 [ 988.948395] binder: 27119:27124 ioctl c0306201 0 returned -14 [ 988.967101] binder: 27122:27126 ioctl c0306201 0 returned -14 [ 989.001357] binder: 27109:27130 ioctl c0306201 0 returned -14 [ 989.059523] binder: 27119:27133 ioctl c0306201 0 returned -14 [ 989.112586] binder: 27122:27135 ioctl c0306201 0 returned -14 02:06:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418", 0x9f) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0xfffffe67, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:35 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f0000000080)=""/28) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 989.722358] binder: 27138:27140 ioctl c0306201 0 returned -14 02:06:35 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = fanotify_init(0x4, 0x0) fstat(r4, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 989.833942] binder: 27147:27149 ioctl c0306201 0 returned -14 [ 989.907228] binder: 27147:27151 ioctl c0306201 0 returned -14 02:06:35 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000080)=0x200) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = dup2(r2, r1) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x22, &(0x7f0000000040)=0x3, 0x4) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x50, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x34, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4d3a}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe694}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4e45}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17487761}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2a80}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000000) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x40c8a041}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)=ANY=[@ANYBLOB="58800000", @ANYRES16, @ANYBLOB="040056410000fddbdf25030000004400088014000780080006004900000008000500a7ce7f252c00078008000500f9c8e56108000500f996440508000600bf00000008000600ce000000080005008b56d630"], 0x58}, 0x1, 0x0, 0x0, 0x8008805}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x9055c669f393211c, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x408c0}, 0x2) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1a49}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x1, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000000) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x114, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xb4, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3197ac0a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x11ff2f3d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x47e5b50f}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f15c4f3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59f01a2e}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38a89cee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x63}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x87}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1fefb228}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7779ae3d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e96821b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4c}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55383d9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9eeaf9f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f69ef9f}]}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4000001}, 0x208a0) [ 990.155593] binder: 27153:27155 ioctl c0306201 0 returned -14 [ 990.275489] binder: 27153:27157 ioctl c0306201 0 returned -14 02:06:36 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a3", 0xa0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0xfffffe67, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:36 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="010000006daaa1eb32525ab08b70e97a9752891ccc1a155b578077618d860dd774a4eb4718860b1bcd97af993f0de7b3e9b830e3514921b706d51455c3590c77839071f64b77633f30ece3613e11d8"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$USBDEVFS_RESETEP(r4, 0x80045503, &(0x7f0000000100)={0xe, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 990.569266] binder: 27158:27159 ioctl c0306201 0 returned -14 [ 990.636989] binder: 27160:27161 unknown command 1 [ 990.643112] binder: 27160:27161 ioctl c0306201 20000200 returned -22 02:06:36 executing program 3: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() tkill(r1, 0x1000000000016) ptrace(0x10, r0) ptrace$peeksig(0x2, r0, 0x0, 0x0) process_vm_writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/57, 0x39}, {&(0x7f0000000040)=""/72, 0x48}, {&(0x7f00000000c0)=""/206, 0xce}, {&(0x7f00000001c0)=""/252, 0xfc}], 0x4, &(0x7f0000000700)=[{&(0x7f0000000300)=""/84, 0x54}, {&(0x7f0000000380)=""/50, 0x32}, {&(0x7f00000003c0)=""/90, 0x5a}, {&(0x7f0000000440)=""/227, 0xe3}, {&(0x7f0000000540)=""/162, 0xa2}, {&(0x7f0000000600)=""/24, 0x18}, {&(0x7f0000000640)=""/173, 0xad}], 0x7, 0x0) 02:06:36 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000001000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x108, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x900}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0xd8, 0x2, [@TCA_CGROUP_ACT={0x36, 0x1, [@m_mirred={0xd0, 0x0, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}]}, {0x1b, 0x6, "3c0a793afd329cce9533c4396b8dcc136902ea634a913e"}}}]}]}}]}, 0x108}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x114, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x10}, 0x400c) r5 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:06:36 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@setneightbl={0x1c, 0x43, 0x1, 0x0, 0x0, {0x2}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000080)={0x70, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa883}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x401}]}, 0x70}, 0x1, 0x0, 0x0, 0x40880}, 0x44000000) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000040), 0x0, 0xa) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000500)=[{&(0x7f0000000580)="588e7206c3e99244b6df7287d3038577326ab6fc2b5308bc71bd43f1fbd2d6e70d148e8e8e539eec9a91319ebeec551ee610aa9d7e5ea2fdf4ba7eec798e60114612feb883693aa63e22edfc4812474ce724fb8eb7f2f587b66f454257a8301b98848e448a60358b963ed0c84d9fe3bc0dc6dd4b54526a833d6ef71283428597b15c1f40fef82e6eddbe6e566c7a14a06956c1c56bc81401c96550ea55e7d88f96e5142f3a513e5aed0f72bb08b90acd7020486a6dd45eef3b92bf6461b330a224ed70f4", 0xc4}, {&(0x7f00000001c0)="4c9c93c42bd8d383a6d1929a4cad11aabd5fade436e46c532f263c5d21f0da08cf90e6d9e88fd8fababa47f05f80da51de65ce188e1f3372cfa87913d544cb445e6a4b747c52c67ed30ccfd38222b80a1cdddb9680d430446cf5b54877762b78cbe1fda8f4f9924fbc1ff6a46abe3d64a2e4c5d497b6abf0014c77", 0x7b}, {&(0x7f0000000240)="055f4251e12cfcec6d3f2a9a7b0c6a73bb9d2f5b0915e1065adcdfa4dde658a55b77876e8ab4da8f89ce358e764f640ba5b8a0ac49d98503a7d7e7423a34bf5e00fc2dbb3f3271b5d1c3426c54b0f8c3f8bd4797f9727b46dce2e47c4f151143272b7efa7c315a3293bdda062b8638cdde677d0b81a0b5e3984c66ec488ec90be73ccc20f20da7c84c866e1edaa8f37676b865bc72519bac5c10e0d65213fbf7244b22c0a2e6190b06263db39fdf2b12eec47347af565d9b186dd51612c8e53641b577bf9550cc6b", 0xc8}, {&(0x7f0000000340)="99c420b546b81cbcac13a631fc66ed039ad1f476f5f4dee5d6c5b5ac91c3d9a5147b7aa32534cf8e2a23a2ca596764753e1a8cbbe89a038af68bbe10fe5c8b4cc139e693adb25539c6ffb56b5cb93297b90c81cf540600530fce90e9e48bd10f495bda12abad17e844b17bafad6570dc4a1c04ddb8aa915231dee8977259c5bdf8ecd7b31d01fef1e7392bac0016e30a546a0d3362fe9efb6984f6ba8e8d29ca0877ddcc0338aee2ee3fbf880363af565e956f1199026afebcdb4aee55c655592dca94e31c766a793b180590ea4de438cb3e1ba7eba4e495232ac9be16c1fd793697177fc30c261588108d3b", 0xec}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f0000000440)="6020d6a00b62e45d77db1469a10733c54916117b5f27fad3c396558d7a12e83dabff3f982c62b8afe8f7cf983b327452dde11829fd4005d4edf108e52659d5ca4b890a76091b5a6db007dd0fd66c4985258925f113b6b9691cf26305a776ede6c464282f499370d40ffb216bff59959bbed4532c4c3e920ea3506c2fd1199e56de3bd71c7713077ef7923a90e1664db89c06c3690c68f0071c63ed60396c9082ad53772c4093641c9d3a4a7864ad20de8a", 0xb1}, {&(0x7f0000000100)="bae5fce2", 0x4}], 0x7, 0x4) write$P9_RRENAMEAT(r4, &(0x7f0000000000)={0x7, 0x4b, 0x1}, 0x7) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 991.085583] binder: 27169:27173 ioctl c0306201 0 returned -14 [ 991.093710] binder: 27170:27172 ioctl c0306201 0 returned -14 [ 991.115998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27172 comm=syz-executor.0 [ 991.150978] binder: 27170:27172 ioctl c0306201 0 returned -14 [ 991.164829] binder: 27169:27178 ioctl c0306201 0 returned -14 [ 991.173454] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27181 comm=syz-executor.0 02:06:36 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000001000000000000000000067356a2ca39a7e63f23eb914f170c98773014300000000009500000000000000ee44cbf6f96e43c2905770549d6e2e97e901361625861e2b4ae91b0fb9b0588c04f67ea44feb5d10d2f20417e1ca78db20d9e9c0f2a7f1ee069077f8ead2163ba119784acccff331410dac0700e5799fe29770f1588a1035b940e2cb1334a467710e90fadb1d92e1185dcdaca5c4661f7bc44a8b44562fde53458952ac8e89b88d61cc105fef94b792729c228b606cb35e35b45923c024c8ae7246d227643be304fab2f65791c2a659708b341cf9f4f5e669ebddad736ef6983d885f0ea7c3956b8220befc34120e2fe5170938c7f4c1ada084e67d8bdf72f971342595051f8d36a0f1157bd60a45edf4f47736f557badc627d8343a1a65c372e3d43dd23a06ec16ffaa6aee599accc734a1c5a8915e830a31802b78eed4bcdced9453403c527b2d58ed2721ba6757976fdb3b2696c2c4b184edd899bca6dc4906e22a189da980c5999d03427dbb1e983c601e3fbf2d36522942bfa221f7762621c5304b98cb44d52b57fa93e4d94b2cb00c53e10b23844d595fcaf457da570dbf2172f34f3108b800558d456080b77cee0dd51792cd60500ec44595000002087dc9227a69b89b3564e2414c3d9e4461cd058836dbaa16764b4a9027e8380867fabbea4d4e9164e2dc7affb5c10af519f8112e8b630f20dd89e8e6da2d02547613c723d7ab1bc25103399007660035fa7f4622dc5cdfc9b607379dd09478525a9ea3d7ca0adacbfbc0e16bded56779aa0dc89e23d232cf131948dbb986b78e662b03eec9a1b71bd57620c25fe37ba253cc7ebe3ce7b20afb3929a88cf88d26efb1db363010a63e65b5bf2bc477b222cee3f3a9caf915db0f1c50842d870deb486458a4ed5d16502b2012598a5bedadb29dc869da6e8d291e29ea72638db2c93bbac9638f48788f1b5adc8e9c3cee26c143256a01c22f382d00f31401267e3c53429a3374bf5af276e8519704bed3e124fa8fd30b85e494587397179fc5a3bf47d7ec8a8899718e0feea3aee9a3feb8cac89f74a34b23b206ae0ac53470a34bc75874c4c1c08eda566d8ccae2813f36a36b494fc8dec92419333ee12a367c2774459f9ca847e1e05aaeb2684b67098f4aa0d577080a1fb8a0789fcda500ed14758a5aff1e0ba3b365263d82f1131869ddeac37d832e7cbdd6a1ac1353b2e00f841bdf0e719cd7eb89a1271141c13e22100483404f4ea44c04ed081853d1a2ddf780d394bbdb58f3fd14fbd7881331fdd88a78ad07c9383d166cfe619c74304fb12bcd9f6f040ad0bc6d296a1680dbc46a82752dded0713d8d80da347b7aa187bd3eab3ec9b0b11d11a75d2f0c69a1fb3656bd028666c04cdd4b2d5505d90be7514066b5e39cd9dc4995518bd968bfa35e31a0cb7f6da97346c97e0c644d89d17ba1e1c6b7362b56151226ad73a4170802e6e89dfd18d5700119c792820889875b2726004954321f542f600000000000000001b85afd8618af01b2d1633c1b4a3fb73f5a13b3d2cc100089c66bad7b06186e08eb13d0f9edfc5e257c8c717557c3caca2483ef7462b508db2ecf23a62eeba9d354cf283f6f96c2e9fb26aa0902334886925f28f9dcf44d1768e3d7a02cb66782e2335a1d3786b278dc5e01e493683e3d430e62c8ca8cbb3beeba3f7ec34efbfb5c9367aecb9b57ab5630bac7331c5a566f52ba3773b54caa0f6ce38cf485c2f394fa188a5e8138e85b346df246e16e3"], &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r5, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r6}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00', r6}, 0x30) fcntl$setown(r3, 0x8, r7) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCL_UNBLANKSCREEN(r8, 0x541c, &(0x7f0000000040)) ioctl$sock_inet_SIOCGIFADDR(r8, 0x8915, &(0x7f0000000080)={'veth1_to_hsr\x00', {0x2, 0x4e20, @private=0xa010101}}) write(r9, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 02:06:37 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0xc04) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aa03}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x2) dup2(r5, r6) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x20000, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0x2) dup2(r7, r8) socket$inet6(0xa, 0x2, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 991.196215] binder: 27170:27172 ioctl c0306201 0 returned -14 [ 991.218705] binder: 27182:27183 ioctl c0306201 0 returned -14 [ 991.249427] binder: 27185:27186 ioctl c0306201 0 returned -14 02:06:37 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a3", 0xa0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0xfffffe67, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 991.369120] binder: 27182:27191 ioctl c0306201 0 returned -14 [ 991.377980] binder: 27192:27193 ioctl c0306201 0 returned -14 02:06:37 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05630200a4d4bb6a1a8cbdd1dad3db64c06a25756a77d0000000000000"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080), 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000005c0)={{0x6, 0x1}, 'port1\x00', 0x40, 0x80452, 0xc, 0x9574, 0x1000, 0xffffffff, 0x80000001, 0x0, 0x2, 0x7f}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r3, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r3, r4, 0xa}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r6, 0x10e, 0x8, &(0x7f00000001c0)=0xe0c7, 0x4) [ 991.479651] binder: 27196:27198 unknown command 156421 [ 991.485483] binder: 27196:27198 ioctl c0306201 20000200 returned -22 [ 991.878758] binder: 27169:27178 ioctl c0306201 0 returned -14 02:06:37 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='cpu.weight.nice\x00', 0x2, 0x0) r3 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = socket(0xa, 0x800, 0x7) bind$netrom(r6, &(0x7f00000001c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @default, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r7, 0xc018620c, &(0x7f0000000040)={0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 991.932000] binder: 27169:27173 ioctl c0306201 0 returned -14 [ 991.960166] binder: 27204:27205 ioctl c0306201 0 returned -14 02:06:37 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@setneightbl={0x1c, 0x43, 0x1, 0x0, 0x0, {0x2}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000040)={'geneve1\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r3 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) 02:06:37 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 992.051923] binder: 27209:27210 ioctl c0306201 0 returned -14 [ 992.060643] binder: 27204:27214 ioctl c0306201 0 returned -14 [ 992.093277] binder: 27215:27216 ioctl c0306201 0 returned -14 02:06:37 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a3", 0xa0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0xfffffe67, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 992.147232] binder: 27215:27221 ioctl c0306201 0 returned -14 [ 992.156335] binder: 27209:27222 ioctl c0306201 0 returned -14 [ 992.194789] binder: 27224:27225 ioctl c0306201 0 returned -14 02:06:38 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="05630440c96b116eef63a3510e21fdcb4ee239a1fda26f"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 992.893478] binder: 27215:27221 ioctl c0306201 0 returned -14 02:06:39 executing program 3: socket$can_bcm(0x1d, 0x2, 0x2) clone(0x84200000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() tkill(r1, 0x1000000000016) ptrace(0x10, r0) connect$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @bcast}, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @null, @default]}, 0x48) ptrace$peeksig(0x2, r0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) bind$ax25(r2, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 02:06:39 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x3, "afc24f6fa2f2fe69"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:06:39 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$KVM_SET_FPU(r5, 0x41a0ae8d, &(0x7f00000001c0)={[], 0x0, 0xffff, 0x8, 0x0, 0x5, 0x2000}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 02:06:39 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000040)={0x0, 0x80, 0x3, {0xc, @pix={0x1, 0x8, 0x31324d59, 0x7, 0x7199, 0x2, 0x8, 0x2af, 0x0, 0x8, 0x1, 0x4}}, 0xffffffff}) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = dup2(r2, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:06:39 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000780)={0xfffffe67, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:39 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 994.114329] binder: 27239:27246 ioctl c0306201 0 returned -14 [ 994.114928] binder: 27241:27244 ioctl c0306201 0 returned -14 [ 994.123001] binder: 27243:27247 ioctl c0306201 0 returned -14 [ 994.183297] binder: 27239:27254 ioctl c0306201 0 returned -14 [ 994.237149] binder: 27239:27260 ioctl 800c6613 20000040 returned -22 [ 994.292959] binder: 27241:27265 ioctl c0306201 0 returned -14 02:06:40 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0xc00) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 02:06:40 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000780)={0xfffffe67, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 994.907426] binder: 27239:27254 ioctl c0306201 0 returned -14 02:06:40 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000100)={0x13, 0x10, 0xfa00, {&(0x7f00000007c0), r5, 0x1}}, 0x18) [ 994.948157] binder: 27239:27260 ioctl 800c6613 20000040 returned -22 02:06:40 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f00000001c0)=ANY=[@ANYBLOB="80d500000000000002004e23ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000500000002000007ac1e010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ac14143c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22ac1e010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ac1414bb00"/784], 0x310) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_GET_NO_NEW_PRIVS(0x27) [ 994.992555] binder: 27268:27272 ioctl c0306201 0 returned -14 [ 995.010793] binder: 27269:27273 ioctl c0306201 0 returned -14 02:06:40 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x8, 0x101000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5c, r6, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7f}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3c}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x5c}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 995.036896] binder: 27276:27278 ioctl c0306201 0 returned -14 [ 995.094868] binder: 27276:27284 ioctl c0306201 0 returned -14 [ 995.101709] binder: 27283:27285 ioctl c0306201 0 returned -14 [ 995.112038] binder: 27268:27286 ioctl c0306201 0 returned -14 [ 995.157454] binder: 27283:27288 ioctl c0306201 0 returned -14 02:06:41 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000000000000bfa30000000000004503000000fefff67a0af0ffe8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000100b7050000220000006a0a00fe00000000850000000b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3487bb07eb78c27b090941bd3108d31287801000000000000000012cf6956e09d1938013c217e0f6ab2366e8a87554c101f03733d40c62753ecd1f46f09beb1bbfad9bae24b4e8a96ec60f2af47f99376e43836ba33fd5a447f936e000755861103bb45e5d53c9fe36bbd35e53c6376c0c2b1daa58a9c34444bb7e9673476d017fc94c5857ead931db6cd370e93b6d5a74cc1d2c50896249ed7420f8680a730d876c36a1f3f1b8eb12d9390a49f2d99b5df916269392e0d0000556ec919d0b1681369d448c6f8c9969baa463b36d25ac1628ef858a5cc77c14c8df67f20fd224829af6de3d5ef71857496714db96c6db18ea5189cfbddd6e4de3617adabc339334b97b11911905d6692a33f1f370c05e1f134e5f90a326b0cb5268e40f5ba9b5360a516c3f87f05e5d1af657c445131edb61670ff2c62117e96eba22382758239e69127d5656e63bf02af42a5ac113879bfc27d7e6ba1f41301065efb1685e65f30df092251d556a89c2886ea64bc457280330dc9cdb6db023433e9ba97796a7823d241795ab1258fe937312fc5e921e8758153be202f000055a4921970e28e6238580101b710cf8b82bcab02c12fe01bd8df4e97c67e8a3693b23668c55eed4e24eafa16a4f43b6729990a9321531e5eb006b547c13cdfa2fa211d07a29377ea1c5aa7f5d58331ad45fc89ac44c9d2d6b3ac03ce76fc9d341f076264f8cf493901ad919329a295f63be4e91417b9cd09cf47272d46666571f24d71fcff2a9e869c2144f5775c37084acc57b5793f25f853f7a98965e5bd9ff5253f787eb321572355c706d6d2e27c475fd077876a4405b72b00000000000000b79d8029af8de217c23f79e68fe48420cbb226a752b817fc17efaa1268c6"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r3 = dup2(r2, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r5, 0x80045017, &(0x7f0000000040)) [ 995.837170] binder: 27276:27294 ioctl c0306201 0 returned -14 [ 995.838707] binder: 27291:27295 ioctl c0306201 0 returned -14 [ 995.858406] binder: 27276:27278 ioctl c0306201 0 returned -14 [ 995.899914] binder: 27283:27288 ioctl c0306201 0 returned -14 [ 995.909311] binder: 27283:27289 ioctl c0306201 0 returned -14 02:06:42 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x84800) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:42 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000780)={0xfffffe67, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:42 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000040)="eaaeb87445339ef2c6a5ba1ba43b8bc3672d18ffb8820eaba742a2e3e8d360fd5e0f4a8a1e63526b7f74f227e4585def5586aabf7a2c17757bed82457134148de43aab4c9c8788287afc03ee62e609aa915c532ce5548fbb7d60e089c235ecfb5f", 0x61}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:06:42 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:06:42 executing program 3: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@setneightbl={0x1c, 0x43, 0x1, 0x0, 0x0, {0x2}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000000)={0x7, 0x7, 0x4}, &(0x7f0000000040)=0x28) r2 = gettid() tkill(r2, 0x1000000000016) ptrace(0x10, r0) ptrace$peeksig(0x2, r0, 0x0, 0x0) 02:06:42 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) vmsplice(r4, &(0x7f0000000200)=[{&(0x7f0000000040)="44f1b7ddb6819faeee0b52fb334dc5e92bbfb8cbdb88055976f15f9d5f171918e58b853c23a5a374d9bfe14972b1a4ee69a096d96f63beaf35fc8e91f8bbab54e42d95a00838763b757f6a23102b406deccf902561c2384ffafa14266d0eb22412263e387720531d01262bf6fc1b53a8944f546d0002b4d955ed711d39970dd7afecc7c3425cf54a60ec27c21061a84a22ce5ad2a07fdb08d5e96011066cfae97fc269833e41d5f034ee57493c20e6f408dfcab36844dca638b0f6978e0c07c08c58", 0xc2}, {&(0x7f0000000140)}, {&(0x7f00000001c0)="eb411c3e4f9b61445444c5389ef0ad2aa1faa4", 0x13}], 0x3, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) [ 997.151515] binder: 27309:27311 ioctl c0306201 0 returned -14 [ 997.164464] binder: 27306:27312 ioctl c0306201 0 returned -14 [ 997.181362] binder: 27307:27316 ioctl c0306201 0 returned -14 [ 997.181376] binder: 27310:27314 ioctl c0306201 0 returned -14 [ 997.245482] binder: 27306:27324 ioctl c0306201 0 returned -14 [ 997.252363] binder: 27310:27325 ioctl c0306201 0 returned -14 [ 997.285275] binder: 27307:27327 ioctl c0306201 0 returned -14 02:06:43 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 02:06:43 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}], 0x1c) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x6c, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000040)={r5, 0x9, 0xfffd}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={r5, 0x80, 0x0, 0x2, 0xb3b}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000040)=r5, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 02:06:43 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r3, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) write(r3, &(0x7f00000005c0)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xa1) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 997.951836] binder: 27306:27329 ioctl c0306201 0 returned -14 [ 997.970403] binder: 27310:27330 ioctl c0306201 0 returned -14 02:06:43 executing program 3: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() tkill(r1, 0x1000000000016) ptrace(0x10, r0) ptrace$peeksig(0x2, r0, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) ptrace$setsig(0x4203, r2, 0x8000, &(0x7f0000000000)={0x26, 0xff, 0x3}) [ 998.022617] binder: 27306:27312 ioctl c0306201 0 returned -14 [ 998.029520] binder: 27332:27335 ioctl c0306201 0 returned -14 02:06:43 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) ptrace$setregset(0x4205, r4, 0x4, &(0x7f0000000100)={&(0x7f0000000040)="67aac268510b3494f0123a5c6b71cbb6d99ca52023fd8be65d8f1a48048c0e5867dd6750f9b30c8febb7d1672d6d2fe6f57f05c5fde4049b0a81b21c0e2adf651541e35f3b11384329fc460e1b9396e2f9d5dbf8327a528e31248b9f7cbe1291c8592cbc72399548816118f96583d3fecf2b7903678e54a72d266ee83752bb2e7c22fefb33df0fc6e6bd318171d8da2e98ed79db83601f", 0x97}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:06:43 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) r3 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@l2, &(0x7f00000000c0)=0x80, 0x80800) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r4, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xbe}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040001}, 0x404c041) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 998.073235] binder: 27334:27341 ioctl c0306201 0 returned -14 [ 998.089958] binder: 27337:27339 unknown command 5 [ 998.108822] binder: 27346:27347 ioctl c0306201 0 returned -14 [ 998.123201] binder: 27348:27349 ioctl c0306201 0 returned -14 [ 998.127701] binder: 27337:27339 ioctl c0306201 20000280 returned -22 [ 998.148959] binder: BINDER_SET_CONTEXT_MGR already set [ 998.150310] binder: 27332:27354 ioctl c0306201 0 returned -14 [ 998.168578] binder: 27337:27339 ioctl 40046207 0 returned -16 [ 998.174822] binder: 27346:27357 ioctl c0306201 0 returned -14 [ 998.174967] binder: BINDER_SET_CONTEXT_MGR already set [ 998.191814] binder: 27348:27358 ioctl c0306201 0 returned -14 [ 998.199645] binder: 27337:27356 ioctl 40046207 0 returned -16 [ 998.207973] binder: 27337:27339 unknown command 5 [ 998.214267] binder: 27337:27339 ioctl c0306201 20000280 returned -22 02:06:44 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) write$P9_RATTACH(r3, &(0x7f0000000080)={0x14, 0x69, 0x2, {0x40}}, 0x14) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 998.272067] binder: 27334:27365 ioctl c0306201 0 returned -14 02:06:44 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$KVM_SET_FPU(r5, 0x41a0ae8d, &(0x7f00000001c0)={[], 0x0, 0xffff, 0x8, 0x0, 0x5, 0x2000}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 02:06:44 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) flock(r2, 0xc) r3 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000540)={0x0, 0xfb, 0xc1, 0x1, 0x2, "a86847dc15a2e760f50642607d61c51e", "6109d6d7a424c7ac626824ea781222a6b72b7c8464124a97872bd5e9854f073c69d891eba95e1737963f7db345554606c1846b38f67dac1fd0a1265499b4c10dfcfc8e20d7d7bdb2e767918765da1e30194585ab151979aee025a2accb4cdc03311b083369b8a8fbdd7afe9b6bf4cc52b3fc745ce4e406017d1ec19ca9837f9fa34a20a77d65efb7c91985f11afcf4d49c92069cbd5e83b9ba19b959d95ee6546a17ab99edf4f5fb1089590c"}, 0xc1, 0x2) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x4c0, 0x0) write$eventfd(r6, &(0x7f0000000100)=0x3, 0x8) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) [ 998.844060] binder: 27371:27372 ioctl c0306201 0 returned -14 02:06:44 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x1000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000040)=[{&(0x7f0000000500)}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 998.900821] binder: 27373:27374 ioctl c0306201 0 returned -14 [ 998.909965] binder: 27346:27347 ioctl c0306201 0 returned -14 [ 998.924050] binder: 27348:27358 ioctl c0306201 0 returned -14 [ 998.997612] binder: 27382:27385 ioctl c0306201 0 returned -14 [ 999.036660] binder: 27371:27388 ioctl c0306201 0 returned -14 02:06:44 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)='9', 0x1}], 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 999.045801] binder: 27373:27389 ioctl c0306201 0 returned -14 [ 999.061036] binder: 27382:27390 ioctl c0306201 0 returned -14 02:06:44 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$VIDIOC_QUERYMENU(r4, 0xc02c5625, &(0x7f0000000040)={0x4, 0x1000, @name="20773280cbc0702f1f8be2f05c1f98f9492ca698338db150c9fae07e23d3f7ff"}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@setneightbl={0x1c, 0x43, 0x1, 0x0, 0x0, {0x2}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$netlbl_mgmt(0x0) sendmsg$NLBL_MGMT_C_VERSION(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="04000000e3a7cd4800000000913342b32974f3a21cbdd452c77a", @ANYRES16=r7, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x60045}, 0x20004080) sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x64, r7, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x15}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000080) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 999.233784] binder: 27396:27397 ioctl c0306201 0 returned -14 [ 999.296433] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27398 comm=syz-executor.0 [ 999.358872] binder: 27396:27400 ioctl c0306201 0 returned -14 02:06:45 executing program 1 (fault-call:9 fault-nth:0): r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 02:06:45 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xa1) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4084000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r5, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x8010) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) [ 999.665617] binder: 27402:27403 ioctl c0306201 0 returned -14 [ 999.717821] binder: 27404:27405 ioctl c0306201 0 returned -14 [ 999.773921] binder: 27404:27409 ioctl c0306201 0 returned -14 [ 999.775361] FAULT_INJECTION: forcing a failure. [ 999.775361] name failslab, interval 1, probability 0, space 0, times 0 [ 999.791325] CPU: 1 PID: 27410 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 999.791613] binder: 27382:27411 ioctl c0306201 0 returned -14 [ 999.799219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 999.799227] Call Trace: [ 999.799250] dump_stack+0x1b2/0x283 02:06:45 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$DRM_IOCTL_ADD_CTX(r5, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r4, 0xc0086423, &(0x7f0000000080)={r6, 0x1}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f00000000c0)=0x8001, 0x4) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 999.799271] should_fail.cold+0x10a/0x154 [ 999.799289] should_failslab+0xd6/0x130 [ 999.799303] kmem_cache_alloc_trace+0x2b7/0x3f0 [ 999.799319] binder_get_thread+0x1b3/0x7b0 [ 999.799335] binder_ioctl+0x170/0xeeb [ 999.799347] ? check_preemption_disabled+0x35/0x240 [ 999.799358] ? binder_ioctl_write_read.isra.0+0x710/0x710 [ 999.799381] ? binder_ioctl_write_read.isra.0+0x710/0x710 [ 999.805931] binder: 27382:27411 ioctl c0306201 0 returned -14 [ 999.814724] do_vfs_ioctl+0x75a/0xfe0 [ 999.814740] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 999.814752] ? ioctl_preallocate+0x1a0/0x1a0 [ 999.814776] ? security_file_ioctl+0x76/0xb0 [ 999.814787] ? security_file_ioctl+0x83/0xb0 [ 999.814798] SyS_ioctl+0x7f/0xb0 [ 999.814807] ? do_vfs_ioctl+0xfe0/0xfe0 [ 999.814820] do_syscall_64+0x1d5/0x640 [ 999.814838] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 999.814847] RIP: 0033:0x45ca59 [ 999.814852] RSP: 002b:00007fc464772c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 999.814863] RAX: ffffffffffffffda RBX: 00000000004e18e0 RCX: 000000000045ca59 [ 999.814868] RDX: 0000000000000000 RSI: 00000000c0306201 RDI: 0000000000000003 [ 999.814873] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 999.814882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 999.867176] binder: 27413:27414 ioctl c0306201 0 returned -14 [ 999.867663] R13: 0000000000000219 R14: 00000000004c4625 R15: 00007fc4647736d4 [ 999.888092] binder: 27402:27410 ioctl c0306201 0 returned -12 [ 999.963865] binder: 27413:27418 ioctl c0306201 0 returned -14 02:06:46 executing program 3: clone(0xa0864900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r2, 0x4141, 0x0) tkill(r1, 0x1000000000016) ptrace(0x10, r0) ptrace$peeksig(0x2, r0, 0x0, 0x0) 02:06:46 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000080)={0x3, "5c41d7"}, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@setneightbl={0x1c, 0x43, 0x1, 0x0, 0x0, {0x2}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0) connect$netlink(r4, &(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x2}, 0xc) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0xfffffffffffffffa) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:46 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_GET_SREGS(r5, 0x8138ae83, &(0x7f00000001c0)) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@setneightbl={0x1c, 0x43, 0x1, 0x0, 0x0, {0x2}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f0000000040)=""/217, &(0x7f0000000300)=0xd9) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:06:46 executing program 1 (fault-call:9 fault-nth:1): r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 02:06:46 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000001000000000000001f00", @ANYRES32=r8, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x120, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x900}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0xf0, 0x2, [@TCA_CGROUP_ACT={0xec, 0x1, [@m_mirred={0xe8, 0x0, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x1, 0x7}}}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x0, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2000000}}}, @TCA_MIRRED_PARMS={0x20}]}, {0x1b, 0x6, "3c0a793afd329cce9533c4396b8dcc136902ea634a913e"}, {0xc}, {0xc}}}]}]}}]}, 0x120}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={@private2={0xfc, 0x2, [], 0x1}, 0x2a, r8}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 02:06:46 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000001000000000000001f00", @ANYRES32=r6, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x108, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x900}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0xd8, 0x2, [@TCA_CGROUP_ACT={0x36, 0x1, [@m_mirred={0xd0, 0x0, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}]}, {0x1b, 0x6, "3c0a793afd329cce9533c4396b8dcc136902ea634a913e"}}}]}]}}]}, 0x108}}, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f00000001c0)={0x1d, r6}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000006140086ca94a50228bd7000fbdbebc0439da46db68eff0edc6a320100010000000800010002000000080001"], 0x30}, 0x1, 0x0, 0x0, 0x24004040}, 0x4) [ 1001.106017] binder: 27430:27434 ioctl c0306201 0 returned -14 [ 1001.113253] binder: 27432:27435 ioctl c0306201 0 returned -14 [ 1001.113600] binder: 27429:27433 ioctl c0306201 0 returned -14 [ 1001.133356] binder: 27431:27437 ioctl c0306201 0 returned -14 [ 1001.175737] binder: 27430:27443 ioctl c0306201 0 returned -14 [ 1001.182256] binder: 27432:27444 ioctl c0306201 0 returned -14 [ 1001.192094] ptrace attach of "/root/syz-executor.3"[6364] was attempted by "/root/syz-executor.3"[27447] [ 1001.234076] binder: 27431:27450 ioctl c0306201 0 returned -14 [ 1001.236879] binder_alloc: 27428: binder_alloc_buf, no vma [ 1001.251682] binder: 27429:27453 ioctl c0306201 0 returned -14 02:06:47 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f0000000040)="b314ae40672a92d83f58d2d3eb2fb768c1cbc95cd4") ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 02:06:47 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$EVIOCSABS3F(r4, 0x401845ff, &(0x7f00000000c0)={0x4f74, 0xffd, 0x4, 0x4, 0xca27, 0x7}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:47 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000040)) [ 1001.902407] binder: 27430:27443 ioctl c0306201 0 returned -14 [ 1001.915712] binder: 27432:27444 ioctl c0306201 0 returned -14 02:06:47 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000080)="569f4f20592ff8fcda3a753c66a7ec9ad5d5b736cb0b01759a8f1dbaed8d82116ed070632ebbd768f4ac5b754b28ae8be0c6fdf185bf2997", 0x38}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:06:47 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$MON_IOCT_RING_SIZE(r3, 0x9204, 0x4ff6f) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1001.970643] binder: 27455:27458 ioctl c0306201 0 returned -14 [ 1001.985380] binder: 27432:27435 ioctl c0306201 0 returned -14 [ 1002.001754] binder: 27459:27465 ioctl c0306201 0 returned -14 [ 1002.011523] binder: 27461:27466 ioctl c0306201 0 returned -14 [ 1002.047550] binder: 27468:27470 ioctl c0306201 0 returned -14 [ 1002.073349] binder: 27459:27474 ioctl c0306201 0 returned -14 [ 1002.093196] binder: 27455:27477 ioctl c0306201 0 returned -14 [ 1002.115853] binder: 27461:27479 ioctl c0306201 0 returned -14 [ 1002.122416] binder: 27461:27479 ioctl 8010661b 20000040 returned -22 [ 1002.151818] binder: 27468:27481 ioctl c0306201 0 returned -14 02:06:48 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) [ 1002.778286] binder: 27483:27484 ioctl c0306201 0 returned -14 [ 1002.795423] binder: 27459:27474 ioctl c0306201 0 returned -14 [ 1002.802765] binder: 27459:27474 ioctl c0306201 0 returned -14 [ 1002.919693] binder: 27483:27492 ioctl c0306201 0 returned -14 02:06:49 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) fchmod(r4, 0x3) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 02:06:49 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x17}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}}, 0x8804) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r3 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x2) dup2(r5, r6) ioctl$TIOCMBIC(r6, 0x5417, &(0x7f0000000200)=0x1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:06:49 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$tun(r2, &(0x7f00000001c0)={@void, @val={0x1, 0x3, 0x1ff, 0x40, 0x401}, @ipv4=@tipc={{0x14, 0x4, 0x1, 0x8, 0x72, 0x65, 0x0, 0x5, 0x6, 0x0, @empty, @remote, {[@timestamp_prespec={0x44, 0x30, 0xbb, 0x3, 0x7, [{@multicast1, 0xfff}, {@loopback, 0xcdb}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb8}, {@loopback, 0x2}, {@broadcast, 0x2}, {@remote, 0x8}]}, @timestamp={0x44, 0x8, 0x19, 0x0, 0x6, [0x2]}]}}, @payload_conn={{{0x22, 0x0, 0x1, 0x1, 0x1, 0x6, 0x2, 0x2, 0x2, 0x0, 0x1, 0x2, 0x7, 0x0, 0xb4ec, 0x0, 0x0, 0x4e23, 0x4e22}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}, 0x7c) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r3 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fcntl$setown(r2, 0x8, 0x0) getpeername$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000240)=0x1c) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x0, 0x0) vmsplice(r7, &(0x7f00000007c0)=[{&(0x7f00000002c0)="cc4ca0fd5e73d108c8d78c4bcdae51f35cc4cc9fecf229df6563d7ebe4f7c04c7fb4787fc6e6b907fba0848665297a68cb70986ffc9f336ec0461625434626e1ea64b894b690b211fd37ad938971e13fa7d71280cb61f89f0d6bfeb97ac3f6401ef512430fff41ae18684028310452e6b997c1baf5abbf8e9e1865f7810991147d0cb336c59b4e076a9792200d6ee603017b1bf83345d694684d82792779e3a501427b52720b5c24581e4c61e85cd9ff765710", 0xb3}, {&(0x7f0000000380)="ab5de5e3eea0752fce2d546e090600394bf02eece50b232566c3e4ab184852296292fe8fc120923762a8dc0cbc96d19e0ca57436a67cb21f0a919ecb3d274f6783c018cef31937a872c96137e25be21d2de37e62bb76fbce859a8662b952a44328f3928679b12f0f3e978db836508993b007f98c84e3f5fa8d077a13239bce21ef7bb193d7349ba39c7280204f4fb13d78625fa4fa793b7a7e99c9b6c599856eed813eec839298d18626035e75303cf5a44eb7ee5bee0e0073681ca0f42f6facf038fce7a69bc229782ec756773cd8", 0xcf}, {&(0x7f0000000480)="acaf90d411bd7aea7f76ff1b4aafab53e7244d15ab275801658dffafe96967f55ab0845af162d0f9292b5e1f096c25491c544b9bef65e29c5305c7fbefbc6a5b75acda08fc9c9ee68fdbf6838d52757eebe3666751b4d5d8d99593", 0x5b}, {&(0x7f0000000500)="c42468e9adbd54931177bc444510a40e37b82620f155b1b8e0209f9a21b660b720c419f19dc62660f1916b697a48a2290642cb6ebd5323d5704dee545fea394da41e406ee63420b31fe33abb991d9b87fc2acaf540d87d95e912aa5457d2d1e20e0050916eb25a2c6781c819fa57bc1bbc66f9ef376eea282e4be66ab4240c5776b658ca375041eac5e2ebcffd622265d509b18eda40e5cf4cf31d9520bb1628b3", 0xa1}, {&(0x7f00000005c0)="6e0cc43c91439e60c574db0c2c3da1c2d4d41a389e644f370bb6acfcc1a98a95b7d7878c6700d8780ecb10e20874605969ff1ee8a2eeee3b6e6d1e4b1a3db25d7c7ca0414b9b3315c0bda7ae4a0973dba45b118eb01bf34311bc1fdc5ae0167e0473d638b7d653f48dc7da53362c72ea63d437383912b93897b71c00328fd773", 0x80}, {&(0x7f0000000640)="8ab85778af5b54860b1406a7089113f6f48d45ff75707a81ed19352eb17ae1788a9855f8069db2149bdfa3ae018e786c825cfbeff6526bbba82c70617072f2f7882787dee77ca63a55a227ce44aba55accf5c8b9ab74dd75eafe3bc8b466333c6fc3b4aea0bc5868344a093dd17c67607f81529b212086f6d26dcf953672d03b73d6c7064130efdd05a4657fb0b409af61af1264edaf77b2536f8ce29b3c104f99d1681b14d191249a7eff950e2750a80eb2", 0xb2}, {&(0x7f0000000700)="a84ac1b430bf63bc4778ff9151bf8fe36bde1a0e83162558f83ea6187013f1ab51987b240af6b804afb6198b782f91f35e5c6bca2f41046394af9b2f391d6453a37730424990ddf7455436083162", 0x4e}], 0x7, 0x1) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_BASE(r8, 0x4008af04, &(0x7f00000000c0)=&(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:06:49 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='@\x00\x00\x00'], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@setneightbl={0x1c, 0x43, 0x1, 0x0, 0x0, {0x2}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0) r5 = accept4(r4, 0x0, &(0x7f0000000080), 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="1303000000efffefff00070000000c0002"], 0x20}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r5, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4f8705bfadcb10d0}, 0xc, &(0x7f0000000100)={&(0x7f00000007c0)={0x2cc, r7, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x100, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x350}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x35c63ada}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_MEDIA={0xbc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x351f6b05}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f8d}]}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x240}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5d}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2ae9}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "5376328452df6f96af567322c6aa45ed7befbcb457e30c3e2e5d"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x148c}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3d71a0a5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000001}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x8e64f3bcf83667dc}, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:49 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x2) dup2(r4, r5) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x1000, 0x3f}, {0x803d, 0x401}, {0x472, 0x925}, {0x6, 0x80}, {0x100, 0x2}, {0xff, 0x2}]}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) [ 1004.153619] binder: 27497:27501 ioctl c0306201 0 returned -14 [ 1004.165268] binder: 27495:27500 ioctl c0306201 0 returned -14 [ 1004.168848] binder: 27499:27503 ioctl c0306201 0 returned -14 [ 1004.187138] binder: 27496:27505 unknown command 64 [ 1004.202058] binder: 27496:27505 ioctl c0306201 20000200 returned -22 [ 1004.222695] binder: 27498:27507 ioctl c0306201 0 returned -14 [ 1004.223740] binder: 27497:27508 ioctl c0306201 0 returned -14 [ 1004.268203] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1004.294321] binder: 27498:27512 ioctl c0306201 0 returned -14 [ 1004.300388] binder: 27499:27513 ioctl c0306201 0 returned -14 [ 1004.306587] binder: 27495:27515 ioctl c0306201 0 returned -14 02:06:50 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) [ 1004.951849] binder: 27497:27508 ioctl c0306201 0 returned -14 [ 1004.959098] binder: 27498:27502 ioctl c0306201 0 returned -14 [ 1004.964901] binder: 27498:27516 ioctl c0306201 0 returned -14 02:06:50 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f00000001c0)=ANY=[@ANYBLOB="02009400db1d20f6f8fecdf76b05189519cb954d6271ea8c9c1954d8bf488c5bbfe30c7df9193f3507f779f260539053c623abd8a9c621ff9edd5d5b19bc186b0bd1064c5e603233f417067c2ccaaa86088909adbdb2080e8af5a50c528a7723069c1a7f63bb0e343fbb0ef2fd37c5d60ef0652486811c5e1402d1eb06f4f6ee620e3517e2782b5f456c936eba697c1a0a26397de5b7d2cfcacd5e683a6df19e395cb0cab096bde24e3dfd2c474b846f54af9e8107cdfa5c979364bd7b375c0e73b71f2ca5a862abb98cd9caeeb8f0c7679ca90b592d73bad6bc3b1b3c022f"]) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:06:50 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = dup3(0xffffffffffffffff, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x6c, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000040)={r6, 0x9, 0xfffd}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={r6, 0x80, 0x0, 0x2, 0xb3b}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000040)={r6, 0xfffc}, 0x8) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 02:06:50 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="05630440cbcfeab19f6ce9e3c1658a40512f3696bd4dbdab5d94e8a92e4b90cac9f502d61ff2bc8f1e4c27f9a9696a0b84e72cf301651c25fd069291864796b558bb5c5799daf4182bda049b6b890552a3ecf6ffc7c94ed3bda87a56a906c2ea4cd2707f23db5a4919360bd7186a82811658920d6e884b417b74eacf12a7ceb7e97ffd35d788df5fe1d7b1b982e037ab8bc7ce3f8e10510000000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1005.003308] binder: 27497:27508 ioctl c0306201 0 returned -14 [ 1005.035345] binder: 27520:27521 ioctl c0306201 0 returned -14 02:06:50 executing program 0: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000100), 0xffffffffffffffa9}], 0x1, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000080)={0x0, 0x1a00c2db}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x3) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f00000000c0)=0x7, 0x4) write(r2, &(0x7f0000000300)="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", 0x139) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000040)=0x8000000000000070) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1005.098916] binder: 27522:27526 ioctl c0306201 0 returned -14 [ 1005.109911] binder: 27520:27529 ioctl c0306201 0 returned -14 [ 1005.179559] binder: 27520:27538 ioctl c0046686 200001c0 returned -22 [ 1005.237505] binder: 27519:27543 ioctl c0306201 0 returned -14 [ 1005.272656] binder: 27522:27544 ioctl c0306201 0 returned -14 [ 1005.829849] binder: 27520:27538 ioctl c0306201 0 returned -14 02:06:51 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="810450007fa53cb6c5"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:51 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) ptrace$setregs(0xf, r2, 0x0, &(0x7f0000000040)="d3b32c4d70d38b90fa51fbe6fd1a5a6079cac817475fa12c5a2421a30814f0f8d20a39a7892a050dce1b54c505adf86f4d5ceae2e816da0b1d0068853e1d120783ae149214efbcf2af261ec7158b30069303b4838e653bbd5b233511300dc3d22e55740815f46f039eca51991f4f5e89343adadaa3f89a6149df78366ac2aadd47502ee2fabfe9503bf517bfebc341efb8b46cec3427c31a744d0e83c83d6547a945195ee5fac6e7f0642a40568ba94f222750f763525985bfb4a441d24ec91fa8fb2391756ed05b4c37518b9069a020b593d2ff60347d6ed034f32039257ab6") r3 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) 02:06:51 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000004300000200000005000200000000002d6392d3daa7497e8cc588e41566adec71dfa9318697fdd4d0a3079e6afd9f31c260367de0f9fbf39506a945aabc430a054c77f9af18d5925add7d564b40829050e8bb119b0a55286c291654c3e1a4b86288ff3ea083114a8a6e0570c198ae670e7889f90592ead4a87e6066297fc7759be99fefdbd6617b87ed64833a1666ef0e58bd8dc92fc6307a79412ae342c61c01c5e6e5d5c22140d4d5e0e90b93fc69607edbf67bfac90497a2bf5811aba7bc19d7b41f274484daef0d4b8959886d1e507f6b3c00000000000091951bce75f64a5150f160af43ad712bb16b34720f2164130f45e13056ad44130cf264f7b15a3bad3ffae72af4de33a4137f66691f054f533a1e95cd7ca0962b0a032627d27cfb39d9ca09c88b20cd56e021b3e1cf797fcbdcaeee330fa9602b3d1f3ba15f6f7c24c073df2f89780495748220ac5cbef2e8b43c51a31fbe9b69abe1c68cd92fa58f0ab79d1dad0b439a601bf6bd6db08ce9e926d84a9c4733a60a058a8b843f020571865356fec359f304ca79beec2cdae816fb28bdfe48c91c469f76de4f229e6c15c3341520da7593f01487fd51286b522689833313edcdbac5fbbfbc6fa2dd2099e33d85c97e71c25591542e01"], 0x1c}}, 0x0) getsockopt$bt_hci(r5, 0x0, 0x1, &(0x7f0000000040)=""/58, &(0x7f0000000080)=0x3a) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) [ 1005.892442] binder: 27520:27521 ioctl c0046686 200001c0 returned -22 [ 1005.945046] binder: 27546:27547 ioctl c0306201 0 returned -14 02:06:51 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040)=0xb581, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:06:51 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r7 = dup2(r6, r5) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @private0}, {0xa, 0x0, 0x0, @dev}, r8}}, 0x48) write$RDMA_USER_CM_CMD_NOTIFY(r4, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {r8, 0x4}}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r9, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) sendmsg$nl_netfilter(r7, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="34010000080401022abd7000fcdbdf25030000018100120094e66364d7f0fdc6e75c83da0c04c962ba0914125de29020080fc54e800d0f69cff7418825ede0b7f01ba67e9de312cb3bef5ca9f33fa06df2e8abd583e6072420341f7305a380e0fec904afcc80e6e6bad851c9e8c78edd610ac1c758d75f4afe9ba255e7e8a17abb55cd162fa048ee2a0ccb756bf94682537751fd4b0000009400578008004900", @ANYRES32, @ANYBLOB="4d453cce2b1b80e71d2b04e062ca03ca37df56c94949d4f7f31606a043a39a9814811f5566a91fd5de1a7323731c7c604a09d69a6ad5fda862d94e6fc87d9e276233b1f72f7666fbb80f8a71af98ab952de74b3d63ddb197732e7bd260c96f874a8201c28dad2e4d91bf967614005c0000000000000000000000ffffe000000108005a000700000008002d00", @ANYRES32=0x0, @ANYBLOB='\x00@'], 0x134}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r10, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_PCM_IOCTL_DELAY(r11, 0x80084121, &(0x7f0000000040)) [ 1005.988856] binder: 27548:27550 ioctl c0306201 0 returned -14 [ 1006.015724] binder: 27549:27551 unknown command 5244033 [ 1006.022207] binder: 27553:27555 ioctl c0306201 0 returned -14 02:06:51 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000100)={0x9f0000, 0x80000001, 0x6, r1, 0x0, &(0x7f00000000c0)={0x9909d1, 0x25bf, [], @ptr=0x100000000}}) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x18, r4, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4008810) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x10001}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x20000000) clone(0x6200e53e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = getpid() r6 = gettid() tkill(r6, 0x1000000000016) ptrace(0x10, r5) ptrace$peeksig(0x2, r5, 0x0, 0x0) [ 1006.039122] binder: 27549:27551 ioctl c0306201 20000200 returned -22 [ 1006.074767] binder: 27557:27562 ioctl c0306201 0 returned -14 [ 1006.090840] binder: 27553:27565 ioctl c0306201 0 returned -14 [ 1006.109374] binder: 27548:27567 ioctl c0306201 0 returned -14 [ 1006.130656] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27569 comm=syz-executor.3 [ 1006.155213] binder: 27557:27562 ioctl c0306201 0 returned -14 [ 1006.405410] IPVS: ftp: loaded support on port[0] = 21 02:06:52 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 02:06:52 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="04840440"], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x1c, 0x0, &(0x7f0000000080)=[@acquire_done, @increfs={0x40046304, 0x3}], 0xfd, 0x0, &(0x7f00000002c0)="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"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:52 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) signalfd4(r2, &(0x7f0000000040)={[0x8b]}, 0x8, 0x80000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r3 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) pipe(&(0x7f0000000180)) r5 = accept4$x25(r4, &(0x7f0000000080)={0x9, @remote}, &(0x7f00000000c0)=0x12, 0x800) write(r5, &(0x7f0000000540)="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", 0x208) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) [ 1006.776529] binder: 27579:27581 ioctl c0306201 0 returned -14 [ 1006.821066] binder: 27553:27565 ioctl c0306201 0 returned -14 02:06:52 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000), 0x0, 0xd) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) openat(r4, &(0x7f0000000040)='./file0\x00', 0x2000, 0x42) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1006.863443] binder: 27557:27571 ioctl c0306201 0 returned -14 [ 1006.880719] binder: 27585:27590 ioctl c0306201 0 returned -14 [ 1006.892919] binder: 27557:27562 ioctl c0306201 0 returned -14 [ 1006.901868] binder: 27579:27596 ioctl c0306201 0 returned -14 [ 1006.912544] binder: 27592:27597 ioctl c0306201 0 returned -14 02:06:52 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = dup3(0xffffffffffffffff, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x6c, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000040)={r7, 0x9, 0xfffd}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={r7, 0x80, 0x0, 0x2, 0xb3b}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r7, 0x7}, &(0x7f0000000080)=0x8) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1006.939996] binder: 27585:27601 ioctl c0306201 0 returned -14 [ 1006.946826] binder: 27592:27597 ioctl c0306201 0 returned -14 [ 1006.965454] binder: 27602:27603 ioctl c0306201 0 returned -14 [ 1006.986474] binder: 27583:27604 unknown command 1074037764 [ 1006.992314] binder: 27583:27604 ioctl c0306201 20000280 returned -22 [ 1007.018371] binder: 27602:27606 ioctl c0306201 0 returned -14 02:06:53 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl(r5, 0x9, &(0x7f00000000c0)="751ac0195a5f22fd2e33d212f227c256c6f422366d043b30b825ce1360f2e2d2c351e716f7d77b3ee9c1fc21dd5cc6650abd75bbe2f5ceae8e4e51bc061b09a2b51522bed5ee02d5f23b0849fde6703f1dad6541c75acf29d9") vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$EVIOCGBITSW(r4, 0x80404525, &(0x7f0000000040)=""/112) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 02:06:53 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x100, 0x0) ioctl$BLKROTATIONAL(r4, 0x127e, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1007.605026] binder: 27629:27630 ioctl c0306201 0 returned -14 02:06:53 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = dup3(0xffffffffffffffff, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x6c, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000040)={r4, 0x9, 0xfffd}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={r4, 0x80, 0x0, 0x2, 0xb3b}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={r4, 0xff, 0x7, [0x1000, 0x7, 0x0, 0x4b6, 0x7f, 0x31, 0x4]}, &(0x7f0000000080)=0x16) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r5 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) 02:06:53 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040)) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1007.748216] binder: 27642:27643 ioctl c0306201 0 returned -14 [ 1007.756332] binder: 27629:27646 ioctl c0306201 0 returned -14 [ 1007.772858] binder: 27602:27606 ioctl c0306201 0 returned -14 [ 1007.778953] binder: 27639:27647 ioctl c0306201 0 returned -14 02:06:53 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) setsockopt$ax25_int(r5, 0x101, 0x5, &(0x7f0000000040), 0x4) [ 1007.864093] binder: 27642:27651 ioctl c0306201 0 returned -14 [ 1007.894063] binder: 27639:27652 ioctl c0306201 0 returned -14 [ 1007.929489] binder: 27653:27654 ioctl c0306201 0 returned -14 [ 1007.994020] binder: 27653:27656 ioctl c0306201 0 returned -14 02:06:54 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x28000000000) r3 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) [ 1008.472252] binder: 27659:27661 ioctl c0306201 0 returned -14 [ 1008.641281] binder: 27659:27670 ioctl c0306201 0 returned -14 02:06:54 executing program 3: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() tkill(r1, 0x1000000000016) ptrace(0x10, r0) ptrace$peeksig(0x2, r0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0xa540, 0xc) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000040)) 02:06:54 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x2) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:54 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000040)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xa1) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 02:06:54 executing program 5: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000000000000bfa30000000000004503000000fefff67a0af0ffe8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000100b7050000220000006a0a00fe00000000850000000b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3487bb07eb78c27b090941bd3108d31287801000000000000000012cf6956e09d1938013c217e0f6ab2366e8a87554c101f03733d40c62753ecd1f46f09beb1bbfad9bae24b4e8a96ec60f2af47f99376e43836ba33fd5a447f936e000755861103bb45e5d53c9fe36bbd35e53c6376c0c2b1daa58a9c34444bb7e9673476d017fc94c5857ead931db6cd370e93b6d5a74cc106c50896249ed7420f8680a730d876c36a1f3f1b8eb12d9390a49f2d99b5df916269392e0d0000556ec919d0b1681369d448c6f8c9969baa463b36d25ac1628ef858a5cc77c14c8df67f20fd224829af6de3d5ef71857496714db96c6db18ea5189cfbddd6e4de3617adabc339334b97b11911905d6692a33f1f370c05e1f134e5f90a326b0cb5268e40f5ba9b5360a516c3f87f05e5d1af657c445131edb61670ff2c62117e96eba22382758239e69127d5656e63bf02af42a5ac113879bfc27d7e6ba1f41301065efb1685e65f30df092251d556a89c2886ea64bc457280330dc9cdb6db023433e9ba97796a7823d241795ab1889fe937312fc5e921e8758153be202f000055a4921970e28e6238580101b710cf8b82bcab02c12fe01bd8df4e97c67e8a3693b23668c55eed4e24eafa16a4f43b6729990a9321531e5eb006b547c13cdfa2fa211d07a29377ea1c5aa7f5d58331ad45fc89ac44c9d2d6b3ac03ce76fc9d341f076264f8cf493901ad919329a295f63be4e91417b9cd09cf47272d46666571f24d71fcff2a9e869c2144f5775c37084acc57b5793f25f853f7a98965e5bd9ff5253f787eb321572355c706d6d2e27c475fd077876a4405b72b00000000000000b79d8029af8de217c23f79e68fe48420cbb226a752b817fc17efaa1268c6"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x7, 0x75, 0x0, &(0x7f0000000280)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x5c, 0x0, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x40) r3 = dup2(r2, r2) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x20044884) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f00000001c0)={0x2, 0x103, 0x5, {0x7, 0x80000001, 0x0, 0x4}}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:06:54 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0xdddb, 0x3, &(0x7f00000002c0)=[{&(0x7f00000001c0)="3e72316234a37a66d41d80badda84830142532f92b2f034a4b8cbc22fdc79286a4e74fb1dcd464268fab4f8b621c757bfab7536367e93fdc4ed89659785ce084281867ab6afa2227c6cad245dd443547eb1138800d45287d640f66e727d08856441d1cf30043c707f14ded3a941a439cdb7f92aafe3ff6e73ce9e923abbf55f3f264d958d5de3b673feb2dc0e975463baa06cd83d603c85b92acadb79884be101b9d45901b60bd7e55bb62295930496fa1603d29ab7705cad65979167c0620c17bd9fa3783b2a9ffbd", 0xc9, 0xc20}, {&(0x7f00000000c0)="7c0ac690572c5b137d", 0x9, 0x8}, {&(0x7f00000007c0)="3e4d6e537d2d93a82af6282c410249c6379e1fdd3b8bedddf3758f9421c41e121ca3974604c0203e273681f8b6dfb477ab0e73ead12299fb635cb6adb84a7b4fe26cc4557e87835d6193fcb3ece60c6e6bf0b5d20310048ecaed12d61ebd2cc91c8887967c851eb0f12c14f68bccf12b07d40c78610d8d3245a224e69edd92af6ad863734cf8b370326db274e9ee85e2a84ce6a1d2b10c97969fbbf7bf154cb8d1d7a15d8df5609c7a41e0ba162807298f5654b4d45cd605c09dcdf6fd494232111a8ff0b405009d57917654bbe7cb74f517c97a6f481f33fca98a2d8cd62ef1b68002188131d282622c8d96dff0381b77d7d414329915d40209a52e9afe02fa79692d0ae4527631d66ea04ea2d36cdc5ff5f18c2b34da4eb8580e27e80099d768cf0d0809e48582196763686988d8b9e601d8ce97799f3eb557c44896b2ddc35301e77b09318c2086c529d4944dfc5acbd8f08ad77f755390f7a7f61231fd16f545da6e26cc49cef64f3b258c081efebe543c1805d9157c4f96a5de35fefe5360aa4e734d7e8d4710eeeb54fac4108bda9adbadbfd9b5d56dfa003918d03e36bf7cb00d307e0097f9b31537f17769b01fbb177dac668cb915d72164e22f90b39489787b7b9f2f1be205d315e10e81c24056430c54c36ce8c52719cc98d804be7538dfd06bbd355ac816ed26080c68d8f0f676e9556b1bf62d2182818943c990f055133b531dc6d5be784fe1d8a1cb86d17c31899d90ff2ec95a2db06a4019fdf7bfb36fe2e69604a7e8a17dc8493dc382e0d4d8df625e9cfe1f8725e44383103d98aad78ba4fd91898a9b342977bb5acd1a923fa764440970096610d111e23ba83a2b6eb86b28a049b824e9f95bf835b4142315f913a93d4385e45deaaa1b3ba2569b41d826173cb3d08f5cbee975aa61d3952095e77af1a4c69ca39f7514f2f79ef05a35423617686aadec20243faa27744fb31d350dca840c8933f41e408639a7519303ca167ee629cdad31d35a9787a002da8908d175be07eb71f374bdec9ba3ca900507339f56789b03bb1ebbad0a5bd9b1827754cbfa830eac3c55c43ab0915304dfb50795380edb98aa906d58e6440ae8982a2387738b6e4c2a1ad4dca1616ce68f9e2e56bf40aee89835b40e15c13a22b7021a92ad31162d53f73bf44385f85609b1e5c1c98cb566151c5efae811acdd70a178009a2eb836322c7235c3fb2576911d951b78105808e33eee413099c656a292b9e0f857e00de993336104c21d2cfa7f96c3a5a6ee4ee6c263013d7a2432bb7865cd937819250e9bacc9ac494e9e51220701b6cd9b30f09cd0dfcae828c7d9aa95c70f1060c01d1d3b34f001e2757f6703031ac031163c131dffda75bf576d184766148c0702ab2f27bb41d61350581650e163aa5ce53603ff988777518969badca19a56b1b4d3fa547a2aba680a30830f4e7f0fbb0023a605e4f5c80eff6a6b6f1c6d5a72bec73a4301e15fbf8587c745068c46a1505bacdd1433e46ec0aafb86f37ed90d47c09df42947f491a6dfed5de2a99b581e39bcd02beaba6e4dc124a813e24b0e3faadead4f50fb4d00fa37773678ea1090d8feb244b1f585c206914b5f75a5c1c348fc3ce601e309a93d389761c999d5a8562756b641d89afc8e591c95e22dccd39169d3a199e752b0d6b809ee582fac439dcaf67ae43e89f602962c780b1ddd6c42d3d77919f656e032024ade7f33f95a1c1652ef491317dc8929a44689ff1e1bc0574ec05575b7977d8554fa37a3e8c5ec21da898ed6f7a937d307f5a8ff4dfb5b4af6f73677d186cba0d2450b4842d2d913a47bef7a6e853f3d4e935a0843b01e642c3e8b475c12ca80e955463a07a39222d1cba2e439498e583d040d77b894c4189979b8fe7474c8dd9adc6c1adcc8657c4afe8521a6141d34b85766b7479474fef780bc3ebe4d03c8bae021bee3b8cf173694945ae3e52a1dbeebc2e7373aabacdb53a61ddc146034e70b9f248d59f8fd0b51a73b06c1ab57ca4493dfc7299f911c9a3b3a2ea4ae741ae5219894e1eff064bbb246c4c3524fb8a41d1066df6f10ffba7609b41a1398b1a4886325c1aa30150713df4df873ece243365f41e3ed4f7756b2663f125c1fec4aed784d04de24588b3b7aa7720fe253e87250c9f66199ea86d2dd7449cb3ed4bec244303e972c29c0df5f3fab316167e1556c0860ef1447947dd2efedec434168548b1f7fc33b6307b44b9ec92a11e6fee24e3db2d3b9dd12a2b534925fdf3aa1af695def97c4b120f00988de2fa57f35331eceb0c2baf774b9ed2cd6972c82376721b76a3a79e3ec49cb3e29b972e5273a937daaf2131918f454df6aad70244a32633792e789c10e3815de8610e72866e4ac6c4ef6ec27524638e1e6ae083a74dfebfe01e56fbd0754aa88efc85687fd3030d73ec09d40b4b70047bffaca85318f2da13fdd2254b0b0fbcbbbac5ef7274949266ebde61716eb1c898a300a4dacdc0c08980b4406b92f4d63ce6b78b4ce77b94bdf6eb2c5f2738d2b7e2b19d1ab181e9466c15814cfc45cd377e0f8b6dfdca0b072116ea543b6353f72ae7c40e7154fc62476420491a895ae78179189ca6872a7dfd611fbb97c6be21c4e7f0c1da1ca142ad4ad426ce99a5f6c6567d4e3a0fc64b93a8dbbe798c290537e01ea8a7d75f0a7c36736e6ef28736c14e5c0dc40abd2d5ce67b86e33a5dd09a9a3c72c6241370fcdc3dfbbfd2e9d6dc3eb7531c2ebf7fcab8002790dac89a664abc39480c175d2ca41ebac73ed4dff1a6760a12b27807200ddf0794613f88bb88337a9bb14e9a755f731d40e9ae672ddb9b54718c6684debb876fbce8c0f2cf0946a964cd6a31f6bc838be52f2de34e2fb4fe08ba435a82a28de42f35ef11243865ed6670c9b3acfd26d783838517dcde4beeebc7ffe0477c0128ad87976e70f929c3f4301615ba32776b923032db35f91bf76465633b474ee99b6f8e7a70b9803db7742b57786042f9d363424def2ffa2687e6e6ac175c3be33154a5ee32baa3a269628d13afce5634e9a46d76ec1b4e6e240f685d6e0bc0bfbb4b8de155faf554e14685f2a9511326e6cbad26f081b90a1a97a9ff40ac8aad6817132c0fd4dfe8c259b20da8fc05ca0f383958bb84ce3e0f7b24f71378cc1b6a59a9fc3e42c9d9fc8c2e292baebe3c93a45843cb1fd9eaa713c39bfdbbb6f102528ee0594e30104e7aa50584fd6adc7ae10ac13201319fa4e43b8249a0b921b7ef734d88c3d1c6f2fcb89a51b17e72f33ec7b4eb968ca838f063f4a5cd71086257980f84b4752154d1b5ebedb26cb71c285a434234607bae589696f1f42ba3d61d5ac8e5ebdac3d9c834fee3ef87ba7c9035cb613844cd253318d95e539ca2110c45fa2090cd04d809d02d182ced88ef8711ed5c32361190237d8444c6a8ba705d0864a1c3df5cdf890bdaa4d22c09da34967572df1381fb687103f01a70cecead89deebe8727ad42748ecac9b80b16bf1cd09e266521e22d2100d9141d7c4438b613e909ba376d5d6ca3f6359ec3a8a5cd0d0bd8c9ed7adf7395b86122a452fddf228de655c5ca0cb374488c9f9a2a0d53c55cc87f5933c6d3a24d03cfd926d45b995377cbd7ad7a0fb88aefdcf73f8e6b4434f3f39ebd9b564bfca5f808607547e506073c9f733fa3efe6a05309e495bf5ff3d504fd9a2e1383abaa949dc63f4f95d024b7b09e06bc2d89dbe77a799054b3e1705a0d8dc840b8f71866d6bd9a27f46ef999e222395fccc865b8a7435a4915dd6fedcabe0aff9b064843e0626671e805e556bfa15c049834e873e044ca09fd3aa9adfc6c144ec3711f3bbc77958bf073ef30ccb0626cff9744314443200fb78fed60efa61cad35048e88ec20611efffc49608cb80afe5cfcbf786b168a1024d49eef9d7764e34283b2409a776184e36cba2d1702e33f9e2ac99390100cd04f2aa876f66f45aca87f1136761c9b3f14c2a9c70b7ecee6ad310e5f70cda969e6529f5bacce60c981f017b0929cd92e2f2860909366807de906e889c243a5fa839603a5e711b07862cba10f642e0c83c4f3d6d708e5457e6bd282575c4bd6eb62b5e43db1fee1bfe0c8946e03f870c52c401e8dca3d5852e6d30fff9609aa1676aed6c41c712979aa29a0753fccbddb416124c20318da68bd772d14b4a3e80ba60b4bed10a52bc674b776a3b1421a76975cf755ea99ef633d02699ae3867af14203f73c0220e1f001e4d00f5255087fb1c09cbdae70431f7fb8d26616e5927ff4c31fab7a8eefe342a9664b1f70e6115a411293bd9507228e90a673dd3ec0c8dc105df34dce89f37fa0d1d6807be9a9be0db2d02439e3d37671381c4d36386cde3a27caa938a0cfc0c24e8aa3a983bd52f00dd6c90a3b03c0b68fda593869e63907f24d0b72da15364a298cdbc022c88869ecc970f3c425c0ef6a3c397181d2e08d72300bcfb8e8cb6fa25c7e30a7703fda81bbeb2c0e9a4acfa48cae9164b4f92034bc4a6593a44e8ccc17600b508f1c7deb76385b15185f4a7da959d48b1cce1766225d312b5d14680ccadbf3f27ddbcbc2fc8b1661584f509ff11c4296ce5707b605e2b3d9a75a566940587ead6f5f3c9cd95f3c7faeb9669d7753ad9f1e5d21ae677cb870df26c8fbb3c87c577a84d919df4cd69387172b1d4790ea7ae44b03ee0effd1e4cb93aecb62ea73c9b13ccc402aa4b03a888bc4d1161aa08aa039ac6da27640e719d804f9243dae543768279bb382b336fdcb7f3bbaa02eb9a891f1e0aa4e2ded7e8773f72951babc4c53f4350a4feeb27940ffdeba9de79072f331e0e238b6a06da4d226e158d5b1969589547daedab66619dace1229289a8ec3de352e894cf6908a6280362887bf93dd59b1c723cbe37cab36158e5b0606d4262023d288e8d478e4015ae1d866585010a5ef6e07a2b0973096bf6816b2df5533c00974fb6dd64220e4bea2e98c07c30e769480423b05c07b6956ff490394241e3600b94b88b52ad75adcdc431088e07f82e3b27f56212e5753ddb056b087fd86d0c72984779d073f8ecece8aab6011404359d9a7ee3422cdfd48afe965650bb43308434a85a13c6d5bd4246c22203c61d5691c13ba6066d2aa6b0f09cf2d48fb88d21542729679a632cb5b2b874013e9a3849d40554f7c0e2de7d4671283985cb0e882d8d9e2321912d55e3686904f7fa501041c1b8917dedcee7317904190d0bd54feb64ea97628686472bbade5ed7ed0b5fe38c550b7471a3cd96f916ef99bcfa7bc3afde119c7d5c2f04f7dce8e3e12e994c64d0d94674f3d94535a3838de82d5fa3ebf8a7b06d3f23d99be221e2fb57bf4a00a072012c4706d344e4100e44233dfe6d6e0544c4781b70a9a92b1a10aad381560a11575540335b0cf2c56f8e5a440e3aab43596631eb8a4492e63c849cd5240e6cfec58df7feb102079b819f7493c8c81968e78363da12d97d5c448510c677fca335aa20ad327d20b407d5d103ce6d48399862fce5d338c604ab22214671eecd6f9ada5c37a5b45a56c8c17d8b2836e2421e32ada90d14831c3bf649ddb8c3313626df7eb29efffc127c9fbed4777450335611cd8012c226bc8aab76c71d7b1ec4c75f6632305a1755677de5f7a032c2643d72a3e438e932bdec1eed0daf7abed762118a58f60d7dff0c1bf1ef5224a67bab2668d30966a05f0cec2330083d4f425a455d5e51b65344ce6fd65e30541979a928292fb98f4f4e21e5a950a56abc9538c8b61d6dcbd116fb9d2c4dd3521e9d88517cf35db9c0920", 0x1000, 0x101}], 0x10019, &(0x7f0000000340)={[{@mtpt='mtpt'}, {@noalign='noalign'}, {@discard='discard'}, {@logdev={'logdev', 0x3d, './file0'}}, {@uquota='uquota'}], [{@fsname={'fsname', 0x3d, '/dev/binder#\x00'}}, {@euid_gt={'euid>', r5}}]}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1009.123065] binder: 27671:27676 ioctl c0306201 0 returned -14 [ 1009.130478] binder: 27673:27677 ioctl c0306201 0 returned -14 [ 1009.135422] binder: 27672:27678 ioctl c0306201 0 returned -14 [ 1009.195890] binder_alloc: 27674: binder_alloc_buf, no vma [ 1009.201289] binder: 27671:27686 ioctl c0306201 0 returned -14 [ 1009.201680] binder: 27673:27687 ioctl c0306201 0 returned -14 02:06:55 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) fsetxattr$trusted_overlay_opaque(r3, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x1) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x2) dup2(r5, r6) ioctl$TIOCL_SCROLLCONSOLE(r6, 0x541c, &(0x7f0000000040)={0xd, 0x6}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) r9 = open(&(0x7f0000000280)='./file0\x00', 0xc2100, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r9, 0x7, 0x75, 0x0, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x5c, 0x0, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x40) fsetxattr$trusted_overlay_upper(r8, &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f00000001c0)={0x0, 0xfb, 0x3f, 0x2, 0x0, "6ed33146bc043524884645980a6bca4e", "67c406695f93355580129b29c337afc2024433888c07bc2c3069f1889d2535110dd6cff03ddd131f5c70"}, 0x3f, 0x3) [ 1009.297696] binder: 27691:27694 ioctl c0306201 0 returned -14 [ 1009.398255] binder: 27691:27696 ioctl c0306201 0 returned -14 02:06:55 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) semget(0x1, 0x2, 0x305) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 02:06:55 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="10fe0440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="12057500"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) [ 1009.915827] XFS (loop0): mtpt option not allowed on this system 02:06:55 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$uinput_user_dev(r1, &(0x7f00000001c0)={'syz1\x00', {0x5, 0x4, 0x8, 0x80}, 0x16, [0x10000, 0x1, 0xa5e, 0x3, 0x0, 0x80000000, 0xe, 0x80000001, 0x7, 0x4, 0x8, 0x1f, 0xfffffff7, 0x1d2, 0x7fffffff, 0x4, 0x1000, 0x4, 0x9, 0x3, 0x5, 0x4, 0x4, 0x100, 0x3ff, 0x8, 0x0, 0x8001, 0x9, 0x1, 0x7, 0x4, 0x1, 0x7, 0x4, 0x1, 0x40, 0x3f, 0x9, 0x7, 0x154, 0x8, 0x260, 0x70f4, 0x8, 0x0, 0x473f, 0x1f, 0xffffffff, 0x8, 0x3, 0x2, 0x4, 0x3, 0x5, 0xde86, 0xffffffff, 0x9, 0x6, 0x1, 0xaa5, 0x1, 0x3, 0x8], [0x8, 0x2, 0x7, 0x3, 0x6417, 0x7, 0x42, 0x8, 0x9, 0x9, 0x3, 0x3, 0x401, 0x0, 0xbe6, 0x5, 0xffffffff, 0x3, 0x0, 0x5, 0x8001, 0x8, 0x1, 0x3, 0x20000000, 0x7f, 0x7, 0x3f, 0x7, 0x10001, 0x58, 0xff, 0x7ff, 0x3e51, 0xfb, 0x12, 0xfffffffd, 0xb8d1, 0x9, 0x7fffffff, 0x10001, 0x0, 0x3, 0x9, 0x7ff, 0x3, 0x3, 0x0, 0x7ff, 0xff, 0x10000, 0x100, 0xff, 0x6, 0x3, 0xfffffc00, 0x1, 0xff, 0x2, 0x0, 0x7fff, 0x8, 0x401], [0x8, 0x10001, 0x0, 0x5, 0x16cf, 0x4, 0x400, 0x8, 0x4, 0x9, 0x0, 0x98d, 0x1, 0x7, 0x1, 0x3, 0x1, 0x2, 0x80000001, 0xf65a, 0x81, 0x7ff, 0x5505faf8, 0x0, 0x8, 0x3, 0x3f, 0x80000001, 0x6, 0x302, 0x7f000000, 0x9, 0x3f, 0x6, 0xad, 0xd48, 0x3629, 0x7f, 0x2, 0x5, 0x558, 0x40, 0x0, 0xffff7fff, 0x2, 0x7, 0xba, 0x8, 0x5, 0x80000001, 0x0, 0x7, 0x24, 0x4, 0x1, 0x7, 0x7fffffff, 0x5, 0x5, 0x2, 0x0, 0x0, 0xfffffffd, 0xfffffc06], [0xb62, 0x3f, 0x1, 0x2, 0xff, 0x100, 0x1, 0x82b2, 0x690f, 0x4, 0x0, 0x8000, 0x7094, 0x3, 0x9, 0x4, 0x3, 0x1eb, 0x6, 0x1, 0x80000000, 0xa82, 0xffffff7f, 0xfffffe01, 0x3, 0x2, 0xfffffffc, 0x2, 0x6, 0x1, 0x20, 0x88, 0x4, 0x3, 0x5, 0x2, 0x10000, 0x101, 0x1000, 0xd0, 0x80000000, 0xfffffffc, 0xfff, 0x5, 0x4, 0x9b, 0xfffffffc, 0x8c, 0x7, 0x1, 0x0, 0xffffffff, 0x400, 0xffffffff, 0x1, 0x7, 0x9, 0x6682, 0x7, 0x7, 0xff7, 0x4, 0x8, 0x9]}, 0x45c) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = dup2(r2, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$VIDIOC_LOG_STATUS(r5, 0x5646, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:06:55 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x8, [@ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @union={0xe, 0x2, 0x0, 0x5, 0x0, 0xfffffb74, [{0x5, 0x5, 0x3}, {0x6, 0x5, 0x7}]}]}, {0x0, [0x30, 0x0, 0x30, 0x2e, 0x0, 0x2e]}}, &(0x7f00000001c0)=""/144, 0x50, 0x90}, 0x20) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = dup2(r0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1009.968865] binder: 27702:27703 unknown command 1074069008 [ 1009.999732] binder: 27702:27703 ioctl c0306201 20000200 returned -22 [ 1010.018664] binder: 27704:27706 ioctl c0306201 0 returned -14 [ 1010.074126] binder: 27702:27710 unknown command 7669010 [ 1010.084203] binder: 27702:27710 ioctl c0306201 20000280 returned -22 [ 1010.145230] binder: 27704:27723 ioctl c0306201 0 returned -14 02:06:56 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x22280, 0x0) setsockopt$inet6_dccp_buf(r4, 0x21, 0xf, &(0x7f00000000c0)="4a75ff6771b59bf090ebfee850beaeba0532b80c84d2b23b062db2fe040124ef77f915a3c6b84990e4cf12924a96c816fb6324323c658faa3ea15ba2bc82", 0x3e) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:56 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = accept4$inet(r4, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f0000000080)=0x10, 0x80000) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000140)={0x9a0000, 0x4, 0x961, r6, 0x0, &(0x7f0000000100)={0xa2092a, 0x7fff, [], @p_u16=&(0x7f00000000c0)=0x7f}}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) [ 1010.876918] binder: 27729:27732 ioctl c0306201 0 returned -14 [ 1011.009042] binder: 27729:27739 ioctl c0306201 0 returned -14 02:06:57 executing program 3: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() tkill(r1, 0x1000000000016) ptrace(0x10, r0) ptrace$peeksig(0x2, r0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r2, 0x8818564c, &(0x7f0000000000)) 02:06:57 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) open(0x0, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x4) write$P9_RREADLINK(r3, &(0x7f0000000280)=ANY=[], 0x44) sendfile(r3, r3, &(0x7f0000000140), 0x7fff) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, 0x0) fanotify_init(0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r4, r4, 0x0, 0x7fff) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000080)="e8f82c3fef55757325f33a2a7a326ec14a3075cf07000000c315ccee32954d5ac9ad606e", 0x24}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = getpid() sched_setattr(r7, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) 02:06:57 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="056304404e90da55595794d094b27c68c67f8badece958"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$PPPIOCGFLAGS1(r4, 0x8004745a, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:57 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = dup2(r2, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x9, 0x8, 0x20, 0x5, 0x3be}) write(r6, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=""/249) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000040)={0x0, 0x1}) 02:06:57 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000040)={{0x1, 0xa9}, 'port1\x00', 0x0, 0x2, 0x6, 0x8, 0x0, 0x26, 0xff, 0x0, 0x1, 0xff}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 02:06:57 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000001000000000000001f00", @ANYRES32=r6, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="0801b46a00002800310f000000000000000000000000dc0fb22bd6e9cf90493ff584f2b1919fd3b6a296d9330c268541e152983e031ab45617cf8233bf15e56e5f2f21af18b727a83c222e2622e1ea0c6a25f328feffda836309a732527f1f970b978eaf6057a59858d6e95d", @ANYRES32=r6, @ANYBLOB="000900000000ffff000000000b0001006367726f75700000d800020036000100d00000000b0001006d69727265640000a400028020000200"/80, @ANYRES32=0x0, @ANYBLOB="20000200"/28, @ANYRES32=0x0, @ANYBLOB="20000200"/28, @ANYRES32=0x0, @ANYBLOB="20000200"/28, @ANYRES32=0x0, @ANYBLOB="20000200"/28, @ANYRES32=0x0, @ANYBLOB="1b0006003c0a793afd329cce9533c4396b8dcc136902ea634a913e00000007000000000000000000000008000000000000000000"], 0x108}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c040) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r7 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1012.147298] binder: 27742:27745 ioctl c0306201 0 returned -14 [ 1012.162503] binder: 27746:27750 ioctl c0306201 0 returned -14 [ 1012.165134] binder: 27747:27752 ioctl c0306201 0 returned -14 [ 1012.179713] binder: 27743:27751 ioctl c0306201 0 returned -14 [ 1012.219020] binder: 27742:27758 ioctl c0306201 0 returned -14 [ 1012.273450] binder: 27747:27766 ioctl c0306201 0 returned -14 [ 1012.277003] binder: 27746:27767 ioctl c0306201 0 returned -14 [ 1012.342095] binder: 27743:27769 ioctl c0306201 0 returned -14 02:06:58 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000040)={0x4, 0x38b, 0x1}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@setneightbl={0x1c, 0x43, 0x1, 0x0, 0x0, {0x2}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000100)={'wg0\x00'}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="05630440"], 0x98, 0x0, 0x0}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f00000005c0)=[@in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e24, 0xfffffff9, @mcast2, 0x2}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e24, 0x5, @ipv4={[], [], @rand_addr=0x64010102}, 0xbef}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e23, 0x4, @mcast1, 0x3d2f}, @in6={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00'}, @in6={0xa, 0x4e23, 0x4, @private0, 0x3}], 0xbc) write(r6, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$PPPIOCGUNIT(r6, 0x80047456, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:06:58 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r2, 0x40044104, &(0x7f0000000200)=0x9) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000004300010000000000000000000200000005000d808c10db8c060000000000000000"], 0x1c}}, 0x0) ioctl$sock_netdev_private(r3, 0x89fd, &(0x7f0000000040)="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") r4 = dup2(r1, r0) write(0xffffffffffffffff, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000240)={0x9, 0x19c}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) getrlimit(0x5, &(0x7f0000000140)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) [ 1012.926190] binder: 27742:27758 ioctl c0306201 0 returned -14 [ 1012.932872] binder: 27742:27758 ioctl c0306201 0 returned -14 [ 1012.965523] binder: 27743:27763 ioctl c0306201 0 returned -14 02:06:58 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:06:58 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000001c0)={0xa10000, 0x5, 0x4, r0, 0x0, &(0x7f0000000140)={0x9c0904, 0x5, [], @p_u32=&(0x7f0000000300)=0x38e}}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000640)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f0000000340)=0xe8) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = dup2(r3, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x80002) ioctl$VIDIOC_G_PRIORITY(r6, 0x80045643, 0x0) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfd14) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r8, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffff7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20048000) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c2500009778956ebee30172b2a0cddde5db", @ANYRES16=r8, @ANYBLOB="000a2abd7000fbdbdf2511000000050038000000000005002d000000000005002e0001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x40000800) 02:06:58 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@setneightbl={0x1c, 0x43, 0x1, 0x0, 0x0, {0x2}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0xd8, 0x3, 0x8, 0x301, 0x0, 0x0, {0xe, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xb6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xf891}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x80}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfffffffc}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8001}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = dup2(r2, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1013.006683] binder: 27743:27769 ioctl c0306201 0 returned -14 [ 1013.082507] binder: 27778:27782 ioctl c0306201 0 returned -14 [ 1013.111349] binder: 27774:27786 ioctl 401870c8 20000040 returned -22 [ 1013.124148] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=27787 comm=syz-executor.0 [ 1013.141546] binder: 27775:27788 ioctl c0306201 0 returned -14 [ 1013.169548] binder: 27783:27787 ioctl c0306201 0 returned -14 [ 1013.210222] binder: 27778:27801 ioctl c0306201 0 returned -14 [ 1013.241287] binder: 27783:27803 ioctl c0306201 0 returned -14 [ 1013.333527] binder: 27775:27811 ioctl c0306201 0 returned -14 02:06:59 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000540), 0x0, 0x0, 0x0}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$KVM_GET_FPU(r4, 0x81a0ae8c, &(0x7f00000002c0)) 02:06:59 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000430001000002000000000032200b00000005000100000000fbf6f0157b2dbc444e75038b094ea63ff2290bfe316949fde01437b4fd0a85c8f13dcaff4675b7472a9f476d931067cac51b9e309e60fe1275163bac6539c4963dba8b"], 0x1c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1303000000efffefff00070000000c0002"], 0x20}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x128, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xca86}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8}]}]}, @TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc77}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4090}, 0x80c0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = dup2(r3, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0x2) dup2(r7, r8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x3f000000, 0x1, 0xff, 0x2, 0x8, 0x3ff}, &(0x7f0000000080)=0x20) write(r6, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) 02:06:59 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000100)=[{&(0x7f00000001c0)="90c1eff829d1f4d8089bec43162c06eb3bd973681f48438426770a63bc5e035bfdc964ade5d5b541d7c546d152099a7cfaeac40e488ec01bfa9d9bc27ace892ef30ed2e74aabaaf04ee5e5ed2243fb6a3a76fd5084c17eefe160c05327b0280d5fbfc2e773dd0964a167c52de600"/124, 0xfffffee9}, {&(0x7f0000000080)="97362f86ec2ad046395367c3698c974042a9138dca9ef3696a1fddb8651e499e193c007c8496c193884f1b1ef47e14b2c3aeac5bbfb8cba0ee7ecc8f95f0538329e29a30c969b7c152ff38577df5"}, {&(0x7f0000000240)="016cddff2a2b228bf05759c2ef3f2b1d11ae4e6bd93da1e32bc710fcfb215cffcca11696e6cdd82bbd5879f0e1943d2b75429ffbe3255f81fd17397dba585b61c65bce246102f966cea5e9eb8f2873676a4beb3cc849b3ec20092aacdc66b405c57483f0953d79e0b8f8d65e7bc5b95017ce9b69957895ce6756e54010816bceb9c30b75ef978f89aea4e6c4fefa7e512f489995a35e76e253497a0f8773fe28ba9c98b6d3f944007f4eb2a0e8284fc35dd41508dcc56c7490cdc0af5668d4b6a5527dc176fe452df460cfa61a817721211482bd6c12515c3bbe80e882bbf75826f95c6631092d3c9a6b0196517eebeb40"}], 0x1, 0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:06:59 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r0, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) [ 1013.915315] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=27787 comm=syz-executor.0 [ 1013.928458] binder: 27783:27803 ioctl c0306201 0 returned -14 [ 1013.952574] binder: 27814:27819 ioctl c0306201 0 returned -14 [ 1013.964886] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1013.971207] binder: 27818:27822 ioctl c0306201 0 returned -14 02:06:59 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$key(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={0x2, 0xc, 0x0, 0x4, 0x3d, 0x0, 0x70bd29, 0x25dfdbfb, [@sadb_x_filter={0x5, 0x1a, @in6=@mcast2, @in=@rand_addr=0x64010101, 0x29, 0x0, 0x10}, @sadb_x_filter={0x5, 0x1a, @in6=@remote, @in=@multicast1, 0x10, 0x4, 0xc}, @sadb_x_sec_ctx={0x21, 0x18, 0x81, 0x3, 0xfc, "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"}, @sadb_key={0x6, 0x9, 0x120, 0x0, "62adb3d88cf8448d7dde8fd75263eb45a13ec9dac94282873f96f699fe895d661ca4d5ea"}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e22, @private=0xa010101}, @in={0x2, 0x4e23, @local}}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @remote}}]}, 0x1e8}}, 0x20000090) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)={0x34, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x90}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x57000000}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000085}, 0xc844) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = accept(r5, &(0x7f00000001c0)=@x25, &(0x7f0000000140)=0xbcd) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700)='nl80211\x00') r8 = memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) r9 = geteuid() fsetxattr$system_posix_acl(r8, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="020000000100000800002a2861f897dfe943ad000010e2c7d96af714418a01737f483ac13a9adc35d1159a5b3c1e27047528fb9bc5d777462c18159ba9702737772179a54326d5baa6f91ba1665908ab9ac7794550449ba9f43422c0dbad5398514572e7a3216260eaefa0", @ANYRES32=r6, @ANYBLOB="000000f0ff0000006e0800ff", @ANYRES32=r9, @ANYBLOB="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"/436, @ANYRES64, @ANYRESDEC=r7], 0x7, 0x0) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r7, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000804}, 0x800) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r10, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1014.010691] binder: 27815:27820 ioctl c0306201 0 returned -14 [ 1014.033652] binder: 27814:27826 ioctl c0306201 0 returned -14 [ 1014.079550] binder: 27828:27831 ioctl c0306201 0 returned -14 [ 1014.098120] binder: 27818:27833 ioctl c0306201 0 returned -14 [ 1014.126385] binder: 27815:27836 ioctl c0306201 0 returned -14 [ 1014.147637] binder: 27828:27838 ioctl c0306201 0 returned -14 02:07:00 executing program 3: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() tkill(r1, 0x1000000000016) ptrace(0x10, r0) ptrace$peeksig(0x2, r0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xf, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xd}, @alu={0x4, 0x0, 0x5, 0x2, 0x1, 0xffffffffffffffe0, 0x4}]}, &(0x7f0000000040)='syzkaller\x00', 0x400, 0xc1, &(0x7f0000000080)=""/193, 0x41100, 0x4, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x4, 0x3, 0x3ff}, 0x10, 0xffffffffffffffff, r2}, 0x78) 02:07:00 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) syz_extract_tcp_res(&(0x7f0000000080), 0xffffffff, 0x5) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f00000000c0)=0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:07:00 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x42, 0x0) setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x2, &(0x7f0000000080)={0x0, [0x5, 0x634], 0x9}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 02:07:00 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) r5 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) 02:07:00 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000000000000bfa30000000000004503000000fefff67a0af0ffe8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000100b7050000220000006a0a00fe00000000850000000b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3487bb07eb78c27b090941bd3108d31287801000000000000000012cf6956e09d1938013c217e0f6ab2366e8a87554c101f03733d40c62753ecd1f46f09beb1bbfad9bae24b4e8a96ec60f2af47f99376e43836ba33fd5a447f936e000755861103bb45e5d53c9fe36bbd35e53c6376c0c2b1daa58a9c34444bb7e9673476d017fc94c5857ead931db6cd370e93b6d5a74cc1d2c50896249ed7420f8680a730d876c36a1f3f1b8eb12d9390a49f2d99b5df916269392e0d0000556ec919d0b1681369d448c6f8c9969baa463b36d25ac1628ef858a5cc77c14c8df67f20fd224829af6de3d5ef71857496714db96c6db18ea5189cfbddd6e4de3617adabc339334b97b11911905d6692a33f1f370c05e1f134e5f90a326b0cb5268e40f5ba9b5360a516c3f87f05e5d1af657c445131edb61670ff2c62117e96eba22382758239e69127d5656e63bf02af42a5ac113879bfc27d7e6ba1f41301065efb1685e65f30df092251d556a89c2886ea64bc457280330dc9cdb6db023433e9ba97796a7823d241795ab1258fe937312fc5e921e8758153be202f000055a4921970e28e6238580101b710cf8b82bcab02c12fe01bd8df4e97c67e8a3693b23668c55eed4e24eafa16a4f43b6729990a9321531e5eb006b547c13cdfa2fa211d07a29377ea1c5aa7f5d58331ad45fc89ac44c9d2d6b3ac03ce76fc9d341f076264f8cf493901ad919329a295f63be4e91417b9cd09cf47272d46666571f24d71fcff2a9e869c2144f5775c37084acc57b5793f25f853f7a98965e5bd9ff5253f787eb321572355c706d6d2e27c475fd077876a4405b72b00000000000000b79d8029af8de217c23f79e68fe48420cbb226a752b817fc17efaa1268c6"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r3, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r5, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) r6 = dup2(0xffffffffffffffff, r3) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x3) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1014.747371] binder: 27814:27848 ioctl c0306201 0 returned -14 [ 1014.824289] binder: 27853:27855 ioctl c0306201 0 returned -14 [ 1014.834873] binder: 27849:27856 ioctl c0306201 0 returned -14 02:07:00 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) sysfs$3(0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000080)=[{&(0x7f0000000040)}, {&(0x7f00000001c0)="970569c28f8ce491b468369cd78c88f67e854cddc3e43046adbfadd597827c1e15fe70728e822fa12312041b7f38e266c90d13eb2be6520c1062c867899a127049469894c396bac8e0b138574f57f0da1a5fda2f0038361c3e451bb932d48396f5338db0f1d0e5da3a4a859b3593dc8e0fc22b35a092d4ed272ac10b9efbc87a38dff84b656a46fc3139751787b8ccf134cf561f5ac6754f8da001d5c4f831d58b6cf04a45d03e8065f4a8b7016996f548f87fff8e68cd78cb00b066d78e163beb035060529720503be092da4d17296ea66068d79892195d06a6c0fe1d96d93414809c673a17a4845a87e6e3ee773e897d840052a6934471868261", 0xfb}], 0x2, 0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1014.870399] binder: 27828:27838 ioctl c0306201 0 returned -14 [ 1014.879396] binder: 27828:27838 ioctl c0306201 0 returned -14 [ 1014.922934] binder: 27866:27867 ioctl c0306201 0 returned -14 [ 1014.971830] binder: 27849:27871 ioctl c0306201 0 returned -14 [ 1014.978298] binder: 27866:27873 ioctl c0306201 0 returned -14 [ 1015.071634] binder: 27852:27876 ioctl c0306201 0 returned -14 02:07:01 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x0) splice(r5, &(0x7f0000000100)=0x9, r2, &(0x7f0000000140)=0x8, 0x10000, 0x5) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) bind$l2tp6(r3, &(0x7f0000000080)={0xa, 0x0, 0x1, @private0, 0xfffffffc, 0x4}, 0x20) [ 1015.628993] binder: 27853:27864 ioctl c0306201 0 returned -14 02:07:01 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x2) dup2(r5, r6) ioctl$TIOCL_SELLOADLUT(r6, 0x541c, &(0x7f0000000040)={0x5, 0x8001, 0x0, 0x8000, 0x9}) 02:07:01 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1015.722296] binder: 27866:27867 ioctl c0306201 0 returned -14 [ 1015.729239] binder: 27882:27885 ioctl c0306201 0 returned -14 [ 1015.745747] binder: 27883:27886 ioctl c0306201 0 returned -14 [ 1015.762013] binder: 27884:27888 ioctl c0306201 0 returned -14 02:07:01 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000040)={0x5, 0x1, 0x4, 0x4000, 0x2, {}, {0x5, 0x2, 0x1f, 0x4, 0x9, 0x7, "82b1e876"}, 0x3, 0x2, @fd, 0xffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1015.774488] binder: 27866:27867 ioctl c0306201 0 returned -14 [ 1015.863602] binder: 27882:27897 ioctl c0306201 0 returned -14 [ 1015.882932] binder: 27883:27899 ioctl c0306201 0 returned -14 [ 1015.883796] binder: 27894:27898 ioctl c0306201 0 returned -14 [ 1016.033188] binder: 27894:27903 ioctl c0306201 0 returned -14 02:07:02 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pkey_alloc(0x0, 0x1) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) setuid(0xee00) ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc0485661, &(0x7f0000000540)={0x0, 0x2, @stop_pts=0x82}) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') pipe(&(0x7f0000000180)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x2000000, 0xfffffffd}, 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) write(r4, &(0x7f0000000280)="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", 0x17f) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 02:07:02 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000340)=[{&(0x7f0000000040)="abc1c77884685db085a47d86a86a6f17dc25382d45d869bc3b73da2ccc8f037a65d9df59a1e03e2fef17e73b8dad1a0d196ae0ccf471ef704ee185b980d5a9e1fe2eb625217745fc5ffec78d4bb14019282e8a8c26fa64bb3265b24988ff532c7fbd6313c1bd21", 0x67}, {&(0x7f00000001c0)="989275754ac1740493f4ab7a85bc7ba24cc84dd710ed57ba641b52d591c3ee4932d00179de32fef60cc3d62875e77df8249b3b32e25fde4d80ed2e094a876d4fcfac89e0376f03382b5f44850663aa49628255da825acd5f35b3f306c568511fca8fe27c6c5090d3472d1f207b5741fa329a93006d5f68fa084c68fb8e3911f84b", 0x81}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f00000000c0)="fcf2cbb748493c2b5869af5a15c28332a09a70e2202042ea0027de34a5c5dfa55130cbd680968df874d09e3795bc004c7c68a395614542339f157cfa42cde669a5622fa76d79e90779875b5e887fc821286e2cd004f39ae2", 0x58}, {&(0x7f0000000280)="7cdffc52d3071e42d7c9801205eac6c284784e53ff6e7be3fdff5e5e83e59efb2cd5591e972490e02ca7fc04819bf6986a4d64f89aa556fa88c564807d28ea045696617f10b0a9ef9b12d23c66d82830d7fa8f572b6bba6dd708943f5ccd40a15b3387720b47815b4bc22eb8bde37861d3095329edae2e3ba3ae9c95400f962f13d4129e04d4ca39779992b7218b83a3d7ed6d8ebcf9c0b2828f3273", 0x9c}], 0x5, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1016.568394] binder: 27884:27896 ioctl c0306201 0 returned -14 [ 1016.601327] binder: 27906:27909 ioctl c0306201 0 returned -14 [ 1016.654867] binder: 27910:27911 ioctl c0306201 0 returned -14 [ 1016.684266] binder: 27906:27914 ioctl c0485661 20000540 returned -22 [ 1016.711083] binder: 27910:27915 ioctl c0306201 0 returned -14 [ 1016.739026] binder: 27906:27914 ioctl c0306201 0 returned -14 02:07:03 executing program 3: r0 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x4271, 0x2460ccab5fe3651f) ioctl$int_out(r0, 0x7e50, &(0x7f0000000040)) clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() r2 = gettid() tkill(r2, 0x1000000000016) ptrace(0x10, r1) ptrace$peeksig(0x2, r1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) 02:07:03 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffb000/0x4000)=nil) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:07:03 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000540)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xa1) unlink(&(0x7f0000000800)='./file0\x00') ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) sysfs$2(0x2, 0x300000, &(0x7f00000006c0)=""/247) r4 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x124) fsetxattr$security_capability(r1, &(0x7f0000000840)='security.capability\x00', &(0x7f0000000880)=@v1={0x1000000, [{0x4, 0x6}]}, 0xc, 0x3) execveat(r4, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=[&(0x7f00000000c0)='/dev/binder#\x00', &(0x7f0000000100)='/dev/binder#\x00', &(0x7f0000000140)='/dev/binder#\x00'], &(0x7f00000003c0)=[&(0x7f0000000200)='/dev/binder#\x00', &(0x7f0000000240)='$*\x00', &(0x7f0000000280)='/dev/binder#\x00', &(0x7f00000002c0)='{\x00', &(0x7f0000000300)='-,.\\\'', &(0x7f0000000340)='#\\(/\x00', &(0x7f0000000380)='/dev/binder#\x00'], 0x1000) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000080430001000000000901000000020000000500012ece000000c2cac4690a1501"], 0x1c}}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440)='batadv\x00') sendmsg$BATADV_CMD_GET_BLA_CLAIM(r6, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000426bd7000fbdbdf250008003200ffffffff08002c00450f0000"], 0x24}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000080) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) [ 1017.441257] binder: 27910:27918 ioctl c0306201 0 returned -14 02:07:03 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="bda250e64f645f00522f4fb5bb52f6ef8f1f881d0d42f81367f4544831cc95775c7070fca7698259887d4a237be13825e8c49ef1cb80a07dfd5b5f1e9f6ac2edd79ac8b400b06f27b8a63dfbdf5209803136b2dcd39d092aaf9a8c8078fa582cdda713c19ba97991d24bb8ba1cb9abb0ddbe0f98722ce24b354c8675ada9004199ef2966b92e7b5918a7d9a8ee7032d7538de0bda86a556e2677f27abaaf0ac88d1a2327813fe290852836f0c85d565743044af4198310a0291c7adbb18d6ca43105775bc4373f09e16379ae049768bd08d3561f46d737f214277c"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) write(0xffffffffffffffff, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000480)={r3, 0x4, &(0x7f0000000300)=[0x6, 0x2, 0x3ff, 0x0], &(0x7f0000000380)=[0x80000001, 0x40, 0xf07, 0x8000], 0x40, 0x1, 0x80000000, &(0x7f00000003c0)=[0x7], &(0x7f0000000440)=[0x17c15c18, 0x100, 0x7, 0x5, 0x6, 0x40, 0x5, 0xfffff000]}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0xfffffff7ffff0001) pipe(&(0x7f0000000080)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r5, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r6, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) write(r6, &(0x7f0000000500)="b0a3cdef47f59ec515de0fcb054eac00a71d4f6532ba05d03a24674b1d94d072b4bd70d6e4fef97bdd899d358a006c8dadc7e32ba24fb1e152533e4df2604f0c1253c20324dda85d95ad02000000d81d2b9c047f9e468b3da19d62e9e376c0174a3e913b2f7cd467de25fd8b6afc0818af918100000000000000f2d054d8b16374e3617a22b1c70e7e3104b814e200"/152, 0x98) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="e553f705630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000240)=[@clear_death={0x400c630f, 0x1000000}], 0x0, 0x0, 0x0}) 02:07:03 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000040)) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1017.544848] binder: 27921:27926 ioctl c0306201 0 returned -14 [ 1017.551043] binder: 27923:27927 unknown command -430923075 [ 1017.558550] binder: 27925:27929 ioctl c0306201 0 returned -14 [ 1017.558695] binder: 27923:27927 ioctl c0306201 20000200 returned -22 [ 1017.571655] binder: 27922:27928 ioctl c0306201 0 returned -14 [ 1017.631793] binder: 27925:27938 ioctl c0306201 0 returned -14 [ 1017.632806] binder: 27921:27939 ioctl c0306201 0 returned -14 [ 1017.656237] binder: 27922:27940 ioctl c0306201 0 returned -14 [ 1017.657906] binder: 27923:27934 unknown command 100094949 [ 1017.671667] binder: 27923:27934 ioctl c0306201 20000280 returned -22 02:07:04 executing program 3: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() tkill(r1, 0x1000000000016) ptrace(0x10, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2, 0x0) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000040)) ptrace$peeksig(0x2, r0, 0x0, 0x0) [ 1018.335226] binder: 27922:27940 ioctl c0306201 0 returned -14 [ 1018.337760] binder: 27923:27927 unknown command -430923075 [ 1018.364412] binder: 27923:27927 ioctl c0306201 20000200 returned -22 [ 1018.393400] binder: 27925:27944 ioctl c0306201 0 returned -14 [ 1018.402411] binder: 27923:27947 unknown command 100094949 [ 1018.412617] binder: 27923:27947 ioctl c0306201 20000280 returned -22 02:07:04 executing program 0: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) r3 = dup2(0xffffffffffffffff, r1) r4 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x3b2, 0x501000) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r4, 0x40044103, &(0x7f00000001c0)=0x7) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1018.445921] binder: 27925:27929 ioctl c0306201 0 returned -14 02:07:04 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000020}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="cc007c60", @ANYRES16=r3, @ANYBLOB="010026bd7000fddbdf25010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080001007063690011000200303030303a30303a31302e30000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080001007063690011000200303030303a30303a31302e3000000000"], 0xcc}, 0x1, 0x0, 0x0, 0x8000}, 0x40840) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x10040, 0x0) getpeername$l2tp6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000440)=0x20) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:07:04 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x1800) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:07:04 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@setneightbl={0x1c, 0x43, 0x1, 0x0, 0x0, {0x2}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = accept(r6, &(0x7f00000001c0)=@x25, &(0x7f0000000140)=0xbcd) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700)='nl80211\x00') r9 = memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) r10 = geteuid() fsetxattr$system_posix_acl(r9, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="020000000100000800002a2861f897dfe943ad000010e2c7d96af714418a01737f483ac13a9adc35d1159a5b3c1e27047528fb9bc5d777462c18159ba9702737772179a54326d5baa6f91ba1665908ab9ac7794550449ba9f43422c0dbad5398514572e7a3216260eaefa0", @ANYRES32=r7, @ANYBLOB="000000f0ff0000006e0800ff", @ANYRES32=r10, @ANYBLOB="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"/436, @ANYRES64, @ANYRESDEC=r8], 0x7, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x118, r8, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x400}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x427}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x4d, 0xbe, "0f406f63eb262a70d5a234f96d3010ce78529291885028bd91b3ef4fba4a5a48b74e518d6ebf1151d46091ec3029f46ffb87c0f25e0d8af0bc9adda03185279b0af8243b0714dbebad"}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x7c2}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x8c, 0xbe, "3f7f4845aa4b3536b9310031ba6f1af993f43afe08bd257c27ee25e95dea1f6c154d2a9d602bd2c50e9cc60b78db5344d9d25ada8ba366db3a2130b86de4790bc61949dd98c244b43dc65b2856395251a2b95c96dc42e7f61e3ec94b0e85077354adbbed17f699092e0fce474fb65c3e4ffac2d0de4562324c166f46cfe7fadd7ee6a1866d762ec7"}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x118}, 0x1, 0x0, 0x0, 0x4}, 0x4000) [ 1018.530610] binder: 27955:27957 ioctl c0306201 0 returned -14 [ 1018.566681] binder: 27959:27962 ioctl c0306201 0 returned -14 [ 1018.637470] binder: 27959:27968 ioctl c0306201 0 returned -14 [ 1018.661128] binder: 27965:27969 ioctl c0306201 0 returned -14 [ 1018.782456] binder: 27965:27974 ioctl c0306201 0 returned -14 02:07:05 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmmsg$nfc_llcp(r4, &(0x7f0000001a80)=[{&(0x7f0000000040)={0x27, 0x1, 0x0, 0x3, 0x9, 0x8, "d2e759d59f25a72a8287f8c0e68ebe0fea79bd1afc6094e52f0ba77697255a761f3cd7505eb36cf54c8d8417ce8a79cf8d599a0aed8265e1ed2bce3c6d075a", 0x3e}, 0x60, &(0x7f0000000100)=[{&(0x7f00000001c0)="b41791f3c708af1a5cdafc93a160581a87a040fdd0257563fb3ff51639d0d58ad79671450242e9b89283c39fb0a471d5b3d23e3ed192d5731daf1cb855110b44cbb6a8c7857ffe6db3f9cbd61b53c8dfa85da035d5375d62700d21af2110b4ba97b0ec2801531cd88d0fc9ac6e53684fa9b080a3cd89246c85aa208aa144849f7575ebefb481e7761a7b223e1833ffc0012ae4458642bfaf40ea3aa25dd5f0b5c8a4f162fd2534e67f2d3cc20caa484e51ffed3958219cf38582893245213140d37297b1bde08e63413b45248cb1a8e4408f", 0xd2}, {&(0x7f00000000c0)="e647ed434ebc7b8f405a", 0xa}], 0x2, &(0x7f00000002c0)={0x28, 0x11, 0x40e, "a6c377352ef0c40842a122784aefd360aa2fee0d"}, 0x28, 0xc050}, {&(0x7f0000000300)={0x27, 0x1, 0x2, 0x1, 0x8, 0x1, "8b1525e77364f8d6641972b1c4633fbc853fff33cb710f3c91b4668483ff9e3e235ee7462323adc700796bd443024145c479648fb185eda6adfa7e601e79ec", 0x1}, 0x60, &(0x7f00000017c0)=[{&(0x7f0000000380)="deb999ba3df3791b0c1ce3f56cd4e65b93f373684030c023445b2a8a6fa7be612262838807273d6085508d9b305f819b2fba65656875316b8d336561a93c4271270deaf858a1002656a7", 0x4a}, {&(0x7f00000007c0)="c45ec5971b14673e7a3b49103b2f50e07eed8038d745d9c5422b08bf48b48103ee005c375d83ca2243b156e8be5bbcbccb4336dd83b8f93a9152756ecd4ee4c63c8721bf648c6ead73d9c30ff31e30203084cbc18b4bbf5203765e03fff263ea833b13bb05f3028f71e60bc8adc8a22e6efdffcbe2df9019ef555a5292eecd730d084bcf5a02b978d1a82312b44a5c64d74440cfc25e8093409f7c786fe664207eed76dd661339187a1699043b2523caf0e996b310e4e2189c680a0e498ee46cded886bdfb69b6729305845fd8d38cbdf253e5c847ec3e3e5c838803ecb9cabf44de1cc39370a5382838f21b1c0079c432b39d73bdc92e11d6c999ba36e3e60576c566deacb80b82fae584c6cc1c8fcd1945453cb29637a657ad3a091265139667c0ac3078c27f7c22171cbd88eda6e300143442b78abf8d2feefaa439bd48f515ede0296205412b80b284b5423fe696831c1585019fd1933a2582a85083c5912a17ccb804d9073ae144d0cd9a18c023dc16d6b7049b3ea61b858dce40e3f692f2763fa0ee5a2a7fed4fff8a41a0586d3bf7cdb196ddf30b4320b5b384c59068727ed32bfa3032eb4acd064a81e34a625be994b672013793a02bf5d72c9b06c730b1def2de48e60ba4b28df181ae86bad0f84a37825fa973f8d304b72b49e2c84ea6b96a4b478a7d62ba6bcf260f6792c0bd49f00796b1ebfca19c81cca2ee1f712c31fe9136b5f2a90f5e546063f12bb6c1a31f7867f5fffb16f2a0a9c28964b474d939af1ad767667af196349cd4ba55c8e30eb300c9a6b9829c6c4a241e06649b44efa71cf334be9b7b2d0a9b6684378614ee135a5ee22ba6092c5a20a4aaf549b4309968de4bce8335bdd7a164447fab4fa4fdde9e4966e90319821b1baf24394d343acfbe8258726d4b2afc9fc2d52954c358e794bbd262becdd8266694f45db7313d048b66e5072fa9d2b5e5c0ed3e405e76b9823661a8d1053de5cece9e6fa49aa97591a979acf4a39fcfca74c52f7cc0d16e62d660ff041fe04f2194c31bc7a53a3cd77a1b1be5b90288adba0d8e757cc8ccdaca1cde33dab68b30e680369ab00341af2b0196a6d8a7f06dde0807e041e3744f525ab41da8e244cfd0043d7e9f882ed989048076ca7436807bb89a3c2125ee5934ebef7dde50fe5c1999718c777e5838f2deac9eb96dc3e850b9010f01b9d62dcafd5756b111f0a1dd4a9e65c0a61fdd59c8b06cd649eaeebdf03a8566c7d10f35f8098d4823ea37cb052bdbc7667d5ac16182a78b0729fe1cc3597b04bff95cee705216a70873f2b4afb652b7c89a13156e5718000cbebceab109e2b8d10f97c58b67af802c974710d7b9f645387ef4647a31766b1dfd08abe47426a835e81bac2f077b34869561bdeb05cf6a1afbee4f25608945bf38bc5d8b90cd5e832d481b9ad1ce697e92f02038e0ba6facfbb724972228b5be00ee8ccf15ec0db13bd45057f76dd274adb79d90e6fabe8aca7ff404e8a59f5669fea0c84f7501fe32a1d15c0938a11356fece2272048868b06cbbee57bfa4edb8911dd7e362940e2f4435947b2d6b5c5be35a7dea00a1376ec9d7d95cacb615021c579fedbddd289c1ed86fba511699d24fa232ca7435819e3975b0ea9fc1e5f7a58c94e8398fc830231444feeff1af252f62b807482320b22d1a89eb8021426ff72a3bc3a46612277d3ebc78837320b068b13365397c21b05a6648c124872191dcc6bc265df423d7c75a4e7e4bf98639ac2ce432a96078f36b731f9c52a531265837e640c82852afb7c0b2e42d616b26ccb0bb43c20b620f932d22ca7aa01f6453dd5e783e30292f3219cd6828659b8ccf8cfb74af968242e54efc4b9b0ca23e227ccd0da6cc2deda0e0f3090785ee78fdc2bc90f4af3dd6acbded41c23a29c1110c5d98eecd55437a8899223175301d9e1253729466d5be5b45cc3a53d55bc93aeb625d2ce41587c0248bf7048ffae5d221951e8d460c01252259e584c54d194e073d6eeb9924dad225652ec8efc041113ffd2060b7e8012202c0e2b75cb59876e964c70901fa4e7c2b71df9d9112e34d42c8a0844a85ef8045ef294ecd5e0e6e59ecb9cc004e30e5536fd6094772585ce1f198eec3717e9829dcf50a5222845570855f376859d4e1dbc636445b1824da08ed39f890c265c42618cbe43a1f28107eba9efb941afad41f94d24ba73866752a9755be76ae1d94ac4a43d34663a337b401211ce47e9eef1455778021a203fb0e819d78c1c71c3cc6417d4ec7beabd6895389ee78dc85f1478ebcab41cd1ae149ec17089bc90c6812abc2d8ef761ea96e27407f46a2a90eb23d390dc7821267cbd15c1cb6ae957bc50c31965af8f9869b700b1f8b78aed3812c9186971c4ce7707942f754499095c17c24d3b6a8525fe82260b56ee72c37b67dee4d13b898f2f4d364694170c32656871e95b2932f3bed2f867eace7a4c8efff403fe79fadb1a02360ee4d9f87a6963d0f97ef3f18e5f0c92b27b7f49593dc27cce7b97852e60d77ce83581a87ef6bc7465786cb104f16cb929f0ab840a4809e9c3e05eb88da43e3f31b1c4474611de1b8596c38142c3251f449e24d7678e22b963c597f10d01be6aa8294d8e9120eb1a71db248fb3be24f49c5ca707fdceeaa6fdebaed8b5c91cc1595518770b21412095ccaa620f840c22b4831cafb25357bd428737c45aba5e2d6d7028887f70afed846af06a58f34d878284aa44f766fce14b785d2f5bb422c65ba5c61256bc0c3eecbb0582d584408670f4c98c4192fe4ae9903d44764b35ab7c68a2d427203f1d1c3a8ddf2835551ff497ec831e8b24d8bad90976650d10bbdcd8aae0dc721d483068d01eeb5ef0f0ffa122772ac0bc406ff58315157e2112ae30fb8169753bfde289c52ee3b4bd581d07da696b3604a64d86a6a195218b650dc25fa388593a9ed699d1459e1c7fcaff4694c2ac8d0f3eb00ccc595f51eca3fb8bb60e69f55d835e85fded580567b1d12dc69bac5d844f50236d72203291b47da883035a5f5ba8fa9fee3fd09162fc7a9af4c5c8f47e75db195301c4b8f9580a2f64f5ea770784f1a8b17b3f9acc6ffbb55a0789b4d827ffae8b301b410d15039f066e015b7ec1ddc7531a87f0fcc1bdd97e2536dfa7c6e3099ca3a77455c1003d85900d6c5f2bc9e0f227eb58bf3dafd68343bf5af3cfe9846bb45be55b16eb6f71444f6f4e4e4e6a6891d01c0dc2a484638818ff3b25b1b22d9e85e2e31076344a3bd33293098bda7aa90397a43c699ca3cefcd15420df2e03445e20fb03ec24041cded3a7fe0176b99a506829f35fcc4c9c32884d4e9d5094bc5fa0527eafd94f0f2c005e08bda40e4aa86bf49f2f6ac50f3c2c721bfef61b2c4e2f825fe752d6358268d1f9c7cce462638cebbba5292c8d4b54491f9949487be40ec094be4ee24ad7a71ff41caeaa95d4e9c83df63ef6dc741d206b5a99a9be7cfe0564994943fb2874cf4a03242e3eee4035a971baa6f43cfc027cbd7c9008d3a4b24616c650894678004d938d6bac27a3970a441cdd47f3652991a2f1a55cd239862cadd86ef2c46f48782ad9fec4a7996cddab85a468ab3c4099b6ab89b45602d259787aa6ca44152e27e0b7350312d66964154fc08bded18d7ca9c92ee0e4394310951c60daef2bee606b5d0d3b79a340ff9bd8a712a803ac62c70afd1e976113f6cbfaad190e5fc08db76d6f700b5091422fd25069dfe850cdfe30b913b8c98e92c01afc3e84782a6495b4150ee0fb879f57c1cc417b970f1f706e6e7993fef1e98df4dcb4e685f32fa96a8ee69853d9cfeb43018ec7d6d5c000d8f7f9f7b19dc3c9ac3d60d1c1a08ef14876f1c3e4afe6925fd4f058bcc41f7d60a64e718ff4b35204bdf1538894fd1c9bbc70aa36a13ce11b9c198db4fddb56e69f306510fba139a912c7cefafa1b4a647cd4f79ea971e207dfe8a79c874816b61a0a15b4be707ca1e3b5c429fe1e5119b611b542d49032e69fed99ebec11218d6adc7768977991aadfcdf82dfd475dabe10a499376f2f718501025d2fbd7f4c7115910c4ca3c5f0d1cf671e641facd2facdd3aa533b88b2f82c6083975823fd4fbf552fe6117866a1e23ac62e1ec9878d9bcbb6d05f82f73d9e91fd8a8f982a908633fdc0f63c35beeab15238500963a08ced1bde241b5ca910f3d23d490704e26ee86ead289a93a523d9f25ef93640f139065ec50bd2e9ebb799d43dd9f751c64c52146349749689557592aa68bdc61c309db5d4ba9ec7e9209559c982e466517908f6adb5f8bd35663b09db90a7a018c642a2d5ef1d0308586d4ef6644a4e412e9c30d0332cb3603086d76e68a6c34f5084a5b5e303b13a620a1c696ab9af11289c66798eb66836fe6659a297f9e9d3982801e72db867ee2c33311cf9048f2f8b343cfc014cb561b147f7e4b16a1e39bb8f28da265b20375b822b280089656e3f2d01d0eac3331f9c6eb3661663964d81ecbcc62765746f5ed0529df8ba5b759bdf5fe8d9b04804ec914fe4904569fd4721680cb9b3c7a7e86aec1865c1b8358903fe5b4ae4c62e39f5f0da18bfdefbe223f282cf26bf9942225efe3ddc42d22dc69e48f10d81acd3fe1b7a863538a1b55c0a8e58c6915ba00ee684a26fa4adb56f8dd46c99eb933788f48bc4188c54bafe4593ac6928d521e4a965dc9d371fb7415b7e1289e1d915748757e679d2bd5e6ce72e3a59290265bc5219663eb028366884f0ea034e914f9a936b3a3474761bcc067a489f6f29cedab537580663ddd9ea38bbfac84a936a1ce2d3d09f4b5d7e051fd41b22cab3eb2b106b661dccbfda16db0fe2f17a5b939d210d0d1125c789945a4ad3182c31f83b2c74782f394414f776335f4112714ee1af2713d2786c1a3516ce174a364a0749c00d64ddb67e8f546d0bd2a985960e07ce0bc538bb850834563ae4fdddf28ebd8d48fe150f9d51120a03fa36c7a2d409507cc8c46add9de396fdcbe94b203dd188aa13b0c5bfd4b21c01ca8d847b0cf247378d060f309ad14eb2f0c942fc8609c53d93c8fbfb3d28ab6d2e3f0f4cae1442a29c1d8f702516066751fb749872e9b1614e37401e0f72d030a3d1e27f78f867bad62c5be1c6ec3c3e8eb2ec6e26a9641650a086ee7e1279bc7205d5d565d8b645dff81e291f7bbf27d9fdd1a200b912471e1fe17afaafd65301ce83fa3ac39979122a6c1c447fccbe12942cdc65b0078cc6bc234d63f00ee9003b4f2a9852dec46e6202d26c16dfa4ecc72f3fa480fda92ca20204a15632181bccace891ff2d72778216710eb72f9466f2e0e1183a2fce952ba6fbb30a0440fd171c7a614123a4ac9463908a0dd831686ea5267227a74937243a06bcfccc6fae13ee37b18db518f07cae0de03cbed5b591346de6f80bacf8463b9934992c9896b7f77cf276e4ddfd72c4dd1f30ab7b94edd8526e0d127f7fdeefbc36c45ff874d3a848978d64389786d9f57a1a0128f7342c828e5e7c09297bd9115153c1a9d87a4523f71a35282fdcf540edc4a625259bdbf7ba0e3d92e21618d66b7afad1b0bbd7e6168810f9c1f0dd3fe7e1dd10ac2ad1e8b78cdcffb8c352a384c870b7c161257c77f91c41c13a333f1a6a6b56896f651e054d8a37cad13fdbbca4d1da6d365a9a5b8754ce497800810ac12b4d3ae5809813a26b948f4442f188e9c71186e14e747e3a473ddfbaf230900d54d8592a4915b58db69cd3e5d97888014138737bdff407224eba1caf91543cd2cbe3bae45ef680719a19f6a6fb3d614e4791", 0x1000}, {&(0x7f0000000400)="4375b404d0e4b3cb44cd8ad4109674a9863a7fbfe2f30d0f16f02934a5b15b90ad5bbf8adb44ea", 0x27}, {&(0x7f0000000440)="ccc12ae2c0f3e5191f3877e95c46aea8961bcbb67cb03875d5950a1039ac74e29f05b1721b76cc2dbc58c9f12ad832699932d56534e88a0bfcb1d9af72873eed72e24bcd255349d0c8e95e31020eecb2b71281e18ea949e11e47b32c14a5198fc107ff6aaed04b26db0f6ce14729b2529326de5c5e45caf6bb93692fe9fa5f577ccbabd83ed85b536ecf72ed2af2fa30e0142c1cbedfba5bac1c7dbefc608671", 0xa0}, {&(0x7f0000000500)="a5b2bdb42485c70dfa030856219ef75514a955e168945224ffd6b7468e68a52dffa3ba847404cb7b5d1fb433ab6eebe6af66cceff5aee3129c0c180af491e3ae835f1b3f7ea58399fb8baf7f4ed2cbd228b3ee0bc85e246b77579d9a23c95b9d14568103d40309c1ff7ef078896c3c6f3ed0f7a573cf3829f4976927ea676cd05cebe9963180828d504bd2e00e0f389c686a976843129a563bb608f8631414c6c23e8757981e7c30b89e2ebd024c6a561f756eead7340080e50af78806b3e00ab60d1137a85d27712e0625f76d506adf79b0d2c7665b043e49d6", 0xda}, {&(0x7f0000000600)="f8b94c793756ffd9334e768048c066da524e7c66af24efe363679062ca6adadc0ef0c157eda6964637acd441119fe44fe10c6a3bca2f34ad40c788482e4222c18df580c57ac75a2ff2cb1cf53fb174ea60421364593d150bc8d214f35da0bef4d7bc25cb30fedf9260427356defea1f3bba2698fd2d4", 0x76}, {&(0x7f0000000680)="e26354eebc3f8ca3aa24fc71c9a4987efbf85051d0269c6501cf18f44a892523be267191d32c4b5450f6539cc678160ee82ecff0d5cb7532f8eb0a842f5f4b355066411c909f6be220cf1112f1d2e802f58e634bccf82197b9c62253ebe21622f9c11a742bcf8ac3764d16125b870a10abeadd2bb8a01f217f96866646870d3d6737aada7a08977301dcfaf07cff84be25f6692109f1afa8ce1e8162c161fc8a0dfde80786add8bc9e1ba2baf8f5b7cdc1989270b71d91ef8fd250013788b58eead8e8e72a", 0xc5}], 0x7, &(0x7f0000001840)={0xc0, 0x29, 0x2, "a8d071e094b6e86b51df0a44bd16c25cfb06f09e09f0b60c1b513cb59083da3ac03fe558d19e0804d9e3abea598caede016fb6656ff69b95481c4c86f92041d3dd665c44dedd84f8bfce51533138eba3face08975e8e42930173d279bf8df19e1b4526c47e9b363b005d208cbb26fa20853be7fac95c58e17c4b25c3ad04cfcf4cf2f09bde7136b54982ff1db9300d6d6de600e6f0c17d34ce1ca456bfe620e4f93f0bedb43bc633b41d0eb8"}, 0xc0, 0x8000}, {&(0x7f0000001900)={0x27, 0x1, 0x2, 0x2, 0x9d, 0x3, "71196c05c36e905c08b9597f78bbc59c16c588fa4213bd9110a5d029b84da7a38af9bed071f946df6239dfe5ddff19df0dde987f0f365a27ead37cb114fcf6", 0x1}, 0x60, &(0x7f0000001a40)=[{&(0x7f0000001980)="1df16439dd43c656785b", 0xa}, {&(0x7f00000019c0)="ca762c98f4eb6b9d8baabf35df8fca5bc78a42319139831f130e9bb5500305d1134b813439e7ca1c0ba97f066bd204bd3995ac82240407983a807d82bfd155f75bb0e8858860069179e6e4b856585c07305bff1e1c696e77633a88ed85ffc2704e1fc03e73e732233aae3028811c5bb1ba4b", 0x72}], 0x2, 0x0, 0x0, 0x88c1}], 0x3, 0x4004001) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:07:05 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1019.356558] binder: 27959:27968 ioctl c0306201 0 returned -14 [ 1019.396492] binder: 27978:27981 ioctl c0306201 0 returned -14 02:07:05 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x160, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@empty}, {@in6=@private2, 0x0, 0x33}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x6d, 0x14, {{'cmac(aes)\x00'}, 0x108, 0x0, "f851764b4c921b4707284b4952670052e30b6ec1a2ed92298008b92fbd1ae58757"}}]}, 0x160}}, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = dup2(r2, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r5, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000308) write$evdev(r5, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) pipe(&(0x7f0000000180)={0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$FBIOGETCMAP(r7, 0x4604, &(0x7f00000001c0)={0x80000001, 0x2, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = socket$bt_cmtp(0x1f, 0x3, 0x5) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='9p\x00', 0xb407a, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',version=9p2000.L,measure,dont_appraise,hash,fsuuid=2b6ad587-92d9-37a2-\x0064a-e885f3dc,func=MODULE_CHECK,\x00']) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:07:05 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = dup2(r0, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) fcntl$notify(r4, 0x402, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) [ 1019.478399] binder: 27978:27985 ioctl c0306201 0 returned -14 [ 1019.518069] binder: 27987:27991 ioctl c0306201 0 returned -14 [ 1019.660801] binder: 27987:28003 ioctl c0306201 0 returned -14 02:07:05 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x10, &(0x7f00000000c0)={&(0x7f0000000040)=""/119, 0x77, 0xffffffffffffffff}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x20, r3}, 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/181}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000200)={0x2, @vbi={0x3, 0x7, 0x400, 0x30314247, [0x2, 0x69], [0xff, 0xfc0]}}) ioctl$PPPIOCGNPMODE(r5, 0xc008744c, &(0x7f00000001c0)={0x8021, 0x1}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000440)={0x0, 0x4}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000580)={r7, 0x6, 0x30, 0xc2, 0x7fff}, &(0x7f00000005c0)=0x18) write(r6, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) [ 1020.127404] binder: 28006:28007 ioctl c0306201 0 returned -14 [ 1020.141411] binder: 28006:28007 ioctl 541e 200003c0 returned -22 02:07:05 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x7fff, 0x7f}) r3 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r7, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) ioctl$FIONCLEX(r6, 0x5450) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:07:06 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDADDIO(r2, 0x4b34, 0x6) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x414080, 0x0) fcntl$addseals(r4, 0x409, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05632f4a"], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f00000002c0)={0x0, 0xfb, 0x7a, 0x3, 0xe0, "85b682667a44934daf936aa3c773f5c9", "543ab86861bd104266053e94b731bf709b5a6e72ebc75180d7b5eb601b5194c5a0261f5a3df58fc0550276c8fd98b06d856a2508f0da027912030796a227fa40b2dd910767b09c5a94436b25328f879e36aee9c8c6907b43d9fada4ee44298de253f1d7df3"}, 0x7a, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xffffffffffffffff) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0106426, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) [ 1020.256028] binder: 28009:28010 ioctl c0306201 0 returned -14 [ 1020.272890] binder: 28006:28012 ioctl c0d05604 20000200 returned -22 [ 1020.317974] binder: 28011:28014 ioctl 4b34 6 returned -22 [ 1020.333605] binder: 28006:28017 ioctl c0306201 0 returned -14 [ 1020.388614] binder: 28009:28020 ioctl c0306201 0 returned -14 [ 1020.408630] binder: 28011:28021 unknown command 1244619525 [ 1020.424008] binder: 28011:28021 ioctl c0306201 20000280 returned -22 [ 1021.057486] binder: 28009:28016 ioctl c0306201 0 returned -14 02:07:07 executing program 3: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000080)={0x0, 0x1000, 0xffff, &(0x7f0000000040)=0x2}) r1 = getpid() r2 = gettid() tkill(r2, 0x1000000000016) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x4000)=nil) ptrace(0x10, r1) ptrace$peeksig(0x2, r1, 0x0, 0x0) r3 = msgget$private(0x0, 0x0) msgrcv(r3, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000258f88)) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000700)) msgctl$MSG_STAT(r3, 0xb, &(0x7f0000000000)=""/34) 02:07:07 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f00000002c0)="6a280d8809a897054544214e32fdcd03633655687c41618d83322eca5888801cf778f60fce1f62f2fb4dc800617179e361729e51ad01227b793262ba1ac5b501d6e20aac306c4db29f79876e82a3ef95d8c5a7b368b8eba15509d318a2d40e0511b881effe088cc327f96f19893d9f35fb5358cc85511a2ffb4b8999d4202e06788bd3651443ddf27045e273332ea304f711c5d98189bda6224a273a40fe8514d0e80f0d5602eb1b995a7081e8fc88aa2a605f9dafea957090dc9bbdc6d4b1", 0xbf}], 0x10000000000002de, 0x0) getpeername$l2tp(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000080)=0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r3 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000040)={r6, 0x9, 0xfffd}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={r6, 0x80, 0x0, 0x2, 0xb3b}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000001c0)={r6, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x3, 0x9, 0x1000, 0x4, 0x200, 0x100000000, 0x7, 0x3, 0x80, 0x7f, 0x8, 0x4, 0x5, 0xfffffffffffffff8, 0xe4]}, &(0x7f00000000c0)=0x100) 02:07:07 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x2400, 0xa, 0x1d, 0x10, "3ac28e6ddafb389c6fc7d2e40893d00bbabb824bd4737507ab5c30e1b0174d101ab3bef4a2caab87e3b69f68fc38ba060c1dae5bf159100ddfd43635b2dfbafd", "0de3b771ba090000000000000026d4ff0f00000000000020f766d97778d76978", [0xaae4, 0x517]}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 02:07:07 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000080)=@req={0x9, 0x0, 0xffffffff, 0x9}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1021.448664] binder: 28031:28034 ioctl c0306201 0 returned -14 [ 1021.461318] binder: 28029:28035 ioctl c0306201 0 returned -14 02:07:07 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x38, 0x2, 0x10000011, 0x0, 0x8}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r6, 0xfffffffffffffdb5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r7}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r5, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000040)='/dev/binder#\x00', r7}, 0x30) [ 1021.557503] binder: 28044:28045 ioctl c0306201 0 returned -14 [ 1021.581960] binder: 28029:28046 ioctl c0306201 0 returned -14 [ 1021.591559] binder: 28031:28047 ioctl c0306201 0 returned -14 [ 1021.617617] binder: 28044:28048 ioctl c0306201 0 returned -14 02:07:07 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000040)=0xffff) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1021.863751] binder: 28050:28051 ioctl c0306201 0 returned -14 [ 1021.917034] binder: 28050:28054 ioctl c0306201 0 returned -14 [ 1021.923507] binder: 28050:28054 ioctl 1261 20000040 returned -22 02:07:08 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r7, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/autofs\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r10, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x1) io_submit(0x0, 0x5, &(0x7f0000001600)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x1, r0, &(0x7f0000000040)="b3894548499c6972ebf0b1e5612e356bae813b4e9a119debbef405e4c9a70d5712065a44534db6b70a1cdff0ca2f799feaf27ee65f5a7d0d457abb132acdd12deb980888f29a100c2a36f1a5f1e1f158ae24e0fa53fc0d67576973375c8ed467cac89386685e29a801f0cf3f3a9e6b2c8a9bf65f398e6922b6e42900b3c417046c04969340d7831f3ed7", 0x8a, 0x7cc, 0x0, 0x1, r3}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000015c0)="0726fb15c5f52571695f835b370250fdf425fcb2acea3f82082178965c21d2f99ab7ee6b776300aa141e0a1f2e4dc51dd5e8941c56bd458cac", 0x39, 0x5}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x525f0cbe64135333, 0x3, 0xffffffffffffffff, &(0x7f0000000200)="6803a234004ba6b52b71f4462622e2664c2f6b67c4988780264aca3c38c048bde6494f6443c85c7f9420fc5c6012ba68a4f9b3681809d727241683b2f4718bd645eb871d39d7f9a1c14e9340434432906fb34fc07055c941b689e8c76be245e3fa52ac4b996e9e379740b106f4bcef66d11fd667853d", 0x76, 0xcdca, 0x0, 0x3, r6}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x55f, 0xffffffffffffffff, &(0x7f00000002c0)="9bb1c1658bb8423759f408dbcea3c0562a7ad4659f0b8ec4f6e18dfa26196c74e47d250fb89037740605d1422268369a51d3c35ebd12331fa1fda8750ae20d01957d8a8b0e1349c1776604c0fb830be025b7d4f667a28297d20c9711f03847f1da000064263abcdff7c60c904382f42248a68fc7dbc81ab9e7c818d6c547595fbdbedfae7deeb36080f408c02700e5061558a88cb0a560ef9f2603ce4a2346ab4b34d4b416734a163e13329f4f30005278142b3336ecec3638f097d8d8b1ca67bad5068731960b055a458740c90b38b8e3c3", 0xd2, 0x2, 0x0, 0x0, r8}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x3, 0x4, r9, &(0x7f0000000540)="e74ef0cc048dae3a4b6350a6df3ff9cc43e381dbbb03f27c47ed66d43f9fe09fede85267368bcefe0a23dadafcf6a767dd6e5898da988d30bb989d3d65f48cff9b34c7d43eca21ca3ccbd345426c155ef0b2e39ec143fe1f6a2793142aecc06bba88d9b0ea2622fe9b97ce469692df0eccd71f530583add2c5686d104dd623aac082223315e38a972489c48517786d15128d436df0fb4c85dbb17b80c08aa993b696c9ba1b89ce2a1e1cb29de2a88df7541ed2057ba56a0145d858e9969575f1d33b0c5622ca075413521b4b9a1926a5d770ce31d864107201ea8277537345feca67b8f70396fffe8788acb4d110df2f1874a8ef4db6a2a5349960a041e7dd55c43d745a291a0b174fce1b383dc0f58674743ffaf01c6928be9b69121457c29a8a4ea706e67932ea147b880a815dc8e807fc90d7bc8d2604d5ea12758bbe5b321f1fa5b28ce3745cd37befc8b83a592c0a29f8beb5ccc448e3a83fb8c2677ccdee2727e9a492862188a1c1e5e7ed4b7d7deda77bad929b2ce1a99964c3211ded21169997b90944a955d14993c822cd8b4d4319f43fadf47acf6c7a9e50c9dd944f66640a0c41cc6b4d38beb1b2653d5450968e90c7accd511f4065582caa8455120e069a1e526bb25aa49616c9451253a433bc015f0f5622b9b9f6668e5b40268add852b1092b01fcaa976331cb463e425cd35021b49424b325c3cc3271b261d434b13f8204e091aba5fcd978c2d1e16465c154c0bf482c5ec56564ccf48c64fccfcb4090628d44decb72d622765c41d6e892ddbd085ddab89cdf91172faee5f830529a4476bdb2130a4afaa493bf4e5832c1cfd9d7b74b1aad794d3c9c603407afaf6fc4c630610ab334e1ff8bc33bfb17003e3ec960ecd0eee760185c78d3866cf55de067b90a64fbb83965a6b89fb5c79ae732f473a0042f30fae87542168bf151757be61773045a3b1bd0b6527cd473205254e0b603792e14de89d72d0f8dc294678b6eaaa68e9ee86fcea0cb8512d31610b1ecb24311bc8b5e4ededf0d2d6c666d2e4e9a67bab7e3e0ddffc7053b4ce4b75275d188cd1462a37bdc648197bef88518cea746068e4f91f6cb4137a3c16508f9d8b4f4ef31249632c021ff15153b237171348961807a1f066f6ee9dbf9a2d8d6e179bd6376e2e80d56c648e8426813171cf8465333681ca22512a07d32bf5775be9110fbb9145f1912791b923f7874618a892c47fc60fd293be4d77b5baf5e619b68bc5ac15456376bb57be0d5976ea5c1e81224896f9f75f4db09434f7a7116b2c7f669061310f55b59da81b022b3b57a4a40d7b31bbc7e9e1812b91b8d4cc2383aa5bd8855b7424873215f56e1ca9b8d42ce9d954c735d6e8f04ee684a5f30b52168c1282524a1d08fad967c6c81b1563747a02645c7e06ba783d15efbba67fd96376e7261c8fd6bc90c0b918d857b6f4c866c58ff7dc9cfb1a98af09804ffd593b94a0cd3d26c9f00a258942b16ee1093daaf38a2913a93e56c3250e5411466e35024f0e6e304ba71c787b45c63e1f1e36667faea14a3538518a5bba289c7ab31bb6c170faa9e5486f6d52e72316c56404cc6f8828d11eb03dd7153844923a9a6e7e1ad513df1a590e19736ac3fb0fee03787cd9776dc93ad8c5483b3446703aca0bf042a86cf14eac339a5e9bef7d474eb00b400c7a4b4a9b21d537ffc9b6cb554fe41004848eec22fb2687b520302a94568f27a454315847e385f9510940c6a23bd74f564cfd6321561d3b62ab6e9cf966479618acb5a6035653153af8634f63b76d1113e3d2272238532d477a08f70aa91999e428f4fd89d8f3be3e2763172c5b481278954f6df3f7c2f682373aa8c2248227ca283282413856ea4ecf3a063a5973a96e160199112c8a8ce038faede9e1808e1c4d2cbcfad146c6bbee9c38ab07aca9e65f117d52cc7ae30bb586ef13839bbb8f665ef8c3ab84a377c1a115b3f8deb9ec54d33ea18f2ac7705ba683318686bcc679d508f7ceb4a1f73212aac43be6ab5a4dd92dc95cebca6ca516f49ffd41720ccabd1b56805f8fd5f6d88f57094150319ea1dc03be185c7e1871488fd515f4e29743db63d8b51b6ecfd7bcf0406bd58a1b0f8817543cfbe4ae28c1e9ebd1d147b59aadf7564dc54dced8ee0289c879a56e62534f1e587f50919d075cdfe829d9fcc55353b3f127fa6bfdb253e32e750d09af26137f460f67f6fb900005b00f474e7e40bbda7b67e98d895135d4a7d472e7302d5ca8ff1f066333af813dbdcf2774d079d7271c453260125e63d0089d1df309bd7cb4ea1f1e72e2659e7097a486835a2c1602d6fa33090ec283b451d8e15956691e4cee351259cbdfc0a68207cd96932a02c69d7ed9b6cadb868095f4ec1221f28172137be01751481044ea88f68f862bb825161466e75931ab606d3c1bf2122d89a86882a69b5bdd5bc7926922504edfb318f75cefb9b3e0c7a9aa28d3fdf152f5d74279177ebdda346c1ae3425356e74d5f90714254e8f2ccd92d7a3d390447e091b5e9b4ca16269e0ecad5f4f1b8fe7425565848075df25741efecae67e8e74f793ba7482a969209e20ad3c93e61f60a98799818a7bd9ecbd855075c44b19f97d915de13582a83b77d6bc081278e3383afbe391869b29666ee4ed1b3fa9cf2b22b5463bf3b581c077c69ecc511f193966f73284682890ec0e6820f39d6f04e23d8f859316db2d1e705db1b0114db97a175373c044c5f05383350f01ece2fa4568c537eb7d4a4b3bc070fb24219ce1bc3c839cf697c4ffc50bdeed0e7070dd9f7320922caedd66db4461bfda279ebd6d90d4cdf4447b00ed53a807fbef68ef06edee067b8953ce4664e6571a2a906e820a9793aac292882161b1874301c811f44392afc17584988ef0e4b3a44fb555ac83f218be08d5a6d30df5ffb7396cdbbbd8d81d470ba4fecc76c36d284f1434cc00595a9761fe686d274b795eed9c7794b47945d464069a7899da99cbcf7f1a9f6e59f62aceb462d0c80f6102ee47bde52dc2f0ecbb5710f754e1727cd784eefa6a3524ecebdeeab0036f177f575380413dc7fdb1f42128a1471f6c95db716ac289f3fe2e7bbbfe7a68fda4d0331413740a1953da037fce042f6027765ee4807cb72d285dfc9320784c5a52da54bd74bd0ade757414ce2ee6ce7617553423323dbcd2d3c2bd9af5922051ffd56f9e30a22c7425e380f2670b557424d15512090b70c5cb91e8270c365fc435283c39b885a33245951fd7239c701a30e04b6473a445b4e90e47089f4e85d4a672d5728de0230c2c7263b6ab534c349814bc27581d3b4ea708d249a179672950ad075433824027fac2734fa1bf3ec57f9e944c115d9dcb8d6b22f323680b717e6d6c03ed23babce542dc212e53bd655eb01e6e2f004a835781529a8c851653bc68fb6609e69e14a9b78644ff78d0a0abbb6576c439c8c759783dde1dd636978520e0f57ae853d7d533a113e7664114f5c759265c5e7fedbada752ce62cf91c7b67202e0fa321fd692c037e53a83edb16a3f96df6dba43d62ed9cb5ba3d4eff79a4b439157fbd4275faadeaa975ffd2021123291847f590447ab98155ea40548601b44f5771d0a8b138ec2352dca74ae856c52df5e5093028ed6a1f9c3f7b5d18b15118f3e6d4d7e197ebade3e3b045aece1182d01ec4f10070fd74a3fefb4420777dab2e460b31ba206ca080166fce338b3d65d64e29d3c2bd650b711360b6188156b64064f03d8d02ffbb72244ccf15ce12b1b06125d37afe1873043c59ad2c981cfa29f7d857da63365156f358737bfb7d20220a3fe8bc1ba5feb216c45a0f9947dd1b78b31e9bcd8ec846a7a0c06354affb84d9325a02a3e813e4bf75a217e40f170b7a2170da663186243b1e7b9942ec1f1869e856ea54fafe3e5717565a7e0779af24a3a1ef571ec556f14cbb8545262f0b9f63bb70e1a69c550263a4b2452536ad1251497a47fa7795854a77dae4e634cc1e9ef8f6adcc1c9b9f26fa253d1439daf0b38eb44dab89065ab582b24ce49356b0c9a8aaaf22e1400445b02b1e6c42250c92fad49163548009731025759986b69f1bc6d3a25768d6dfea94f67fb4e5eb89706f78e28498a7e12da19653e5da5a8619e94bd40b9efa07f8e341fb30a0a1d37d4245eeb4c3c64060f1c1e8bf751755468f60acacd7dace2ca910834fb0b262322abb3f5b57bde0ec43f8a3e5593aa9344089beb0b22052291f3dcf688d2f3f96279cded506779224d46236523e17460d88f23cf0ce1b4a9ecad484a8f5f5b68e920e70a9fa671f07b311cff4cbb377fbfd2a1d252c9b8d98d1ec763a91176f7738ff11f59e029617596c1b6b81952d000c23ff74e0a49ea1c5df0b02f5e7ee1c08150a2c2fb4da7a4dae1e9b0b158f2e167c50f355c6555a2f377685fa1314033f935889cc574fe657c14e37749a2aacd7759e12c94ec06df911e9c4e0f88737cd0fbfc5ba458e2ac2fbbb9dbacaf4b9a94cd30210c8134e3662f77ce9b13f6e0b712771ef82ba5d97b1538e10bf66d48db3435358c2b19481694f83edbb129700bfcd5d2cfe4a8c60244df915fedc45f4d8204acc6b1e9704c54f5a25be2ad6c143796a32e67d114eed507118fe45030115b551d932c14f417c7f307c35ffadd7ec289e57c163be1ab651b4daf0259f4aadb47f5c112b69174c599d0044668687caa8d57bd44c5dfc268c71cf6a49b979dcd725da4d88483f4d7b3276fbc69dea726575a92bb30a3b08bb1a1b5fc044f65d1ff86a86cc20d4cba5984a3fc9211d7d8b165a570300df645d95919976df741149f4dedebae4a89ce684e486fb64272f7005b84e993838ddf81e80ff97803e7adbdc61597c7840000ff578ab7e737df6f86c087b8da5f083578ac39a8ad808aa9408c1e3c86a78a62da5b31d4261b91f2697e36235d1ca06f2c64a7cd6e97aa30736240cd8df72dfe923d49f7f4bbee75cb8e2bd88c02d58ab29b4bbd80412954f18644adf50633a1e0122fc7b8758efda791829a3b3113a3be447d18c8f1e8499007915ee1cde9e0612774d32405a7a090c2d3cfd7f51bb31b2d7a988a710468b6b05ce0d6b9bcb9f1990ff00714658b1edad6c625caa659fb959bd094f8017732390e3ba8deecfb1b10fd1ee525366f70a6f799e8f3294b0714bc22bc65b2aa2b7b1d7efe4ed55aefeacf110bfce9606d80774e61440b3f8781a01970798169450aa46f05f0743e0ee067f0b9f9548a70b813bd3ca266e9b1b1b07d994ffdeea5e226dc5aced6719519dd79dca7b5124605001da103bc6ed923fddba29d74731ffd6a3c03ee3a3cbe3bec1b4a3e93a78b17bb237abcb3e7d93fed959289891f97d8105fbcf3314d594dae419d3754a173e9b2e987711b6b82eb089c1094a9c43333bd9ce252c50ce19af6a788d3edbd1c60eb3a24e412c872c11438327287ab4d5674bc3f234a1055770f28059fa89b0be4172ef4c48fc4ca817d6020196fbaa8b206ebbb3c919a60bff496ad13bb8b5daf4f4a1c53440849ca12561290007d6431b9ae2a5db9c31c0b5a258b380f4001e9bfe35dc1b79c76e68f6aa9a9c95cbd1258fbd1561cbe66f63d09f7179fd8c4d7c6d512b57c25e0c4dc6b401eca54101825d6ca885cbf6e55ad438e7127ae534a5356ea5014b0caaeb14b711dbb556033f1ae672bd224bc2292b41e149574cfa4e6fec091cdbc24ce35641e31eb506da1af82a87abdb23f64f7d5cd71f80fdf1f90ebbfc428aafa92f65cc128e1942d9225399112d4f5c6b4c02fb7a1", 0x1000, 0x3ff, 0x0, 0x2, r10}]) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 02:07:08 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x7ff, 0x210b00) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x3, 0x8, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r3 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) 02:07:08 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x400000, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) r3 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1022.299004] binder: 28056:28060 ioctl c0306201 0 returned -14 [ 1022.317367] binder: 28057:28061 ioctl c0306201 0 returned -14 02:07:08 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1022.356274] binder: 28044:28048 ioctl c0306201 0 returned -14 [ 1022.364086] binder: 28044:28048 ioctl c0306201 0 returned -14 [ 1022.403921] binder: 28070:28071 ioctl c0306201 0 returned -14 [ 1022.424751] binder: 28057:28075 ioctl c0306201 0 returned -14 [ 1022.457737] binder: 28070:28077 ioctl c0306201 0 returned -14 [ 1022.462953] binder: 28056:28076 ioctl c0306201 0 returned -14 02:07:08 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x802) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1022.657296] binder: 28050:28054 ioctl c0306201 0 returned -14 [ 1022.663925] binder: 28050:28054 ioctl 1261 20000040 returned -22 [ 1022.703504] binder: 28080:28081 ioctl c0306201 0 returned -14 [ 1022.756707] binder: 28080:28084 ioctl c0306201 0 returned -14 02:07:08 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x3c}}, 0x40050) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1023.099049] binder: 28057:28086 ioctl c0306201 0 returned -14 [ 1023.202055] binder: 28070:28077 ioctl c0306201 0 returned -14 [ 1023.501063] binder: 28080:28084 ioctl c0306201 0 returned -14 02:07:10 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYRES64=r3], &(0x7f00000001c0)='GPL\x00', 0x0, 0xffffffffffffff6f, 0x0, 0x0, 0xa, [], 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) write(r4, &(0x7f0000000a80)="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", 0x101) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 02:07:10 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup3(0xffffffffffffffff, r0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r1, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6c, &(0x7f000059aff8)={r2}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000040)={r2, 0x9, 0xfffd}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={r2, 0x80, 0x0, 0x2, 0xb3b}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000000c0)={r2, 0x7, 0x3}, 0x8) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) r5 = dup2(r4, r3) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) 02:07:10 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000280)=[{&(0x7f0000000040)="9244c6dc08d8019499785ac318aed86298b9dead2064f17ef5e0a0def4778612b31a8aa90ae821c7ee40fac449cbfddb18cb5aa6bc05362f9f20d9a3958f120222bf671220646dd39960bb505c907a63244e2c7898bfdba3c4720187fe62bf1d59d87025478089860bf434d6ea1cdee3196dae6ebef599247d9688aeafb6a4039c6331e4f4e65bf0c834eb8d0c9a47cb2207101f157bd9bf0d390159a7fb3a2341e9daec181e154eeff852cedf19f3fb38f7732b899d3c901de2e4fc02b624c9d0f9d09d363bacc1f90d6d9500b7d7ad26a59032c2b162bc812eb83b73a759535753a71cbbca3f3ef73646c5560f4e14456549ae6b", 0xf5}, {&(0x7f00000002c0)='bx', 0x2}, {&(0x7f0000000200)="1a3560361cedf0988f55eabc5b1aa9c8ea466970fda3c8893747c6e9ac05845c4fcac545d5ae9bf60bd6bc18d872fdd1ab26daa73bfa5f5c14fd58ad6126ee5a91bccebca1337b29e1b7f2e02775fbdcc461be50b4e79fc354f0c4b810f9141b7a940e8734222d55848ea6", 0x6b}, {&(0x7f00000007c0)="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", 0x1000}], 0x4, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x2400, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r5, 0xc02464bb, &(0x7f0000000300)={0x0, 0x5ca, 0xfffffffe, 0x5, 0xffffff80, 0x10000000, 0x0, 0x10001, 0x7}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:07:10 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f0000000040)) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)={0x1c}, 0x1c}}, 0x0) chdir(0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r6) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000000000000000008003e00000000000000c2d2bb7ec7003e309e8f086d9e68b0fb96a68c5b61ff1c219efb3bbe41fb61c448996804779e1b6e84c43076d84482ca88362579f335442a25b2055860078fbe41d3635fe997b4af40a42ad8952c5612a4d9de61eea0c220f7cd53613f1df38038b8fc9fc77f62aece5e66bf1a3aa55d399ff91bdcda6d95d8e2", @ANYRES32, @ANYBLOB='\x00'/28]) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r7 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x3) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) pipe(&(0x7f0000000180)) 02:07:10 executing program 3: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() tkill(r1, 0x1000000000016) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) tkill(r2, 0x3) ptrace(0x10, r0) ptrace$peeksig(0x2, r0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000080)) 02:07:10 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000000000000bfa30000000000004503000000fefff67a0af0ffe8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000100b7050000220000006a0a00fe00000000850000000b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3487bb07eb78c27b090941bd3108d31287801000000000000000012cf6956e09d1938013c217e0f6ab2366e8a87554c101f03733d40c62753ecd1f46f09beb1bbfad9bae24b4e8a96ec60f2af47f99376e43836ba33fd5a447f936e000755861103bb45e5d53c9fe36bbd35e53c6376c0c2b1daa58a9c34444bb7e9673476d017fc94c5857ead931db6cd370e93b6d5a74cc1d2c50896249ed7420f8680a730d876c36a1f3f1b8eb12d9390a49f2d99b5df916269392e0d0000556ec919d0b1681369d448c6f8c9969baa463b36d25ac1628ef858a5cc77c14c8df67f20fd224829af6de3d5ef71857496714db96c6db18ea5189cfbddd6e4de3617adabc339334b97b11911905d6692a33f1f370c05e1f134e5f90a326b0cb5268e40f5ba9b5360a516c3f87f05e5d1af657c445131edb61670ff2c62117e96eba22382758239e69127d5656e63bf02af42a5ac113879bfc27d7e6ba1f41301065efb1685e65f30df092251d556a89c2886ea64bc457280330dc9cdb6db023433e9ba97796a7823d241795ab1258fe937312fc5e921e8758153be202f000055a4921970e28e6238580101b710cf8b82bcab02c12fe01bd8df4e97c67e8a3693b23668c55eed4e24eafa16a4f43b6729990a9321531e5eb006b547c13cdfa2fa211d07a29377ea1c5aa7f5d58331ad45fc89ac44c9d2d6b3ac03ce76fc9d341f076264f8cf493901ad919329a295f63be4e91417b9cd09cf47272d46666571f24d71fcff2a9e869c2144f5775c37084acc57b5793f25f853f7a98965e5bd9ff5253f787eb321572355c706d6d2e27c475fd077876a4405b72b00000000000000b79d8029af8de217c23f79e68fe48420cbb226a752b817fc17efaa1268c6"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r6, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000000000000bfa30000000000004503000000fefff67a0af0ffe8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000100b7050000220000006a0a00fe00000000850000000b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3487bb07eb78c27b090941bd3108d31287801000000000000000012cf6956e09d1938013c217e0f6ab2366e8a87554c101f03733d40c62753ecd1f46f09beb1bbfad9bae24b4e8a96ec60f2af47f99376e43836ba33fd5a447f936e000755861103bb45e5d53c9fe36bbd35e53c6376c0c2b1daa58a9c34444bb7e9673476d017fc94c5857ead931db6cd370e93b6d5a74cc1d2c50896249ed7420f8680a730d876c36a1f3f1b8eb12d9390a49f2d99b5df916269392e0d0000556ec919d0b1681369d448c6f8c9969baa463b36d25ac1628ef858a5cc77c14c8df67f20fd224829af6de3d5ef71857496714db96c6db18ea5189cfbddd6e4de3617adabc339334b97b11911905d6692a33f1f370c05e1f134e5f90a326b0cb5268e40f5ba9b5360a516c3f87f05e5d1af657c445131edb61670ff2c62117e96eba22382758239e69127d5656e63bf02af42a5ac113879bfc27d7e6ba1f41301065efb1685e65f30df092251d556a89c2886ea64bc457280330dc9cdb6db023433e9ba97796a7823d241795ab1258fe937312fc5e921e8758153be202f000055a4921970e28e6238580101b710cf8b82bcab02c12fe01bd8df4e97c67e8a3693b23668c55eed4e24eafa16a4f43b6729990a9321531e5eb006b547c13cdfa2fa211d07a29377ea1c5aa7f5d58331ad45fc89ac44c9d2d6b3ac03ce76fc9d341f076264f8cf493901ad919329a295f63be4e91417b9cd09cf47272d46666571f24d71fcff2a9e869c2144f5775c37084acc57b5793f25f853f7a98965e5bd9ff5253f787eb321572355c706d6d2e27c475fd077876a4405b72b00000000000000b79d8029af8de217c23f79e68fe48420cbb226a752b817fc17efaa1268c6"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r7, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r2, @ANYRESOCT=r6, @ANYRESOCT=0x0, @ANYRESOCT=r8], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1024.455860] binder: 28100:28107 ioctl c0306201 0 returned -14 [ 1024.466572] binder: 28102:28110 ioctl c0306201 0 returned -14 [ 1024.466760] audit: type=1804 audit(1592791630.234:170): pid=28106 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir629514526/syzkaller.SzuZvB/1541/file0" dev="sda1" ino=16290 res=1 02:07:10 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000077d76dc9a5240000800200"/28], 0x1c}}, 0x0) sendto(r2, &(0x7f0000000080)="ebfc7f1e56da5f19929c234338198c00afe354de6c95516045d29290b75d0e408b1648b401e6fbbb2e23d62a8ce701710f0894151c60069a7785c8885dfc6323f147b9", 0x43, 0x4000044, &(0x7f00000001c0)=@nfc={0x27, 0x0, 0x1, 0x6}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r3 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={&(0x7f0000000240)="01e518b06aed3bb5e18ea14de29761c87a6f5d92553ac1c0d9b2281c6b42bcbc5a88d7b4843d2aeb86ea4fd7eb43e31e9a84f40f09ce28dfbcf2cddd169f2020f7ffbd205c049bc0943afaf38f292b8407545ce21d", &(0x7f00000007c0)=""/4096, &(0x7f00000002c0)="18ac5c3a7cf3c9382b9a8da72974b10846b24f97bfb6622bd2ef821b97d0fda55b3ca14398ff99dd4e494bebbce20a915c47e6383a64ffb9b602198269337ca5a82432d78e12d58f7908619d45c9bee549b0", &(0x7f0000000340)="513f410a822c60ce4e7baf2bc66dd122f08bca76dd9304682b5c30fa66d8d9f42959a0b06914207fdcc0673c9f6ac9cbe047c7c32a9c635a2ff4d255bee036a2dae8feab93f705018c573e063e8e5fd0bfa8bfbe948ef4a3be1b903b3dded1cd373a8cec4ce332b2f05bf99e275499a81b9d5720f538119abaa67010498ba741d263229c234f06592ba9165c007bbcee82bd60141750aaece8127fb99f03b7f9d07dea0307883b86461971b1934ec4", 0x80, r4, 0x4}, 0x38) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x8) 02:07:10 executing program 3: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() tkill(r1, 0x1000000000016) ptrace(0x10, r0) ptrace$peeksig(0x2, r0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x2) dup2(r2, r3) ioctl$TIOCNOTTY(r3, 0x5422) [ 1024.504515] binder: 28103:28106 ioctl c0306201 0 returned -14 [ 1024.514648] binder: 28103:28106 ioctl c0306201 0 returned -14 [ 1024.538101] binder: 28102:28119 ioctl c0306201 0 returned -14 [ 1024.558105] binder: 28100:28107 ioctl c0306201 0 returned -14 [ 1024.569463] binder: 28101:28115 ioctl c0306201 0 returned -14 [ 1024.571655] binder: 28120:28121 ioctl c0306201 0 returned -14 [ 1024.645456] binder: 28120:28132 ioctl c0306201 0 returned -14 [ 1024.673529] binder: 28101:28134 ioctl c0306201 0 returned -14 02:07:11 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r3, 0x8982, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 02:07:11 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x2) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) bind$l2tp(r7, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x1}, 0x10) dup2(r5, r6) ioctl$TCSETXF(r6, 0x5434, &(0x7f0000000040)={0x7, 0x1, [0x7, 0x1, 0x8001, 0xfffc, 0x4], 0x5}) 02:07:11 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/net/pfkey\x00', 0xa002, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000440)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f00000005c0)=0x14) r3 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000080)=0x6) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1025.263135] binder: 28102:28119 ioctl c0306201 0 returned -14 02:07:11 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) inotify_add_watch(r5, &(0x7f0000000300)='./file0\x00', 0x80000000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r6, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r6, 0xc0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x28, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x2}, 0x0, 0x0, &(0x7f00000000c0)={0x1, 0xe, 0x9, 0x8}, &(0x7f0000000100)=0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=0x8}}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000001000000000000001f00", @ANYRES32=r7, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x108, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x900}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0xd8, 0x2, [@TCA_CGROUP_ACT={0x36, 0x1, [@m_mirred={0xd0, 0x0, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}]}, {0x1b, 0x6, "3c0a793afd329cce9533c4396b8dcc136902ea634a913e"}}}]}]}}]}, 0x108}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x24, 0x0, 0x8430296aaf521ccc, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xb99c}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 1025.347458] binder: 28137:28142 ioctl c0306201 0 returned -14 [ 1025.354405] binder: 28139:28141 ioctl c0306201 0 returned -14 [ 1025.362967] binder: 28120:28121 ioctl c0306201 0 returned -14 [ 1025.368594] binder: 28140:28144 ioctl 80045505 20000080 returned -22 [ 1025.399224] binder: 28145:28147 ioctl c0306201 0 returned -14 [ 1025.415095] binder: 28120:28121 ioctl c0306201 0 returned -14 02:07:11 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x100800) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r5, 0x80585414, &(0x7f0000000080)) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1025.471593] binder: 28145:28156 ioctl c0306201 0 returned -14 [ 1025.489362] binder: 28139:28158 ioctl c0306201 0 returned -14 [ 1025.495483] binder: 28137:28157 ioctl c0306201 0 returned -14 [ 1025.497186] binder: 28159:28160 ioctl c0306201 0 returned -14 [ 1025.556432] binder: 28159:28164 ioctl c0306201 0 returned -14 02:07:11 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000d05c23d1b6f41538a9c0fc7bacbb3f902631612aedc66a951415dbce45ec63c087330497f84278eed2af0026355d8d43f744dc98e80abb5f6055106cc1e47887a954b2744ab4dcc874dd6ded32673e15aa6303c798345e3b63b45b0920d43ae2930644915886101e0b5b5f3f8862005424df4c5642392ab58729fd73f914a0fae46da"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000080)={'team0\x00'}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:07:11 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x1, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x2) dup2(r0, r2) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{}, {}, {}, {}]}) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) r5 = dup2(r4, r3) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) 02:07:11 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="00fb7e00086be0caff009416ab96a465a835ed1dd159651b2f32b3bb3f711c67ee295eb9873081bfe4c726fb567fe8c0fef3a8fddd6b47050772b3aa9b870537905ba7f6fcef4e76fd3fb8b9cf5ee86070d5cad58c77ca742abcd303ec0e21bfd53517c51f6c9318821bf2a39abe44423d621b30eda2e28c5a0611b359e2c9ab8bf448fa43ed5ab9fd3be099d3e1421092d3d35af88e50427532657c9dc611af422c8510cdcaf167f62888fbcb2d56d10b7b4d0c5e747865e60a3b73260d73f1eb9bfb37d11feeed06938209c2faf350"], 0x7e, 0x0) sched_getattr(0x0, &(0x7f0000000a80)={0x38}, 0x38, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000000000000bfa30000000000004503000000fefff67a0af0ffe8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000100b7050000220000006a0a00fe00000000850000000b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3487bb07eb78c27b090941bd3108d31287801000000000000000012cf6956e09d1938013c217e0f6ab2366e8a87554c101f03733d40c62753ecd1f46f09beb1bbfad9bae24b4e8a96ec60f2af47f99376e43836ba33fd5a447f936e000755861103bb45e5d53c9fe36bbd35e53c6376c0c2b1daa58a9c34444bb7e9673476d017fc94c5857ead931db6cd370e93b6d5a74cc1d2c50896249ed7420f8680a730d876c36a1f3f1b8eb12d9390a49f2d99b5df916269392e0d0000556ea4ad9da251caf12b48c6f8c9969baa463b36d25ac1628ef858a5cc77c14c8df67f20fd224829af6de3d5ef71857496714db96c6db18ea5189cfbddd6e4de3617adabc339334b97b11911905d6692a33f1f370c05e1f134e5f90a326b0cb5268e40f5ba9b5360a516c3f87f05e5d1af657c445131edb61670ff2c62117e96eba22382758239e69127d5656e63bf02af42a5ac113879bfc27d7e6ba1f41301065efb1685e65f30df092251d556a89c2886ea64bc457280330dc9cdb6db023433e9ba97796a7823d241795ab1258fe937312fc5e921e8758153be202f000055a4921970e28e6238580101b710cf8b82bcab02c12fe01bd8df4e97c67e8a3693b23668c55eed4e24eafa16a4f43b6729990a9321531e5eb006b547c13cdfa2fa211d07a29377ea1c5aa7f5d58331ad45fc89ac44c9d2d6b3ac03ce76fc9d341f076264f8cf493901ad919329a295f63be4e91417b9cd09cf47272d46666571f24d71fcff2a9e869c2144f5775c37084acc57b5793f25f853f7a98965e5bd9ff5253f787eb321572355c706d6d2e27c475fd077876a4405b72b00000000000000b79d8029af8de217c23f79e68fe48420cbb226a752b817fc17efaa1268c6"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r8, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) io_submit(0x0, 0x6, &(0x7f0000000780)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x0, r6, &(0x7f0000000100)="be2951c9cf4259ab7e2436e1b11f4a22186a865043d28b4adb2a0a2263d7838888a8d47a317ba435cb4758e5879a83ee5bebe6561a61b284fd622af7c8bfed8cec2dbe100402644ddb1c8245a46783f898dd8f0435d2d0ef486237c65111a2527d6d", 0x62, 0x8, 0x0, 0x3, r7}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000680)="f157e2a80984c0269504c3a265e6d9d5e7e779024ad5421facbf1b54da3b58527cec3df98ab206acf57674d6430bf307422e9b46bd86707817ad4b4fd5e5ba240b60ec340bc32b03b2f83694fb310dd04def36bb5cfa0720f53d7ed59393589d8bee1fdd314a", 0x66, 0x100000001, 0x0, 0x3, r6}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7, 0x1070, 0xffffffffffffffff, &(0x7f0000000300)="e233ebb21e521848426bd99aef141285d354d0e83e742c012fb52209121d0678a734b59a723e8184492622aa80d2e43e95605984a6a6d3bfd703b1697736b10ab2b89652f7e946bb749d02c352a69f40360f6f3a547043ef259df1b0ac8bae99d88690ca8c86bd3ecf900587808249faa71b2bd04f89d8a324c0fcb35f4e804fc5000dfe30fdfbfa7ee56914423580550f614764511f819669dcfc9c329a9bc472a55cdf31ae7b935b5d9f6255e1995d1bc949e19dcf4d5df9c1319dda6e04750e3ad53948552738db3df956c66c2e1955", 0xd1, 0xfffffffffffffff7, 0x0, 0x0, r3}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x101, r5, &(0x7f0000000440)="a535d7633a6d9dc806d2", 0xa, 0x1, 0x0, 0x2, r4}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x1ff, r8, &(0x7f0000000580)="98e9c43bc95471815a4e8ef753051c22b6ac400e61412e07b8f9067e3965fee4b972c550d80d77d4b56e", 0x2a, 0x100000001, 0x0, 0x3, r9}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x8, 0x800, r4, &(0x7f0000000bc0)="631e2f4fb7e3b913529088ab76caaac39f31eca59f0029dcf46d377010928462823c68b7051d49986a5a2e651d8baf73a815aff0a902ca48ac99aa7e2a26811164b2d7c28df13f473711dd3f9b8aeedcc3042edf2d4d60ce4625f2364bd5314abf73690bbc47fc7da479d4347203a51f80bb05eeca906da1e5d970badc6ffeb49b8f7e90f23a85cd3b75174769cee718fdb39441da0438866f7f3fd466bab957677985b241577610c1fc1e9ab51f1a9a1c85450507f7e6e66f929549a8b6b21f8ffec3c3f1f66e6f548ee2a667f72e153cf0e9088bd466bb6eafc7e61ceb99783822f7043f27547e96ac3e402edd", 0xee, 0x7, 0x0, 0x1, r10}]) [ 1026.186817] binder: 28167:28169 unknown command -1039856384 [ 1026.193557] binder: 28145:28156 ioctl c0306201 0 returned -14 [ 1026.204713] binder: 28167:28169 ioctl c0306201 20000200 returned -22 [ 1026.216637] Unknown ioctl -1073449922 [ 1026.218430] binder: 28170:28174 ioctl c0306201 0 returned -14 [ 1026.238582] binder: 28168:28172 ioctl c0306201 0 returned -14 [ 1026.295160] binder: 28159:28164 ioctl c0306201 0 returned -14 [ 1026.306330] binder: 28159:28164 ioctl c0306201 0 returned -14 02:07:12 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) clock_settime(0x3, &(0x7f0000000340)={0x77359400}) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r4, 0x40184152, &(0x7f0000000100)={0x0, &(0x7f00000000c0)=[&(0x7f0000000040)='3\b', &(0x7f0000000080)="a5613c935bd47573bdf6216a10cd3eb219", &(0x7f00000001c0)="93bd80580725fc4fbb865fe29cb1410ab0b692b690d19c8b70a8572b13befe39351ba274e6d5b657ccb4e0c3b69c9bdc9361253620f234e071079b8fbf2e4b77ab1dc0c3ff087d7efd718a10f4fcff74f1a2e2e18ed178cb2ba470af20c0024e6d59d48333e5aa6b7999d46f0aa8a65c6f18eec339c7c87aead616d5c842e222e987eda0203ba3a9f3cf5044fc4b2f7d373b4f9e2fad", &(0x7f0000000280)="ece4b2297ecaeaa55a45ed509c85bbeaa0888b3ea129f266c566e5d69dc3b70bda12410f0734368c77ae2fe50405afc1baef588a39676f16b937d0638aa497052ad8c61234a5b724fd0d184665913778a4fe92ebe2ab80c169e62563e68b839b7c10e58749c16fbddc9c27b8b13b258822b16d82293094e44e08f170b4e47fb1586a0f2e3789bb15f8c0181d843749cd7e505c814a8cacb3be0c3d65c71228f055f103ddd572e2198d9b2ec3b363f9e31e"], 0xfffffffffffffffb}) io_setup(0x5, &(0x7f00000001c0)=0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_submit(r5, 0x1, &(0x7f0000000000)=[&(0x7f00000002c0)={0x1802, 0x0, 0x0, 0x1, 0x0, r6, 0x0}]) io_getevents(r5, 0x326e, 0x5, &(0x7f0000000540)=[{}, {}, {}, {}, {}], 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1026.351369] binder: 28168:28184 ioctl c0306201 0 returned -14 [ 1026.382430] binder: 28170:28185 ioctl c0306201 0 returned -14 [ 1026.442154] binder: 28186:28187 ioctl c0306201 0 returned -14 [ 1026.581882] binder: 28186:28192 ioctl c0306201 0 returned -14 02:07:12 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="1caeb000000043000100000000000000000002000000058eb249c43d8db572c0fdef99827f1a1f00365216178f2606129f600c000000001434579a8a19dcf3eb971a8e75231f879dab011acaade1275725ca6187d4f2965b541cdfc061173a16f949da72e1576c6d2350d15d056ecdc4ec3944691b4ae02361f43fd941ed334b194d485315380b"], 0x1c}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="000127bd70ecfadbdf250200000004000180b03bc7eea27fd426dfe99c6f4cc720937c761dd34dc995b1672bf5e57963cc5b9216ea62d0dc1764dcb69d2844ce765d4ee351c6d3a73743935bf1b4bbf40fd775d3e8840575cd01824798732ab7f34465d3d932d899c7087cc0cb91e1b47ddc5886d0eb9dd87d29052b68b92c433af73f211b94c448d3874481619e4e806e95a0594aab25d12a66c568c493b14411192946"], 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4008810) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x174, r6, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x134, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x174}}, 0x4000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:07:12 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1027.042792] binder: 28194:28196 ioctl c0306201 0 returned -14 [ 1027.067444] binder: 28195:28197 unknown command 0 [ 1027.084166] binder: 28195:28197 ioctl c0306201 20000200 returned -22 [ 1027.133351] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=28201 comm=syz-executor.0 [ 1027.148416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28201 comm=syz-executor.0 [ 1027.163117] binder: 28194:28201 ioctl c0306201 0 returned -14 02:07:13 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x80, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = dup2(r2, r1) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r5, 0x4c09, 0x9) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x80000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r8, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) ioctl$FS_IOC_FSGETXATTR(r8, 0x801c581f, &(0x7f0000000100)={0x0, 0x4, 0x1abc, 0x5, 0x1}) ioctl$ASHMEM_PURGE_ALL_CACHES(r7, 0x770a, 0x0) write(r6, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r9}, 0x2174, 0x6, 0x1}) 02:07:13 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x24040, 0x0) r2 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000000140)=0xfffffffa) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = shmget$private(0x0, 0x11000, 0x2, &(0x7f0000fed000/0x11000)=nil) shmat(r8, &(0x7f0000ffd000/0x2000)=nil, 0x2000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r6, 0x8983, &(0x7f0000000100)={0x7, 'bond_slave_1\x00', {0x1}, 0x6a}) write(r7, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x2885002, &(0x7f0000000240)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_user='access=user'}, {@cache_fscache='cache=fscache'}, {@nodevmap='nodevmap'}, {@version_u='version=9p2000.u'}], [{@euid_gt={'euid>'}}, {@fsmagic={'fsmagic', 0x3d, 0x5}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x63, 0x63, 0x56, 0x37, 0x31, 0x62, 0x34], 0x2d, [0x35, 0x34, 0x37, 0x1c], 0x2d, [0x28, 0x61, 0x63, 0x32], 0x2d, [0x38, 0x36, 0x30, 0x63], 0x2d, [0x30, 0x0, 0x38, 0x39, 0x30, 0x61, 0x62, 0x65]}}}, {@appraise_type='appraise_type=imasig'}, {@smackfshat={'smackfshat', 0x3d, '%&,{'}}, {@audit='audit'}, {@context={'context', 0x3d, 'system_u'}}, {@uid_eq={'uid'}}]}}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) 02:07:13 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r6, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r6], 0x1c}}, 0x8010) sendmsg$AUDIT_GET(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3e8, 0x200, 0x70bd29, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000001000000000000001f00", @ANYRES32, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x108, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x900}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0xd8, 0x2, [@TCA_CGROUP_ACT={0x36, 0x1, [@m_mirred={0xd0, 0x0, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}]}, {0x1b, 0x6, "3c0a793afd329cce9533c4396b8dcc136902ea634a913e"}}}]}]}}]}, 0x108}}, 0x0) bind$can_raw(r4, &(0x7f0000000300), 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r7, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:07:13 executing program 3: ioctl$SNDCTL_DSP_NONBLOCK(0xffffffffffffffff, 0x500e, 0x0) clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() tkill(r1, 0x1000000000016) ptrace(0x10, r0) prctl$PR_SET_PTRACER(0x59616d61, r1) ptrace$peeksig(0x2, r0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r6, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_delete(r6) setuid(r5) syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x2, 0x1, &(0x7f0000001080)=[{&(0x7f0000000080)="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", 0x1000, 0x1}], 0x12, &(0x7f00000010c0)={[{@commit={'commit', 0x3d, 0x10000}}], [{@fsuuid={'fsuuid', 0x3d, {[0x32, 0x63, 0x66, 0x66, 0x39, 0x34, 0x63, 0x39], 0x2d, [0x33, 0x66, 0x34, 0x30], 0x2d, [0x66, 0x31, 0x34, 0x30], 0x2d, [0xc, 0x30, 0x63, 0x31], 0x2d, [0x35, 0x36, 0x66, 0x36, 0x37, 0x63, 0x65, 0x64]}}}, {@smackfshat={'smackfshat', 0x3d, '[,%*(-^'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@dont_appraise='dont_appraise'}, {@appraise_type='appraise_type=imasig'}, {@fowner_lt={'fowner<', r5}}]}) [ 1027.626457] binder: 28210:28212 ioctl c0306201 0 returned -14 [ 1027.639420] binder: 28209:28211 ioctl c0306201 0 returned -14 [ 1027.653624] binder: 28208:28213 ioctl c0306201 0 returned -14 [ 1027.709706] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1000 sclass=netlink_route_socket pid=28220 comm=syz-executor.5 [ 1027.725148] QAT: Invalid ioctl [ 1027.733296] binder: 28209:28220 ioctl c0306201 0 returned -14 [ 1027.789244] binder: 28208:28224 ioctl c0306201 0 returned -14 [ 1027.795060] binder: 28210:28225 ioctl c0306201 0 returned -14 02:07:13 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = add_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f00000002c0)="2b1526e48182e9a7852369c5cc0aa2094a2a3142871ccccae3f2f9d94be0b65c32b42a1da7f9703b90e5528cb24ecdbe6c0c4376e5d36d02e3a3d7eda26f3df2990e980cd86b17f36335aebc3105915577f4363eb766db880c0c62fbdc67e40593aed1ec0221799dea34b9f45a375a2ea5b4a802badaaaf9ba06aeeb7eb1e201b68f638a6152cc643b9d1eade02e35a042e9679419385682c871340bd7456fc572212704c0802a997f859379d268f9fb9d8b2e5c26f737f0d2e8f21dd977a0ede6f1540c4bcdb6ee3d580e27531a59c94a612cdea08e46cbb54279ec831d9843df0c2b66ccb791d0ccfbe5d1815c3b47b3", 0xf1, 0xfffffffffffffffe) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) keyctl$chown(0x4, r2, 0xee00, r3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) r4 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000000000000bfa30000000000004503000000fefff67a0af0ffe8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000100b7050000220000006a0a00fe00000000850000000b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3487bb07eb78c27b090941bd3108d31287801000000000000000012cf6956e09d1938013c217e0f6ab2366e8a87554c101f03733d40c62753ecd1f46f09beb1bbfad9bae24b4e8a96ec60f2af47f99376e43836ba33fd5a447f936e000755861103bb45e5d53c9fe36bbd35e53c6376c0c2b1daa58a9c34444bb7e9673476d017fc94c5857ead931db6cd370e93b6d5a74cc1d2c50896249ed7420f8680a730d876c36a1f3f1b8eb12d9390a49f2d99b5df916269392e0d0000556ec919d0b1681369d448c6f8c9969baa463b36d25ac1628ef858a5cc77c14c8df67f20fd224829af6de3d5ef71857496714db96c6db18ea5189cfbddd6e4de3617adabc339334b97b11911905d6692a33f1f370c05e1f134e5f90a326b0cb5268e40f5ba9b5360a516c3f87f05e5d1af657c445131edb61670ff2c62117e96eba22382758239e69127d5656e63bf02af42a5ac113879bfc27d7e6ba1f41301065efb1685e65f30df092251d556a89c2886ea64bc457280330dc9cdb6db023433e9ba97796a7823d241795ab1258fe937312fc5e921e8758153be202f000055a4921970e28e6238580101b710cf8b82bcab02c12fe01bd8df4e97c67e8a3693b23668c55eed4e24eafa16a4f43b6729990a9321531e5eb006b547c13cdfa2fa211d07a29377ea1c5aa7f5d58331ad45fc89ac44c9d2d6b3ac03ce76fc9d341f076264f8cf493901ad919329a295f63be4e91417b9cd09cf47272d46666571f24d71fcff2a9e869c2144f5775c37084acc57b5793f25f853f7a98965e5bd9ff5253f787eb321572355c706d6d2e27c475fd077876a4405b72b00000000000000b79d8029af8de217c23f79e68fe48420cbb226a752b817fc17efaa1268c6"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r6, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) vmsplice(r6, &(0x7f0000000700)=[{&(0x7f0000000140)="55f412", 0x3}, {&(0x7f00000005c0)="16e06bff88e0e50fb49229289c646210fe9dcfe5ebb0fbdad31954524340577bbf55c1b48e763d42cee50e5e60e6da8bff2bf4f7f282a71a493e2307f35797d94d1643d36278abf85a242911ba2c9faabd8fc958fe07639457", 0x59}, {&(0x7f00000001c0)="29cc035136723f5b954383f399a8", 0xe}, {&(0x7f0000000240)="1a5c87a0fe92e8bbceb13a1b79b90828b56a95dab6918f80c95ded8d", 0x1c}, {&(0x7f0000000640)="0d91cb786fd3e4b1468af028773ee1ac569dafd9f52260062fd6fa3b5f2dc980797699b3ffc84407b55a6d248f786d729bd3a7e48fe6d24635afa42df41ba427cbeeb599eed979b851f8b31f2a54fa689391d7a318c87c6fad4eb5568292d6263500825da9cf24bf19089bfb3fc6fc30dfc0658022c0493239a7bf38cf2d0e1af38349ca1ec781a58daf601f8876e01d1b6f483c0e5193a3af57670e62b318a43cd7e022ea1ac145bae4bfe963174a8afb0e3e", 0xb3}, {&(0x7f00000007c0)="804ca49e95652bfbf653f0faee68d8f946e8a13b824fbb2cca549f8d13dca5ba8ee4a57b3792604adecf787ec03742534ed4548287fdafcdc42dafc19fcf807428f0ae2b4158af556c968fa028445417864f7ae0da1c584b7019e29726882e6ee5dd3114f7dea698fc31db37e888476f789b87a5cffe01869e38f06610e788af1dcb526f91029264dfd5e32af41702cd046381b21cb862482cc0f2feea84eb8a35e1ea98d2d0f4e392de801e98", 0xad}], 0x6, 0x3) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1027.841145] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=28205 comm=syz-executor.0 [ 1027.852883] binder: BINDER_SET_CONTEXT_MGR already set [ 1027.858742] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28205 comm=syz-executor.0 [ 1027.869540] binder: 28195:28204 ioctl 40046207 0 returned -16 [ 1027.881344] binder: 28194:28228 ioctl c0306201 0 returned -14 02:07:13 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = dup3(0xffffffffffffffff, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x6c, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000040)={r7, 0x9, 0xfffd}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={r7, 0x80, 0x0, 0x2, 0xb3b}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={r7, 0x8, 0x6, [0xd4, 0x73, 0x478d, 0x400, 0x7c4c, 0x0]}, &(0x7f0000000080)=0x14) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1027.984022] binder: 28233:28235 ioctl c0306201 0 returned -14 [ 1028.040131] binder: 28233:28238 ioctl c0306201 0 returned -14 02:07:14 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_INFO(r3, 0x80386433, &(0x7f0000000080)=""/193) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000000040)='./file0\x00', 0x112) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_CROPCAP(r6, 0xc02c563a, &(0x7f00000001c0)={0xb, {0x8, 0x5, 0x7, 0x54}, {0xa2, 0x9, 0x7}, {0x1ff, 0x7fff}}) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 02:07:14 executing program 3: clone(0x40004000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() tkill(r1, 0x1000000000016) ptrace(0x10, r0) ptrace$peeksig(0x2, r0, 0x0, 0x0) [ 1028.422891] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1000 sclass=netlink_route_socket pid=28241 comm=syz-executor.5 [ 1028.443896] binder: 28209:28240 ioctl c0306201 0 returned -14 02:07:14 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="02000080", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x6c, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000040)={r5, 0x9, 0xfffd}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={r5, 0x80, 0x0, 0x2, 0xb3b}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000040)={r5, @in6={{0xa, 0x4e24, 0xfffffffd, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xb}}, 0x7}}, [0x432e79f9, 0x1, 0x1, 0x6, 0x5, 0x80000001, 0x3, 0x9, 0xffffffffffffff01, 0x7be, 0x1, 0xfff, 0xc4a, 0x5, 0x1]}, &(0x7f00000001c0)=0x100) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r6, 0x7fffffff}, 0x8) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1028.501507] binder: 28245:28248 ioctl c0306201 0 returned -14 02:07:14 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = dup3(0xffffffffffffffff, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff9222e34a3fae8118022000", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x6c, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000040)={r6, 0x9, 0xfffd}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={r6, 0x80, 0x0, 0x2, 0xb3b}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=r6, 0x4) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) [ 1028.542576] binder: 28250:28252 ioctl c0306201 0 returned -14 [ 1028.604509] binder: 28257:28259 ioctl c0306201 0 returned -14 [ 1028.635005] binder: 28245:28261 ioctl c0306201 0 returned -14 [ 1028.646057] binder: 28250:28262 ioctl c0306201 0 returned -14 02:07:14 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x4, 0x10000) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) ioctl$HDIO_GETGEO(r5, 0x301, &(0x7f0000000100)) write(r6, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r7, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRESDEC=r3, @ANYRES16=r2, @ANYRES32=r7, @ANYRESDEC=r4], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1028.753609] IPVS: ftp: loaded support on port[0] = 21 [ 1028.769185] binder: 28257:28270 ioctl c0306201 0 returned -14 [ 1028.779638] binder: 28233:28239 ioctl c0306201 0 returned -14 02:07:14 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000040)=0x7, 0x4) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = dup2(r2, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000040), 0x0, 0x8) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x2) dup2(r5, r6) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x1f}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x1000, 0x0, 0x3, 0x6, r7}, &(0x7f00000001c0)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:07:15 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 02:07:15 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x2) dup2(r6, r7) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x7, 0x20, 0x2, 0x9b}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f00000000c0)={r8, 0x80}, &(0x7f0000000100)=0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1029.313704] binder: 28281:28282 ioctl c0306201 0 returned -14 [ 1029.338176] binder: 28250:28262 ioctl c0306201 0 returned -14 [ 1029.372058] binder: 28283:28285 ioctl c0306201 0 returned -14 02:07:15 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = dup3(0xffffffffffffffff, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x6c, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000040)={r6, 0x9, 0xfffd}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={r6, 0x80, 0x0, 0x2, 0xb3b}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x400, 0xa, 0x34fbd1be, 0x8001, 0x9, 0x3f, 0x8, r6}, 0x20) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) [ 1029.428359] binder: 28283:28294 ioctl c0306201 0 returned -14 [ 1029.435325] binder: 28281:28295 ioctl c0306201 0 returned -14 [ 1029.492727] binder: 28298:28305 ioctl c0306201 0 returned -14 02:07:15 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r0, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 02:07:15 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) prlimit64(r5, 0x3, 0x0, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1029.639887] binder: BINDER_SET_CONTEXT_MGR already set [ 1029.645639] binder: 28315:28320 ioctl 40046207 0 returned -16 [ 1029.662141] binder: 28298:28321 ioctl c0306201 0 returned -14 [ 1029.739137] binder: 28323:28325 ioctl c0306201 0 returned -14 [ 1029.797171] binder: 28323:28327 ioctl c0306201 0 returned -14 02:07:15 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000000000000bfa30000000000004503000000fefff67a0af0ffe8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000100b7050000220000006a0a00fe00000000850000000b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3487bb07eb78c27b090941bd3108d31287801000000000000000012cf6956e09d1938013c217e0f6ab2366e8a87554c101f03733d40c62753ecd1f46f09beb1bbfad9bae24b4e8a96ec60f2af47f99376e43836ba33fd5a447f936e000755861103bb45e5d53c9fe36bbd35e53c6376c0c2b1daa58a9c34444bb7e9673476d017fc94c5857ead931db6cd370e93b6d5a74cc1d2c50896249ed7420f8680a730d876c36a1f3f1b8eb12d9390a49f2d99b5df916269392e0d0000556ec919d0b1681369d448c6f8c9969baa463b36d25ac1628ef858a5cc77c14c8df67f20fd224829af6de3d5ef71857496714db96c6db18ea5189cfbddd6e4de3617adabc339334b97b11911905d6692a33f1f370c05e1f134e5f90a326b0cb5268e40f5ba9b5360a516c3f87f05e5d1af657c445131edb61670ff2c62117e96eba22382758239e69127d5656e63bf02af42a5ac113879bfc27d7e6ba1f41301065efb1685e65f30df092251d556a89c2886ea64bc457280330dc9cdb6db023433e9ba97796a7823d241795ab1258fe937312fc5e921e8758153be202f000055a4921970e28e6238580101b710cf8b82bcab02c12fe01bd8df4e97c67e8a3693b23668c55eed4e24eafa16a4f43b6729990a9321531e5eb006b547c13cdfa2fa211d07a29377ea1c5aa7f5d58331ad45fc89ac44c9d2d6b3ac03ce76fc9d341f076264f8cf493901ad919329a295f63be4e91417b9cd09cf47272d46666571f24d71fcff2a9e869c2144f5775c37084acc57b5793f25f853f7a98965e5bd9ff5253f787eb321572355c706d6d2e27c475fd077876a4405b72b00000000000000b79d8029af8de217c23f79e68fe48420cbb226a752b817fc17efaa1268c6"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r3, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) ioctl(r3, 0x2, &(0x7f0000000040)="7f8d44023c6a258eb8f4ef775a216e1710fa49578f327450d193e9154e271df213535e4c811bfba63bcfe8a85d5e3e386043c02f70804bce179f9767d2b6868437bd86e78683814c6b377d44bfbafd23ef26094698d8511567adf51dce06a2541ebe9a7091b8da23818be2f2bdc2229d658d36147825998ae5cf51c0099b39894feede4b30fde4b74803511bf42126ec474a26f4a015313589cd60f72b2c04e70ff4d28f0d076a02e52eec") pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) [ 1030.137879] binder: 28329:28330 ioctl c0306201 0 returned -14 [ 1030.172724] binder: 28283:28294 ioctl c0306201 0 returned -14 02:07:15 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1030.181125] binder: 28283:28306 ioctl c0306201 0 returned -14 [ 1030.227084] binder: 28333:28334 ioctl c0306201 0 returned -14 [ 1030.243862] binder: 28329:28337 ioctl c0306201 0 returned -14 [ 1030.291648] binder: 28333:28338 ioctl c0306201 0 returned -14 [ 1030.533833] binder: 28323:28327 ioctl c0306201 0 returned -14 [ 1031.026612] binder: 28333:28338 ioctl c0306201 0 returned -14 02:07:17 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r5, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r6, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:07:17 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) ioctl$VT_WAITACTIVE(r2, 0x5607) syz_init_net_socket$x25(0x9, 0x5, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) getsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) pipe(&(0x7f0000000180)) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x30a7334dab56acab, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000080)=0x1f, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UI_SET_KEYBIT(r5, 0x40045565, 0x17b) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 02:07:17 executing program 0: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$SIOCRSACCEPT(r2, 0x89e3) r3 = dup2(r0, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) pipe(&(0x7f0000000180)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r6, 0x7, 0x75, 0x0, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63230f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee291f00000000000000031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x328, 0x0, 0x5c, 0xa7, &(0x7f00000007c0)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3", &(0x7f00000006c0)="5a84b24df4af38ac257bb1ad04700fc9d426b457b4f0b0272bf6f971ba9a3f3f75fb43503b2bc71c054877a0350e8b1d6e3728af6127c5b80fcb9c464a7130028b8b55a1d8a68bf6bdd36a15bf9a0e5831f36bd7c0dd7a7f6a617ec6ef523944037b618b7a6c7840bb7d73f9fd5114bb66b6eabecdcc355468d1d0c608878d40f9a42a05f9b5a3189c7e4b48e0160139f1d7f600000042928e8825bbabc0180143dffb32842eac"}, 0x40) io_submit(0x0, 0x4, &(0x7f0000000680)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x8, r2, &(0x7f0000000040)="33d3e6b3e21f690b1284d8f6e618ce2223f94e6756668855c89842895c82628b05dd5f1395535c5c7a739075d8d473f2f29e4e140d34f5007b49e388d8d76ece2afdb7958a6af5d4582557bec3e64e36d4413cf11acb16529292fddc2dafb451e97c5899e22533287483d5ac2f11670cb51b2b2e94e935dca1371a845c13f9ab202cfebc1c3444362ee15ecbc8c43642b0752da654ca6e78efa691fa619f4a11d23d129d2acd016c904599186d2a0f97578b242f3bac5e8f8c984dfda6d390a19a5904442a1d42e69a2a0c5bbe", 0xcd, 0x100, 0x0, 0x0, r1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0x3, r3, &(0x7f0000000200)="b4f2b26c84bac2b4937dc01736c433eec4856c56fbed6c51b86b432046d7788e194ad7ccf42d21430c795754d0807cbf47a892b7d46a39fdca41d0fb5d140c109e9cff4c111fe1e9fca26a8f6a8ed3abc5965b57c619afd37fb422fa052fb094d5ae4fe6934defb8202f1cc448cfe4f74f4885925818b5b361a2781435ad2a04e4e57107fde08fdd06f5dcb7721cb0be349022cae1bedbe4d7a9a247889bdac47b68fd49e7cb670bcf8dfdffe9c52945f37c490da1a51d43acb6af15b2ea58144988383e68ed7a9485ccc77ca1", 0xcd, 0x0, 0x0, 0x1, r5}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0xadf4, r6, &(0x7f0000000340)="6539437fb08233a2d968366cfcd6e3a3c0b0925e35f07dd1df0a488f2a8dd581480541bd31137bb4f0380f09889a1392f81be569b0e94befd18b4e93a26a02fcd9e69984a3fd5fa7bf9f379065ee29deac02eac002d404bce47b507ac2d447f306db6f50ecc302350c10e43ea2e60e5939e91cd27123dd84d7c35371578c633eb14bad9355305c1b8e5e5e75f130bf01e875bb5f73e2dc8653038a1d67b304af3d7570f7869eb406501b203b51a7b06372ff4a78c420103b69a4f4bf29820f5d0e39f0b89fa9aceacc8149c29cb4405de7955d6185286f639dcbcd371082d4", 0xdf, 0x2, 0x0, 0x1}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x3, r3, &(0x7f0000000540)="77964f3a3d122bfa1184368d8a53bf82fc58a8fa59e33d54d87f8fc80284aa38d6e060336d6bf7f581d687eea28945701404bd82dd78d884eebaeb6e9c6875b7ff4a618b33da7ecff57dbd7223d5aba18ab104addf7eb417063e93916d9b9063675cb66d50569c59bf44638b3181f18cd08a56a1825bc8d480c046f80ce330b6cd52f15bb3a0f3350dbceb6a880497c4eaede93986e0850c6e042ea32725255a8fcc03d5940ab1df511f4f3692db8925b20ba785c010e6ab653f837beea19ef5ab7f76f213bbbb0cb85ae90f7adcf3c852170293fdb0f87038fff6e686ba80458d789fcee72cfe808084a89d239af842", 0xf0, 0xfffffffffffff7f3, 0x0, 0x2}]) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:07:17 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 02:07:17 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) connect$llc(r3, &(0x7f0000000040)={0x1a, 0x30c, 0xea, 0x1, 0xfe, 0x0, @dev={[], 0x37}}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) connect$rds(r4, &(0x7f0000000080)={0x2, 0x4e21, @private=0xa010102}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:07:17 executing program 3: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000043e0ff00c26705d4f7ea460500"/28], 0x1c}}, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000040)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000080)=0x2c) r2 = gettid() tkill(r2, 0x1000000000016) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ptrace(0x10, r0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) ptrace$peeksig(0x2, r3, 0x0, 0x0) [ 1031.539265] binder: 28349:28358 ioctl c0306201 0 returned -14 [ 1031.542363] binder: 28352:28359 ioctl c0306201 0 returned -14 [ 1031.548904] binder: 28353:28357 ioctl c0306201 0 returned -14 [ 1031.553833] binder: 28350:28356 ioctl c0306201 0 returned -14 [ 1031.566195] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57411 sclass=netlink_route_socket pid=28362 comm=syz-executor.3 [ 1031.568887] binder: 28352:28359 ioctl 5607 0 returned -22 [ 1031.632216] binder: 28350:28367 ioctl c0306201 0 returned -14 [ 1031.654808] binder: 28353:28370 ioctl c0306201 0 returned -14 [ 1031.663555] binder: 28349:28371 ioctl c0306201 0 returned -14 [ 1031.680763] binder: 28352:28372 ioctl c0306201 0 returned -14 02:07:18 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@setneightbl={0x1c, 0x43, 0x1, 0x0, 0x0, {0x2}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x54, r3, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0xc880}, 0xc800) r4 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:07:18 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="040000008001ac27"], &(0x7f00000001c0)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000200)={r6, 0x1}, 0x8) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r4, 0xc0bc5310, &(0x7f00000002c0)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x610342, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x11d101, 0x0) sendfile(r7, 0xffffffffffffffff, &(0x7f00000000c0)=0x1, 0x7ffffffe) write(r7, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) 02:07:18 executing program 3: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() gettid() r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x3, 0x9a, 0x0, 0x10046a, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) tkill(r1, 0x13) ptrace(0x10, r0) ptrace$peeksig(0x2, r0, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x20000, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000040)={{0x2, 0x1, 0x5, 0xdb}, 'syz0\x00', 0x3d}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f00000000c0)=0x1) 02:07:18 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ftruncate(0xffffffffffffffff, 0xfffffffffffffff6) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, &(0x7f0000000100)={0xffffffff, 0x3, 0x3, 0x8, 0x4, 0x2}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$SG_GET_ACCESS_COUNT(r5, 0x2289, &(0x7f0000000040)) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x0) r6 = openat$ocfs2_control(0xffffffffffffff9c, 0xfffffffffffffffd, 0x101000, 0x0) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x800, 0x6, 0x1f, 0x80000000}]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f00000001c0)) 02:07:18 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000d80)={0x0, 0x0}) recvmmsg(r4, &(0x7f0000000cc0)=[{{&(0x7f0000000080)=@ax25={{0x3, @null}, [@netrom, @remote, @null, @bcast, @default, @null, @remote, @netrom]}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000100)=""/53, 0x35}], 0x1, &(0x7f00000001c0)=""/118, 0x76}, 0xee}, {{&(0x7f0000000240)=@hci, 0x80, &(0x7f0000000980)=[{&(0x7f00000002c0)=""/242, 0xf2}, {&(0x7f00000003c0)=""/186, 0xba}, {&(0x7f0000000540)=""/191, 0xbf}, {&(0x7f0000000600)=""/191, 0xbf}, {&(0x7f00000006c0)=""/111, 0x6f}, {&(0x7f0000000740)=""/208, 0xd0}, {&(0x7f0000000840)=""/113, 0x71}, {&(0x7f00000008c0)=""/124, 0x7c}, {&(0x7f0000000940)=""/21, 0x15}], 0x9, &(0x7f0000000a40)=""/79, 0x4f}, 0x3}, {{&(0x7f0000000ac0)=@nfc, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000b40)=""/35, 0x23}], 0x1, &(0x7f0000000bc0)=""/220, 0xdc}, 0x3}], 0x3, 0x40002102, &(0x7f0000000dc0)={r5, r6+60000000}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 02:07:18 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:dbusd_exec_t:s0\x00', 0x22, 0x5) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1032.418240] binder: 28380:28383 ioctl c0306201 0 returned -14 [ 1032.428242] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28386 comm=syz-executor.4 [ 1032.446612] binder: 28385:28390 ioctl c0306201 0 returned -14 [ 1032.455059] binder: 28382:28391 ioctl c0306201 0 returned -14 [ 1032.460425] binder: 28384:28392 ioctl c0306201 0 returned -14 [ 1032.515247] binder: 28385:28399 ioctl c0306201 0 returned -14 [ 1032.538952] binder: 28384:28403 ioctl c0306201 0 returned -14 [ 1032.596704] binder: 28380:28412 ioctl c0306201 0 returned -14 [ 1032.619761] binder: 28382:28413 ioctl c0306201 0 returned -14 02:07:19 executing program 3: clone(0x403ce000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() tkill(r1, 0x1000000000016) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x2) dup2(r2, r3) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000000)) gettid() getpid() ptrace(0x4208, 0x0) ptrace$peeksig(0x2, r0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x2) dup2(r4, r5) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x200200, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r6, 0x84, 0x65, &(0x7f0000000140)=[@in={0x2, 0x4e21, @private=0xa010101}, @in6={0xa, 0x4e24, 0x7ff, @loopback, 0x1ff}, @in6={0xa, 0x1000, 0x8, @private1={0xfc, 0x1, [], 0x1}, 0x80000000}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e24, @empty}], 0x68) ioctl$GIO_FONT(r5, 0x4b60, &(0x7f0000000080)=""/115) 02:07:19 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f00000001c0)=[{&(0x7f0000000040)="1bf906b18085f7e327f189b87ce6abeb97d748965a2d7112e62e085de08e9c4b0f329d1eabb440abd40bbd3ab4bdb2d47c43ff2c0bad512d53e9dee0f6e3141a4abc0ec129f81a3d97f878f0d68392594f6c5b1e50ab3d38966daf4fdb143a45744e1563bc13c4c886828b853b737346c5537721a36560e381684c54aee56ca7b1a57ce989232ba0fed73f575d77e1be988d96c0c8e122359772de5d43fdb9b050423f8f1260340e93fe0a93467198c135849d928aabcd94dee226f191d218e699459946", 0xc4}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:07:19 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000080)={0x7, {0xffff, 0x8000, 0x9, 0x9885, 0x10000, 0xffffffff}}) r3 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1033.255562] binder: 28385:28399 ioctl c0306201 0 returned -14 02:07:19 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0xc02) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TUNGETIFF(r5, 0x800454d2, &(0x7f0000000040)) 02:07:19 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000001000000000000001f00", @ANYRES32=r5, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x108, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x900}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0xd8, 0x2, [@TCA_CGROUP_ACT={0x36, 0x1, [@m_mirred={0xd0, 0x0, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}]}, {0x1b, 0x6, "3c0a793afd329cce9533c4396b8dcc136902ea634a913e"}}}]}]}}]}, 0x108}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@setneightbl={0x1c, 0x43, 0x1, 0x0, 0x0, {0x2}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xffffa38e, 0x3}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x263c, 0x2}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40054}, 0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) [ 1033.300849] binder: 28416:28418 ioctl c0306201 0 returned -14 [ 1033.340175] binder: 28422:28423 ioctl c0306201 0 returned -14 [ 1033.367413] binder: 28416:28427 ioctl c0306201 0 returned -14 [ 1033.382488] binder: 28426:28428 ioctl c0306201 0 returned -14 [ 1033.406017] binder: 28422:28432 ioctl c0306201 0 returned -14 [ 1033.492081] binder: 28426:28441 ioctl c0306201 0 returned -14 [ 1033.553323] IPVS: ftp: loaded support on port[0] = 21 02:07:19 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$netlbl_mgmt(0x0) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="04000000e3a7cd4800000000913342b32974f3a21cbdd452c77a", @ANYRES16=r4, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x60045}, 0x20004080) sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r4, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={[], [], @broadcast}}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x8801) r5 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) [ 1033.636854] binder: 28445:28446 ioctl c0306201 0 returned -14 [ 1033.759511] binder: 28445:28449 ioctl c0306201 0 returned -14 02:07:19 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@ng={0x4, 0xd, "597d1e8d58b1f63f7279338dc1b2"}, 0x10, 0x1) 02:07:19 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x20200, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="1303000000efffefff00070000000c0002"], 0x20}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000007c0)={0x5bc, r5, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x120, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'xfrm0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'xfrm0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'bridge0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0x64010102}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x34}}, 0x3ff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7, @private1, 0x7}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x41}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4, 0x3, @mcast1, 0xfffffbe8}}}}]}, @TIPC_NLA_MEDIA={0x11c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x52}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_NODE={0xd0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe7a}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "f89d075505496f97b01f06d41ccc4943a8c8a7d8093218db7dd0b2d8dcd0"}}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "34536c3ebebdd3fc9cdf423dfe35057f370e18a3996d96346bef2fae94286bada33338"}}, @TIPC_NLA_NODE_ID={0x1d, 0x3, "d316b3b8e6253bb14b98a884702b89b9f01bce9bc69be832b5"}]}, @TIPC_NLA_MEDIA={0xf0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4fe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5632}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_SOCK={0xa8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5b15a4b6}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x1b, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf9e7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff98}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6b0c}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x86}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}]}, 0x5bc}, 0x1, 0x0, 0x0, 0x48010}, 0x1) r6 = getpid() sched_setattr(r6, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) capget(&(0x7f00000001c0)={0x19980330, r6}, &(0x7f0000000240)={0x7, 0x8001, 0x3, 0x3, 0x1, 0x800}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1034.099724] binder: 28416:28427 ioctl c0306201 0 returned -14 [ 1034.134197] binder: 28452:28453 ioctl c0306201 0 returned -14 [ 1034.142654] binder: 28422:28439 ioctl c0306201 0 returned -14 02:07:20 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000000100)=0xe8) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) syz_mount_image$afs(&(0x7f0000000040)='afs\x00', &(0x7f0000000080)='./file0\x00', 0xfffffffffffffffd, 0x3, &(0x7f0000000280)=[{&(0x7f00000000c0)="e4259aeff637bc2ba1b5cc1ca515dffb0fd35c4e7451", 0x16, 0x3}, {&(0x7f00000007c0)="6105f9d206fba59b935ae5eea2a146969dddaa194c5581dc989e25cafe814c485c43e662d2b35a0ead6924a9a6e75deb9e65ddadb10964f8b69b9fad194a9fa3fcaa7fc90c1558dd10756bad79e9871717d9a5a0c6a9f2614544dddfc3fdcace2a1a6b85adb92cc79b5d4dfc2d2d16144eaadcccdff192d40cdc2696c49524863ce0a03abcb1b666bd65ec004b701ca8dd21aaec7b42571ca6e18349564575da62560d897a49c9db67f15b9e3810efc561eedc16555efb75c94a008bf4066e6b12566513abe7d82408cc320c7e25b5e08871317a5cbf878f0181aea2f0a0deb148c5c865b11d75818bc13bdea56db3798b2d928d7a7466c3fee46a444efff814d2b6e3bd9c4552d36824ffeba8739d119661c2cf84a71569769abdc0960b641261c88d9c0dd12856158a065a4422b33abf4c80efa4444e9a46133bcd6245b471f8f9d1e62f6ba1fdf8e4d4b6e6f7be928359ec305fe0ccfdeb7a8df677d5c8a232e4dfabc747b580defcdab543a731f83ac8ddc98eba5566e20dab0c974baf08e1b207b98e8c845e3defa3286ba0ca3cb7442226f92dde50cbb9fd9cf300b8103bc1658e82b6985249dae9dfb8ddd323eb8da744bd0dacc9f95effc5f84fb24f0fee4797e7f9a117bcc8c07690085eacca29b116885eda9ae66901979b1fa2deceee9e51b18d2b1b679fadf6f243824842f3d97e119201a31cb88daaa27cba76b72f41b7ce8f8624ec3edc1696741fa39e3b851402f65f6edc57337167f4314a7b403bf8b4bbb9390376a9ba945e88fa5682d57036ae2deacdded7cae27b6afac8d530a58a933b855772b4f09a7eebc950f308a4427de0f292075cece8c25f1f987d2cf22c057b5f57d0682f97be6c6680ddfd2b0049244d1f04c7d83690ef8e3c212baf7de8c902cf07b752f3f5364d6ebf60b9c3f2853af9dc9cbc730b43c7e6360d2f3b510befc5366776867b18d0e9e0622c387517de9627baaddc83acfe3d561355fdead54726465b2cf20e6401f9ecbb268879ceadf4e25e850bb48e9b8c6b646ec73ec49800d26a4d07b7c77fff78db1a9308a9d1fcebe8043c681de49e4f7d54c8da6e68957857c5bb91411b6493459715ca04506eedc9d11d05e031f9044e31fbdb1a683b0f63b1971dd5babbadba98b73c4bbabbb1189a5b720fd0c01ee8878dab2fb9ac09bd7c3795f5f6275a62ab1af1563a6ac1b603ef9293bd8034b1a4e99550491692f2056086d4f6805a4cb09a416ef2f91591ff3afcd0cd2f0d790afc29a039d8255e0bfaeacaaedbbc11cff4cb830f160bd51997a7672e463fa58f2564ef7e1fcd9383b4329dc721d2676d0f074ef669522dde4c4f1e4bb4c98c2a73edf5f5da70dcfd550e7be6c71b20a10f5250b755d252f377a11746b300a549b30dd70b9c970bca25d6f046e0af915d9ba68f9052fd6e5e4dbfc7034165075dd02c5bf3ace6caa0e2108c097245933a6174a368c7953d4f156ee05109ab2a2c91b6e2c1182f6359d97cb1aa5bab1ad790d67501d13ca6ffd039fca4a859fe6c26e357b25968a80bddddba52c49a9cf9198f4f4c7139b45ff8f10bac266911313ba115437846d84c770e3532f90548b39b48032da049035afa92d05036bc52016c537b7268a3d0255dc3f7264f057db0b82a146e17b0f0408665e593840b629b632f51db81cafb6f988271b8224ee3e80c065782867cba7b46135235444dc593728a67a6c7d282c49db8b59e28b1f48d73983b14f9a148138e449db708f2cb9d8ad95520bf0d2446e9aeef850513ba693b3848d1e739547ed6689dd77ceddecdaea69554c7b974f5d96690b1e3a49140d3e70af11b6693a7248e0eca5f859a902536bccaae23c22f5d7a6fd93dc4d2b3a65f63d6a377b46e0e67173e16bf19e215546e75d33c8aaeb698b9fb1c83739275d0b4539e416de474fbc259a141ee65d488f7e4c4c9ff6ff13a0d6f406c0127fc40f184314217f65258402e374737448eb6b03e3c04fb9b78cf4c8bfdf155093db70e3624813e2b986d93b845388c0b5be8e3c177d42c27d57b5b0deee7b77c8cba6abb9d38cdeb022b40f2ecd4f3cd7d5d4f6d1478811a011a0ad29090fe5fd4e17d61bb59d1bcc16d85e5aba1bcf1b713d1143a57ad43fd59f378741ac2bf690ee96b2c9426bcee50dc35c5aaa2e0cd2bb7689e7bbd09b1732fbeaae35beed4fd9dfea7f498c144f8b1447b70ce052ec8dde562f764e8b59f75d6e58027aae376ee119d01163ad175c022dae30e85c17e6a006eae41d944ffadf8eda81cb588a5e5c072429ad86d7e9bfb6124e144bed0c4613a68e24ff40005349f357b50d978f0bf79021815ddd18b171b6b9992dede010ab3949cf07203039cd9521fc71a03b7827be303ccd57474f5e5fb5e7cec946a679ecc8d1c0953bf5752e232a69aaa3455fa2c342519e12882760018f21da1fde302758445fa385e39f835878e16808bf0b717d37badd26a408fe2926bb34f54e6048b7f2e7fb994d5ea2951741ccc81e9c42a9834a8e3ec7784d6b525efbbe96b362804be3f6009ff84a992afe624ad3de459f6031c03a9730c6f77ce793ca365d02ab9357afa96d9f66ffd419d69ddd786aa0bf32d52567ec8b01db2843997ae1ec14700e8c1fbc635954c4abe0a4f523ac22d1742e2d72ae6cc75cb5c1ef9ac79e737743efd307f9ff264b42bc8c2dfc8ce1006de03ca65ba3ac6a18795439fe23c32768f4cabc9dcee1f3ff142b5a4826703ab588a41195cf334351c88798abf0691b9658e709178598ed34ca1e808a90cb10118cbad61994047062e928ff91ef99b2560275169ee782715320f262e26196cd79d3b6795812f791644c7bfc8f4b3b34b4bf95d6732e4ecd023c186786743b7189b1371d90e7634ad5dff8df9bef1526eaf04f0da5f3b5342df597686a3041406ea7f52f6d37876100d3692c1b66574f81d27d639040bcf4bb0f69d5fbea2e67aa3ffdf417bb261b5546f7e172f34ee094c21cbcb988b7087c06da4c342457e3651c5f6c070d87519757573eecdf7cbdf8b72a1810e41bb4ac9f91ca1a011a97b6cef42abef6ef7927d09ad24d72db7c6a554d9b0e5e2e4aa1775a7e0a0f97603eb506f86acea73e0bd5c432353c44147aa06822fc179a8bdda0148ebcc59deff38008ad1b5599d4ca4110323718b5ca6011dff4c961591217f1f5108fb360f79f7eb3e6dd4870a06f4331ad9c3c20adedaa0d740e7a0f69319fc4a3babf78088c0bfee42639060d9658d292445f55fc06c5b6bc3bc401dcf5792558725f2176b4fd88666da782e71e4dd3d79fc284a0e3e49b94a2b5b078d91982649d989e121ca8767651b9777839b04dda2eb3dd0663338d5c96acd277d81d6584242c76897ec38984fa14eb06042a9d8dbeb4604bd965ac47b6903875c3e22b25747c4fbe8e235e5aef1850f34866d5eedcb5a46237602c9381bedaf94fc5be034cfe220e419fcd2a261029469e3ae23c6a2e8f95ec4e616a41bf83432eb0daf7de681dc832a813068fc374404dbd3aec2d303cd1cfd697f2ac31a0ec91566f0cbf181913aaacc82ba865cb618b6c2be33452dad9ec5a2b41a5bf3c7fc48a9d89c40c66e63691cba34341cd5121b938609413cb1e5173050679bf164ad7a4d95d231f6f6788b19bc050403474b61e68b7381c0187792a04174df028d61810a0c639368ffe74aa5de3a7aa4714c5450601afd8cd52c1b28ef9a4a08679a44217c44e5a3556c7aa411e3409f7a847d0ecf17349435189bdc13f78bf59090bab92f7cdfff4def3de95097f3e0139492d0e468bdbcbd1810b86eeab9c0d1bf2b23cc1d8fb2d4ea22554444ea7da204037a721069bdec6c05e4c76a2dd18a54d78871660c201e4b23bba7877c9112a9a75efc7d75b26067f5cb033faab7810efef8754fd37c7f3a0c3f146e98bbad8bd2c38ac8f8a848378e837c679c6b06cd8e5ea25f2dbb3198ef35296104ced484598bcd2c60810e1969ec4c7caddcd9af14647e53621f3be9e5a10106c1393e08be7e71075d8d9df7958b65521a9524c66bb3ef87aa90390f63d00d15fbe90981949be3cf269d46da8821e6c5db70388b489e8c0b127d1495ec096b532aabe1cc276e46c2394563c1c7e668cd245d6ed216d295f40a4bff85f02143ee6fb967746df7322ba4290e8c38f6337cf3fb6da42cb91abdf29edd88a0771d8a8130446dc408c6b85a60190822f81faf1211fa24da5cbdb5d8d154d8a59e3369b8de32ccfeb0635dad10ddb4a5e837118a04ed50cc5ab64342709b439cdb79f4c4b9ec087b5de641a91a9ff53dd678305c4750a9e6b3f859ab198d61346126dd6a30d4ea7bb22544472619f67f05d944593801bf920809b3ae3c05399b9a5549b3f2e1b583c3265256303c385264cbc520cf02546faf496289efc847c31745ebafd0aedb882ae734b5572fffb218eb6809c3e6512a6d3724969400b0f743551ae2b183541ecea8cd48c3622bc53c7107458f585b1abd4078b930bdefdb84eb6cd16ba9d0b9a24617b522c29225329622f1fd1ae87e7a5ac594a31158321631ae206447c2f58dd3174ac8cbf8b090116892e9cb888f404dab5bb0cd94ad34dc5f4e8c967832a973f1490de9efb4b996be5f496fec852e2c435cfaff1b9ef6802bf29e988021b1c374ffff88abfb0bc633b59679172c487a75f47e04c24b811a62adff4c532459c4621697859345fbcc54aff485ab72ed18316465713db2278c56d66be2a91e8e867e660fa4fa049ed9ff013500dfadf912facfd66b497867d36380cd5ad518f977420bd12756cb407fe156b69d3c392b8914f0e7f01e34db79ef37dd473fddf89a98a6a5ad6a9c43bf03f7bb6098b89d220aed84ad47cdc7433240849717da8bc59e055627537a40d60502f5311584a92af1a7ef3125633247920bfa7eaf84624a8063da7e9a7a18dc0c1e59ef8f608299e5955e5db7021ce33c1373b5f2f7d60387f1bf72947a150200bdbd5fad4ac89e7d3d4892da11f7a80678c6bddde4b75ad06d6b863711d17273265f43c5393c6fb613dd87292319954764f9033d20f201d5d60d8627bb6a302c74a82326b0e20e9c336b6f2b3279658433e1c0835bd64ac642421a1725e938175ac3bcaf03d4d2c8ee025241d67e939eb9ed3e7c3c933abc156ecba81ff0982fabd07741891153235b99325bb8f21eea122ba019ee5f6fd13a09de70240e20d228389dda48e6ac48d4abde4904f18d73f5d870e45bdfef783b2abc00ac988c630143d807c723ee4e8ecd9deb6abf2b86d6b0d1ba3f6bdedf48d6efe43e4e9b5055f14ca91dbc86e015648b75ddcf33bebea2ad0d5e0950e1a8f78a23f4732328cb6ccfd0b0374ebcb7afae4d186681d36b678e185091df54a0ffdbb80ca719990393af3b573e7dee747ec3b84e438093d76d2239520c54b97eded538b9358128312f82927e6d9e5c86a3a2335b97ca7fb90b2056d024d357a91d5b24e4c938c4cda2ce46b18819a7c0415db80ea5142ab6f343de60c748d2c877ae4d4c9cb2483432056ac4b7092e3a1a31172a3a53452ef7249b9a4d7369bae12c78578446cdde97d712060790d437ac479098b165f63e0be1bb69ce64125779a6e3e7ddf08ea8f5b81edd6edabe4fa774356780fc0c315c18f1003f66f91fb524692beaa1823c74ec0be5c97fcec739f524bfb73ed32e9d3129a2b7542c86c3ce27b89cd22b7a1e3a65aa80133d65563f57ea37a563ac6384a95b75d65313df02288eef6c84c99d7c12c17a828743d2253feb543925", 0x1000, 0x2}, {&(0x7f00000001c0)="e0c9f2193dd12b509eecc7fd83bbebf2e918dc96d7549c71949ce722796981f48f1bf9371d495d98873c18b86b1f6fa110a03cf86c1b8ccfb18b8b7fb2fe0c58871247796f8a81183b8afab97d1acf7d5baf4fa1d166e2e417423770265cc58cdf3cc141ec815a67c8ee521ed47da9e9a7d5290d5ff2bc097aae9f1b32e951cdd21751c46c7ad0c9c0bafabae58f3b975315a9ba7c627b7baa7ce671f5b2182aef2d1b4f932600afa8dca89da1035362c2925210dc5b49d4b3aedc8dda6a55", 0xbf, 0x8}], 0x100005, &(0x7f0000000400)=ANY=[@ANYBLOB='flock=stri#t,autocell,euid=', @ANYRESDEC=r2, @ANYBLOB=',fscontext=root,subj_user=/dev/binder#\x00,fsmagic=0x0000000000001000,dont_measure,fsmagic=0x000000000000003f,context=user_u,uid>', @ANYRESDEC=r4, @ANYBLOB=',rootcontext=system_u,\x00']) r5 = dup3(r1, r1, 0x80000) ioctl$SNDCTL_DSP_POST(r5, 0x5008, 0x0) r6 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1034.205134] binder: 28452:28457 ioctl c0306201 0 returned -14 [ 1034.222619] capability: warning: `syz-executor.4' uses 32-bit capabilities (legacy support in use) [ 1034.277629] binder: 28461:28462 ioctl c0306201 0 returned -14 [ 1034.341593] binder: 28461:28479 ioctl c0306201 0 returned -14 02:07:20 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x2) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) [ 1034.495236] binder: 28486:28487 ioctl c0306201 0 returned -14 [ 1034.631114] binder: 28486:28491 ioctl c0306201 0 returned -14 [ 1034.933041] binder: 28452:28457 ioctl c0306201 0 returned -14 [ 1034.943583] binder: 28452:28457 ioctl c0306201 0 returned -14 02:07:20 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000), 0x0, 0x9) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:07:20 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f0000000080)={0x0, @reserved}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r4], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1035.091883] binder: 28493:28496 ioctl c0306201 0 returned -14 [ 1035.171056] binder: 28493:28501 ioctl c0306201 0 returned -14 [ 1035.191131] binder: 28498:28503 unknown command 808464432 [ 1035.202746] binder: 28498:28503 ioctl c0306201 20000280 returned -22 [ 1035.845515] binder: 28493:28507 ioctl c0306201 0 returned -14 02:07:22 executing program 3: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() tkill(r1, 0x1000000000016) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000040)={0x0, 0x1, 0x5, &(0x7f0000000000)=0x59}) ptrace(0x11, r0) ptrace$peeksig(0x2, r0, 0x0, 0x0) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000080)=0x2, 0x2) 02:07:22 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0xf, 0x4, 0x800, 0x47b, 0x12, r2, 0x6f, [], 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1}, 0x40) vmsplice(r3, &(0x7f0000000340), 0x0, 0x1f7f0e149b498546) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0x1]}, &(0x7f0000000080), &(0x7f0000000100), 0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:07:22 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)) write(r3, &(0x7f0000000040)="b0a3cdafaadaa8c515de0fcb5dfc761cf7120c4312b201803a24676b1d94d072b4bd702c576d05d6e4fef97bdd899d359dadcfe31dbdfb5953e53a037e9bc6832ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b1637b62256ae8faaae5f59f840c029418a34ccfeae205bcb8ea541d15f4c1d6058f8b439d943faae84306e0952333cd4559a761ce9619fb5f00"/201, 0xc9) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 02:07:22 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000040)) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 02:07:22 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000100)={&(0x7f0000000040)="efbcdfe23eff074a2c28fa685352441323d93eb39f6e7f8f4c9cfbbb3e4e57efd5090a9a7af11b9db745a1d7a47d1051aa84207183754f512d34267cd72103f43a47038005172f4e0fb6d35e", &(0x7f00000001c0)=""/196, &(0x7f00000002c0)="e9b77ce09cb1b25bac037096ef013c94ebbc05ca87b415deaa51cb2bf394388b1aea521f7f8332bf5bad07e1963e15aa9a321e6b7f8a99af0543135665681b467fcfe15457e494e354f9ee582fa811c6b57554d1c79cbef3b2cb805fe3e370b2ffc7d4095a27b600af35e8b64de75d8d1b3a57b916b5cd6d864d452c5c4b2b1cd668ca5f739495dfec4a70b6287be787f2d17be3e07632f760424695bfecdf9762c7a17490c1ec38e69acf63a72a9dfe56886b74d2d262a34c3df9fb394e119d449aafaa926fa9908d2a32eb23a99ba0a2757ec6ab5d67fea52b343eed1b", &(0x7f00000000c0)="bb1a00e8ffc5a8ce5a548b28fbe981", 0x6, r1}, 0x38) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = dup2(r2, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:07:22 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="d7b821d52b05635a82"], 0x0, 0x0, 0x0}) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r3, 0xee00, 0x0) fstat(r1, &(0x7f0000000080)) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r5, 0xee00, 0x0) r6 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1036.295323] binder: 28512:28517 ioctl c0306201 0 returned -14 [ 1036.305837] binder: 28514:28518 ioctl c0306201 0 returned -14 [ 1036.317864] binder: 28512:28517 ioctl c0306201 0 returned -14 [ 1036.331356] binder: 28515:28521 ioctl c0306201 0 returned -14 [ 1036.341456] binder: 28513:28525 unknown command -719210281 [ 1036.348061] binder: 28513:28525 ioctl c0306201 20000200 returned -22 [ 1036.429178] binder: 28514:28534 ioctl c0306201 0 returned -14 [ 1036.485189] binder: 28515:28537 ioctl c0306201 0 returned -14 [ 1037.088473] binder: 28512:28517 ioctl c0306201 0 returned -14 02:07:22 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:07:22 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = dup3(0xffffffffffffffff, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x6c, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000040)={0x0, 0x9, 0xfffd}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x80, 0x0, 0x2, 0xb3b}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000040)={0x0, 0x39}, 0x8) 02:07:22 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair(0x27, 0x6, 0x4000, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r2, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000002c0)={0x3, {{0x2, 0x4e24, @remote}}}, 0x88) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1037.176744] binder: 28541:28542 ioctl c0306201 0 returned -14 [ 1037.226772] binder: 28543:28546 ioctl c0306201 0 returned -14 02:07:23 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) setuid(0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r3, 0xee00, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000140)=[{&(0x7f00000001c0)="ad4ef38a7852e732fa22a95df2f80a5ec626f1ee7b7d7b448ff24135f1d515f132e43812becbb514616e502f07a0605369a2fdca39089ef7fcaf8f784253d1888478db1c9778cc04a8c8e52314bdc31a20efc1aea8194fa75a5cf7a637f9f6142f92c2273c20a2b0246ec24b3f32d516518df156924dcebc7988963d5b4c81f8b5ce11830c07009bf1ef497d8e82ee2be9abbba2", 0x94}, {&(0x7f0000000100)="b061", 0x2}, {&(0x7f00000006c0)="5df53f985385b69c99f5adec6e9bb21fe08f4c9e733fbd80d74c62ef517eb9a9526d674bad0402d339cacbdee693d5c58626a3a2c5225fcabf4280549897a2d9cf007641f009eefcc9ed70d4e24c7a3f59dc05e5bc537c05e41520adae105bd95827c1046148744d2b58c7c56bf6b974749962922b0e4c9fa33efd8dcd5412dbc0ef8823cc938bb73dbccf3ab604dbac489f1c04a323a456337fc21d9c42a37c5edc06a3fa1cac32cfed415c5c708bd5d0fde6db5316cd951915e34fc44d6a43d3012d24d765e7dd3dff5592d6f35920bb8b9f70df939ad2c77783b30dabba14743efbfdc11bc5e495f1b891754f923d8b5d747c6e93f7d67de37a39664939d3611c090b1d0c69a416524f5b833d3d991d125685d2141ca9771a2177708ac3618e663590c47fc6895b2cc2de04595751364def09b090ec2a09939c8f18beac60c27f3124df7abd6c9fecdac9aad4a2ca38810f66226d454e7f89bd76be6cd93fd696716453048819ab6a6ebb9bb9de11f764eae199e7eaf5bfd133d5a540afb1333c409b0d35a057ceecb835b4938777b67d8ad3b388f88dce018c5b6bc8f7fb6698393f86478049ca84bd27bcd394e006a6c394702d44aaf204465cbc8254345a3591942a46a046e70047de716daa5c3cdd5ff44ac953635bb943e48418284bf5d07cd25517a5589e7d8ce4215ddac1b4d592649fbee5feed34e8b54004c8d5915ce5f9f549af8e4e49e823024b6d4d9125362afadebb12be66f9a9b87be4759313278518953b59c919ca46e532d50294647d871eb5d658d729e83b679b96b29eb846a5d7c114f9310a2e8d7e613b3ae2b0ab1bcf9a1c8788a19d3bdfb6ee00bf771a63ebd80adf432c752c11708cb9ce2335e5a4108460650d5abf395463307f5eaf98e59bbb24bf8baf1a697a0635d7d7df06be6dff5f9a4f4150cc576d57772cbf7bdca185c17a3fd56fa8e60751d76b7df593034d655feb326c3818aded08c7ab24dce47b6f02b9c9b25275f7c9cebdc7bda376e54485e48d143284496b4cc4012b88d680901f2af4f9e960c471ea11d520f6fa6ed8d8609b2827c5da399ebb798c814cf1b4eb2f904526ccda98d27838390fc3dfc8a33299ac706c8f404fbe490e8fe2bcf91114f8d09c129b9f0033840618b36703d14dccd8f19f474a418f613ea3e39a6c498fbb5d8afad921101335b538cf9891dcac4395d7b7359d56ecbcc828393f33d9d8fd21791c500c1215fdec77088181f965a3e6b7d5d11b2004b4fa646a9ae08c28ec5e1890a6997e6f685f29d1c6c5b75b1ac7d815dac8b509fbbe807cd99f4c7419ec256e21a5d88793e2e821ef044b38b594dc8125dee749d0d1fa1c1cf8d0cda6cd26162aa451f2a9440cc6d93b40368e6ef301272a060f59d4f344ceb3313e1942a8bafbffe9d697b5b480634e92ac865fc2e05b2b0924515b677744385d968857fcbba6e0e0614fe9bac5f6e4b9318b4dc87a0135cd630d627fb00ac6c8eb100b1a1bc9cb1eafb394d7e24517b255f87de9c55d91707d06da1dbd0c06805d32ee35cb61fb1fd4f301fd88e187a13245fb6252cf6a7ef60c2bfee85de6dbc5cf45e14405c6c38d16b7a6e34cfe99d282b59c5d92e320399b1681b3614b9ac3ab88198cd8657f9d8cd2af3bc37109756454faaf434552c41440213dcbf7cfe6e899281450bd786024cb589d036240eaaff8a2146ee11df3ea7fbaf3003331c165c604683bf4021d2e74e27f7c82062a8ddf228947a903008b8ee0c7ea98c6f050f8e9f937fe01e5151741f3a46802728fe6991511732ca85174563a42de8e681b2f46ca3133978719e45fb4dca3248f02c16fa9a9aea88b852bcd3535f89d83e4dec3bf44cff29421b0d964f58fab5600428f6386159020db3b6b58736541a64ee1deae3648a2459dfdd48c96e4661c8559b40f05ffb69861754dee3dccb732786bc83ceba1e2b72f1ceedeb0001874723fb2708554850d9ba59962dc5e1292a31fc738fd9216a43fb3cae9b63399679c9d2860d719f5e0db2fb549a80d01c4d3ef4ed3d1535887794d0fb9cfa7a4127cbf505eb2a7a935284c0498d0dc3a3e0b2815f22081f71bdf61873c74fa99d5a71d9bd6835cf8b61793df7c5f09aaf289a66fc823c5186c60b560a68ca2f3e1b7290dc3c1ec08fda495931b92f0dc1c5eb454bbbbeafac08a3a96463e8e1743fcf8b16ca9197d675913007badad71ca5d28d79a4efba151cf92f1a770762e2cf1d7dfeaea4bde4b6914f5a71826cdc598a8fd8a636feb27d58fbccea60511c80611c23ad9406cf4a1057419c5f47bef7381145af0e56006811b3a43d2f6fe427f41e6c971b805ef19aecdf9a479eb29808c5a7b3ca40338a27388df798eb30a108de425c96e101c7e5d71d6ef3790cb56d169895cf6eee9e1d8b797d1494047c035421d3d4f4965b278356da0ab6c73585d0455247634c0eccf2f51966aafbcf3a785a7d540ba92316114e9880fbe455dc0a9743c02f98589c7cfa2ee697f0e478355b30e758a2dac82f22b9e5b89dc7ae03e5d803a4d2cc8fc32977dd2da8b1401c9c39cd8dde43f452d967a6f4f7d0a0060ec60ab37acdc3b937dfeb3d7fea97fb21e4352fc2ce0b059dc3f37667f24dbd016e8eb31f362aa07990f1b995dab32bd0efd90183d9c2ccaffac356d2df74ddbf46d70c886d801ba51bde9837db0e32bbe089970e6314f516f3c7079e22042002b99634c26a0f313c28850d0eb6b0ff0e190ccc4de740dcbfb44bb3502ecee3b1b6e6cb4ae1953e908bb565416240ae16e89138f4f5e2fc7f464897bb8b389722dbf20067982a156e66db920deb30bcd8aaaaa84d06686310cafa8fc53dcbbe0833aece5fa46fb4bcb1c21775ae28621818d31e3d5b43f1177aff02e52fd9556270666fc037abc3cc2d3426e059ccb3ef1042a707679cd940373b811e5b429f3e94494f3bd46c682a2911444f79aa6d7e44859624f40bbb8f286a8a660a41947d5e45cbe5ce14056e67f33191ea8329e9203f0e8d589f6c5998aeb37f812ffed78f9f850a3783272088dc4786a25a8b9840eebd7219ad97c67fe2eb3e0a6887d79b9a9eb407923f6c2e66b9d6bb9002cea7777afb53b969a2ce956156994689954517cf4996e30dc720056833c13af28155cda6055b38e6caffc3646c8983964d254e919116b98739aeb62cbfbf99a53e4e5c51020274f9afb6059e2a06b0e860a2eade32644ee65ab9b62b20de0c0e0a9f14a096457b8d23a03aceccd2b4c0f7d777c1ac5ae6cd6e2c1ef37ee873fb3947650ccaf7cb029dd6d40b6c762a120636739ea5c45a91e2b6d2375048d3ad0c82afe26251f5bb00ab14f59a2b8441a13e642deec160f5ea65b05b7ede4facc554a6e8a6bdfd46cf542081094fee7901ecd511db1d2bc8e436c64774bf9dbc28a51d6dc8fe9a5c9ed78dd41836b869519304597b45d2d567a1ad52d5d5f58a7c1ccb6d6ccf0d3ff36fa4ceac2468a1715d6a86b1260422faa4782b3c09b517797e46ab990c5382f89a76e837b89efa39685256139566edf29987fb4f6abc3f76d6cc4d04a60bd08af0b6445ec3efac5ec4832ebb1133b11234c30454eaf5cef17d6f38c57340feaaa66d0659ffb1bdc4e15a5f823b841c08d9157c310d80dba989107cb78f476613a6c3da8ea78fa6d73b57dc94e50d39697968d1f69d2302cca0eec0a51e277b5ced36a7651c06dbd0ab510f86d216a26cc2b28a93c29d9c5a844ca18932b27870e968957b5833b21d3bc477204271b963f38b10dad5f3dd895493dc7977f67bf01fb7d4a2b75ecc5061e459422566b485a01bdd4db29426ade739394d770151fdc23c036d277a72e8b1e8a12b80d47b97e6a136a93f4e51d1b06bf7df50826dcb9967f7ac6c089ca708f350e31c23841bd4d20d8a8244273b1815d46fb12d3d6de584c605b7f293db1165704496d5780ee1ba8d0ffed6ae53c64f7e82747ae67fa7a619ad9b749b04193ca8cfb871081ea00ea0c794e2330392976fbabb124f0bcc4d71f5b4a3cdf0e82aa19371167114c9d3738a285cbde5238c59ef19eebcff6f0792d8a77583a5a78f1134e3f4723503186775612a017ae54be745025f3a52a7918f6d48838573d245f8fc700010a49fdce78dff537cf982489f6eeb551f8047fee786f4e7fa140ce339a0d409d922d247082d86545b5ef05456ab37d0676f9a95b608c1f44555121527fabe7cebc7be2dbae1acc44fd78f9a8f6f28c793cfc877aa7697a8403eb6c24714fb19769491e0ecb74a183131c476cc5f7d78c26ba9a8fa3442eb95ca4f71911a428694ef0b385aac0b426eb0a67ec23f51d6d8d7a3b066a168a0480bbe5cf09486a7759af7d2e22362b2fe095ab4d5b5233b79a295984659668f2b9b65e8aaf521a914e883c79cecb1f41a94cd353f579f419171cb1e224769d4ab826842476b12daf0e1b2736c8dce76670104d0448475d2af2892196257272eeef2d534de12c91e68137823c29cee243d1e844f0d7833d613c7686a6b9f1d962ab8516edd747c14ce88f919f574a9f7a4aaf2cd9847c85f66b65989bc1424623506a00feb28c1ea4d3a22252978966e5ec9a1b39e5aad36fdc520539903155ee18b9c06bad1d0d23b974ad942706a752194c2934bbf0b7719865c6693a4061668a3161db8f1b631fe627776f6acd869997cf378cf182b9484672b1ea572267e2b10a947aa5303cd6ecf78ea5995ffba71f877b63c4126f4630ef2ff8f4e3bff69f70cbb97e1d8a7574e749322c8ad8dca33b14a585c225f06fa6d59dd44df55df3c0a3d79d63d1740833c582e112e182871c1d6c4bbe6094aa897dc1107f2598a803dadaffd058df14f2742e0f7496a22819a34ef9925182a3460ea198730ac25154935d27e8eb4eaed9aebf493ebcb8b4e34bb4df75329042d909be2acea3d9d5c2a13f27c4c4a8469ceb0ff1d4e35dd1a529754ed880c3cf4dba18271fc1be2211f9aa00e6acddb8da207d19866925873c42b65a626f05283962250376864993e880c341fb8d499fbdd54941a08616568f76cc8e0d22d9198f82d7fc8a11dbeab821b637d95075c4284d60042466645babb28a6c32aa78d37372360f14e4ff938cabecb376a9d88f4ffefa6c9566d212e7dc90b156aab02f0e76ed765b4334809b552649ae2b74e1232c7f5d8874e1675badc7ccbad05fef433930996b16623e6dec27b5b535b94428b79ff73bae062e5350352c3387f2086e77dac47866505986a353a11324a00be0bfdd6db7b5b40e25a888d71c02036a60bbd336e68974df3908c1660c2541ac6a10d19b113513ea23c7e98685eeb6326833118263c3d38a25f20aa2e0bf01fb518ae4e6096393a76701d12e3e48e8543e80d96ff3e914ab9d291afe1caf5895b9d8b970a3f1d1f9bfc2053fc7f1f9ae3758978b87c3d781568e2958adb1f67b3be21a60626ffe7505f207600b482dc8c962de925a137e1e1b1660a87a5563ed80079a3db667fe4cbdc066dc6ae8423d56b9383bcefcf10374c26bac157590d8a67ee1bafcf4db04b72746a803f771e6930d84a1c56a25ebfbd652f80991bd577ee8d38f941336e9b9d0b13924fc66a97420ac83b7314e76f90dcf53b7a8fbda52a1a3649d540a8c6d2b2916c7039347e07d932b6215a874b2fd45eba9910a362fe29de518681191fda55380c6a1d0cb292c2051c1aadd17c5fec6badf6503a9a69642851906ebec2d74eb9df36262470af32257f1ccb4e83bc429b91a8cf7c203fec9182bab9df7f65109", 0x1000}], 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c0000002edd7ef0a159e96aba9852f1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x40040c0}, 0x40) r4 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000040)={0x9, 0x0, 0x3, 0x5}, 0x49) pipe(&(0x7f0000000180)) write(r5, &(0x7f0000000540)="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", 0x14c) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) msgget(0x0, 0x10) [ 1037.297350] binder: 28543:28551 ioctl c0306201 0 returned -14 [ 1037.308107] binder: 28541:28552 ioctl c0306201 0 returned -14 [ 1037.345129] binder: 28555:28557 ioctl c0306201 0 returned -14 [ 1037.550804] binder: 28555:28565 ioctl c0306201 0 returned -14 02:07:23 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x90c80, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000001000000000000001f00", @ANYRES32=r6, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x108, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x900}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0xd8, 0x2, [@TCA_CGROUP_ACT={0x36, 0x1, [@m_mirred={0xd0, 0x0, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}]}, {0x1b, 0x6, "3c0a793afd329cce9533c4396b8dcc136902ea634a913e"}}}]}]}}]}, 0x108}}, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@rand_addr=' \x01\x00', @in=@remote, 0x4e23, 0x2, 0x4e23, 0x0, 0x2, 0x20, 0x80, 0x21, r6, r8}, {0x9, 0x7f, 0x200, 0x7ff, 0x80, 0x6, 0x3, 0x8001}, {0x6, 0x2, 0x1, 0x1ff}, 0x0, 0x6e6bbc, 0x1, 0x1}, {{@in=@private=0xa010102, 0x4d3, 0xff}, 0x8, @in6=@remote, 0x3500, 0x1, 0x0, 0x7f, 0x7, 0x400}}, 0xe8) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x210002, 0x80) 02:07:23 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x2) dup2(r4, r5) ioctl$TIOCL_SELLOADLUT(r5, 0x541c, &(0x7f0000000080)={0x5, 0xfffffffffffffeff, 0x2, 0x6, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1038.021699] binder: 28543:28561 ioctl c0306201 0 returned -14 [ 1038.071440] binder: 28567:28569 ioctl c0306201 0 returned -14 [ 1038.216762] binder: 28567:28577 ioctl c0306201 0 returned -14 02:07:25 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000540)="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"/366, 0x16e) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@setneightbl={0x1c, 0x43, 0x1, 0x0, 0x0, {0x2}, [@NDTA_THRESH2={0x8, 0x3, 0x3}]}, 0x1c}}, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r4, 0x1, 0x53, &(0x7f0000000140)={0x6, 0x7, 'syz0\x00'}, &(0x7f00000001c0)=0x28) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000280)={0x0, 'netpci0\x00', {0x1}, 0x7}) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f00000002c0)={0x4, 0x0, [{}, {}, {}, {}]}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0xfffffff, 0x6, 0x5, r0, 0x0, &(0x7f0000000080)={0xa00901, 0x8, [], @p_u16=&(0x7f0000000040)=0x100}}) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000100)=0xffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 02:07:25 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@setneightbl={0x1c, 0x43, 0x1, 0x0, 0x0, {0x2}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = accept(r6, &(0x7f00000001c0)=@x25, &(0x7f0000000140)=0xbcd) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700)='nl80211\x00') r9 = memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) r10 = geteuid() fsetxattr$system_posix_acl(r9, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="020000000100000800002a2861f897dfe943ad000010e2c7d96af714418a01737f483ac13a9adc35d1159a5b3c1e27047528fb9bc5d777462c18159ba9702737772179a54326d5baa6f91ba1665908ab9ac7794550449ba9f43422c0dbad5398514572e7a3216260eaefa0", @ANYRES32=r7, @ANYBLOB="000000f0ff0000006e0800ff", @ANYRES32=r10, @ANYBLOB="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"/436, @ANYRES64, @ANYRESDEC=r8], 0x7, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r8, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0xffffffffffffffff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x2002c0c1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:07:25 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x1800) r1 = syz_open_dev$binderN(0x0, 0x0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f00000001c0)="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", 0x130}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x34, r8, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '+\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x44041) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@setneightbl={0x1c, 0x43, 0x1, 0x0, 0x0, {0x2}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f0000000080)) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f0000000380)={0x2, 0x0, 0x2, 0xda7}) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, &(0x7f00000003c0)={0xfffffffffffffff9, r9, 0x0, 0xb5b7}) 02:07:25 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="85630440919849059596c4dbfbe7c7dc78495921daba9eadc9e6ef7661edc2a681431bd8cdbc24a6c9a8b9ff8b63ee82d50f15c3603b194655fd36b9c59f4d3c5b0030d77bce8671051e4e4b46e4f6146c87d8e98714869b92ab4a334e6227a9e6722949bbf4b39486e9f4aac831a3"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:07:25 executing program 3: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() gettid() r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) tkill(r2, 0x8) r3 = socket$unix(0x1, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f0000000080)=0x3) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000000)=""/8, &(0x7f0000000040)=0x8) ptrace(0x10, r0) ptrace$peeksig(0x2, r0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_G_CTRL(r5, 0xc008561b, &(0x7f00000000c0)={0xffffffff, 0x9}) 02:07:25 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) write(0xffffffffffffffff, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x20080018) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 02:07:25 executing program 3: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() tkill(r1, 0x1000000000016) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@setneightbl={0x1c, 0x43, 0x1, 0x0, 0x0, {0x2}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) setpriority(0x0, r3, 0x5) ptrace(0x10, r0) ptrace$peeksig(0x2, r0, 0x0, 0x0) [ 1039.370242] binder: 28586:28589 ioctl c0306201 0 returned -14 [ 1039.376590] binder: 28585:28587 ioctl c0306201 0 returned -14 [ 1039.385408] binder: 28584:28590 ioctl c0306201 0 returned -14 [ 1039.392766] binder: 28582:28591 ioctl c0306201 0 returned -14 [ 1039.401743] binder: 28585:28587 ioctl c008ae88 200002c0 returned -22 [ 1039.426596] binder: 28583:28597 unknown command 1074029445 [ 1039.445357] binder: 28583:28597 ioctl c0306201 20000280 returned -22 [ 1039.453364] binder: 28586:28601 ioctl c0306201 0 returned -14 [ 1039.456020] binder: 28582:28602 ioctl c0306201 0 returned -14 [ 1039.462213] binder: 28584:28603 ioctl c0306201 0 returned -14 [ 1039.470116] binder: 28585:28604 ioctl c0306201 0 returned -14 02:07:25 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05ad0440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:07:25 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0)="b0a3cdef47f59ec515de0f4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba26fb1e152533e4df2e44816ac9bd2c102000000d81d2b9bea9d9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b802e24e6e7b62256ae8faaa02f59f840c029418a34cf27b1285a0f485c9f9d7d7464f2e77f60a06c1eef6426be965b61250cdb54b0dcbac19be34480ae79289bb54c4df3c58c0aba48ecce1ee80fcefaf8eaff19d3ed59df164ba4d8d62d3aa8041dd3ae3a7423491f31cc756dbd291bf38171608b2bd970b56c6e94584bf9e614b68cb8319fae7b1f3b420f37e8a70759c044c0e9ed1e9dc87d0307345998c5ec984eb38fc478e44440eb989f024f7dfbe57d05407d83c3ee210c0d7050b3e36c747595544af5c389871de707962cb14c0b38df15b3743682a6dc955b353200acbe62de376ef6c1ecfc3f27f361e06f3654bdf617ffa04c4310580dcfb4a950470fd9d68d26d66ec9c59fe5d2bfdea4f44813be251bf8fd02500"/460, 0xfffffffffffffe9f) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 02:07:25 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf71e3c120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef905dd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418", 0xa1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) [ 1040.180506] binder: 28582:28607 ioctl c0306201 0 returned -14 [ 1040.180708] binder: 28586:28606 ioctl c0306201 0 returned -14 02:07:26 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000040)={0x9, 0x2, 0x4, {0x3, @pix_mp={0x3, 0xc13, 0x34363248, 0x9, 0xb, [{0x3a, 0x1}, {0xc70}, {0x1}, {0xb33, 0x2c}, {0x1, 0x8c}, {0x6, 0x6}, {0xffff8000, 0x3}, {0xffffffa8, 0xfffffe01}], 0x0, 0x44, 0x0, 0x1, 0x4}}, 0x7fff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xffffffff, 0x4802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1040.233673] binder: 28609:28612 unknown command 1074048261 [ 1040.242416] binder: 28610:28613 ioctl c0306201 0 returned -14 [ 1040.243938] binder: 28611:28615 ioctl c0306201 0 returned -14 [ 1040.256248] binder: 28609:28612 ioctl c0306201 20000200 returned -22 02:07:26 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$TIOCSISO7816(r5, 0xc0285443, &(0x7f00000000c0)={0x7, 0x7, 0x81, 0x1ff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1040.306456] binder: 28621:28622 ioctl c0306201 0 returned -14 [ 1040.315751] binder: 28610:28624 ioctl c0306201 0 returned -14 [ 1040.334313] binder: 28611:28628 ioctl c0306201 0 returned -14 [ 1040.352790] binder: 28627:28629 ioctl c0306201 0 returned -14 [ 1040.389011] binder: 28621:28631 ioctl c0306201 0 returned -14 [ 1040.407780] binder: 28627:28633 ioctl c0306201 0 returned -14 02:07:26 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) lseek(r0, 0x8, 0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:07:26 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 02:07:26 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x7f) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) [ 1041.099753] binder: 28637:28642 ioctl c0306201 0 returned -14 [ 1041.106297] binder: 28621:28631 ioctl c0306201 0 returned -14 [ 1041.119203] binder: 28638:28643 ioctl c0306201 0 returned -14 [ 1041.125763] binder: 28621:28634 ioctl c0306201 0 returned -14 02:07:26 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) r3 = dup2(r2, r0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$PPPIOCCONNECT(r5, 0x4004743a, &(0x7f0000000080)=0x1) pipe2(&(0x7f00000000c0), 0x84000) [ 1041.147968] binder: 28627:28629 ioctl c0306201 0 returned -14 02:07:26 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)) vmsplice(r2, &(0x7f0000000000), 0x0, 0x3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1041.208948] binder: 28637:28652 ioctl c0306201 0 returned -14 [ 1041.228401] binder: 28649:28654 ioctl c0306201 0 returned -14 [ 1041.235656] binder: 28638:28655 ioctl c0306201 0 returned -14 [ 1041.255057] binder: 28653:28656 ioctl c0306201 0 returned -14 [ 1041.267706] binder: 28653:28656 ioctl c0306201 0 returned -14 02:07:27 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'wg2\x00', 0x2}) r3 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000001000000000000001f00", @ANYRES32=r5, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x108, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x900}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0xd8, 0x2, [@TCA_CGROUP_ACT={0x36, 0x1, [@m_mirred={0xd0, 0x0, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}]}, {0x1b, 0x6, "3c0a793afd329cce9533c4396b8dcc136902ea634a913e"}}}]}]}}]}, 0x108}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x24008801) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1042.056522] binder: 28653:28660 ioctl c0306201 0 returned -14 [ 1042.063629] binder: 28653:28660 ioctl c0306201 0 returned -14 02:07:28 executing program 3: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() tkill(r1, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x2, r0, 0x0, 0x0) 02:07:28 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r4, 0xc008551c, &(0x7f00000000c0)={0x8000, 0x10, [0x6, 0x3, 0x1, 0x6]}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000000000000bfa30000000000004503000000fefff67a0af0ffe8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000100b7050000220000006a0a00fe00000000850000000b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3487bb07eb78c27b090941bd3108d31287801000000000000000012cf6956e09d1938013c217e0f6ab2366e8a87554c101f03733d40c62753ecd1f46f09beb1bbfad9bae24b4e8a96ec60f2af47f99376e43836ba33fd5a447f936e000755861103bb45e5d53c9fe36bbd35e53c6376c0c2b1daa58a9c34444bb7e9673476d017fc94c5857ead931db6cd370e93b6d5a74cc1d2c50896249ed7420f8680a730d876c36a1f3f1b8eb12d9390a49f2d99b5df916269392e0d0000556ec919d0b1681369d448c6f8c9969baa463b36d25ac1628ef858a5cc77c14c8df67f20fd224829af6de3d5ef71857496714db96c6db18ea5189cfbddd6e4de3617adabc339334b97b11911905d6692a33f1f370c05e1f134e5f90a326b0cb5268e40f5ba9b5360a516c3f87f05e5d1af657c445131edb61670ff2c62117e96eba22382758239e69127d5656e63bf02af42a5ac113879bfc27d7e6ba1f41301065efb1685e65f30df092251d556a89c2886ea64bc457280330dc9cdb6db023433e9ba97796a7823d241795ab1258fe937312fc5e921e8758153be202f000055a4921970e28e6238580101b710cf8b82bcab02c12fe01bd8df4e97c67e8a3693b23668c55eed4e24eafa16a4f43b6729990a9321531e5eb006b547c13cdfa2fa211d07a29377ea1c5aa7f5d58331ad45fc89ac44c9d2d6b3ac03ce76fc9d341f076264f8cf493901ad919329a295f63be4e91417b9cd09cf47272d46666571f24d71fcff2a9e869c2144f5775c37084acc57b5793f25f853f7a98965e5bd9ff5253f787eb321572355c706d6d2e27c475fd077876a4405b72b00000000000000b79d8029af8de217c23f79e68fe48420cbb226a752b817fc17efaa1268c6"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r6, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) tee(r5, r6, 0x9853, 0x1) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) socket$inet6(0xa, 0x3, 0x1) 02:07:28 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x2) dup2(r4, r5) setsockopt$inet6_tcp_buf(r4, 0x6, 0xd, &(0x7f0000000040)="2995bb1d8cb1e541cbddabbdb64d60b6df4d4918cc67ac4cd62d5aa3617696b5c58f42c94e7fcbd4e2f47e5178d0ad615e87737c8b1767edf20e3f40ba536980bc0ccb4a837eea09350821715672cec2c5640de20933536b927e15c5a9468ed980d362dd210f", 0x66) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:07:28 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000040)={0x3, 0xa5, "4ab97402adfedf6ef7ed8c3b4d67bdc2d7b3fb432b7437bf06b2b7443f94f346795529d5f6a1ff89037141ec923e97a590d0031ca2a3e94261558f57c8f40203e19b6b1c6f1457f6fbaac6225b0dff282450a18a85893d44613958fb0fb929e35444729a80aef9c71f1183e36e4025ee51529d2988c1006d0642aa5074dcd79059f34a0f46cb097e419b806d2ed7aff745293b7d320e63b8e006d425a08593b99e4a848d82"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r3 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$P9_ROPEN(r5, &(0x7f0000000100)={0x18, 0x71, 0x2, {{0x80, 0x0, 0x4}, 0xffffffff}}, 0x18) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) 02:07:28 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x3589) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000040)={0x0, 0x9, 0xfffd}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x80, 0x0, 0x2, 0xb3b}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={0x0, 0xffffff0f}, &(0x7f0000000200)=0x8) r3 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x409a02, 0x0) ioctl$VIDIOC_S_EDID(r6, 0xc0285629, &(0x7f0000000100)={0x0, 0x8, 0x6, [], &(0x7f00000000c0)=0x8}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:07:28 executing program 3: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@setneightbl={0x1c, 0x43, 0x1, 0x0, 0x0, {0x2}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f00000000c0)) r1 = getpid() r2 = gettid() tkill(r2, 0x1000000000016) ptrace(0x10, r1) ptrace$peeksig(0x2, r1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r3, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) r4 = fcntl$getown(r3, 0x9) syz_open_procfs(r4, &(0x7f0000000000)='io\x00') [ 1042.478841] binder: 28676:28679 ioctl c0306201 0 returned -14 [ 1042.488318] binder: 28677:28680 ioctl c0306201 0 returned -14 [ 1042.505532] binder: 28675:28683 ioctl c0306201 0 returned -14 [ 1042.548674] binder: 28678:28693 ioctl c0306201 0 returned -14 [ 1042.559694] binder: 28677:28694 ioctl c0306201 0 returned -14 [ 1042.605784] binder: 28678:28699 ioctl c0306201 0 returned -14 [ 1042.648606] binder: 28676:28702 ioctl c0306201 0 returned -14 [ 1042.662565] binder: 28675:28704 ioctl c0306201 0 returned -14 02:07:28 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e22, @remote}], 0x30) sendto$inet(r3, &(0x7f00000002c0)="0912590fb2871b6f265317133c4edfce3b14054f8fe853c6c412b209d5dcb1f1b069f058428662a25b81770ef2f7974c08dea6b3d497f84ce5dce3900c097574e9dab0c9b4ddf48959d9e82493ac89a60a7c6c8772751d012f41ced79ea42a944e47f4e20f74a8c9c991c70a474019fb8a17713bbc31661e055f3b220d9ccdf0831119eaab3a7feddd66a2071db91d59c51f2aa973c847fc2964b519eecd8e8a8388a74e6b067904fb65c42022c5d5b132674569dff26559f2079bca7440b4a41f00bd1660e856c0", 0xc8, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x6c, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000040)={r4, 0x9, 0xfffd}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={r4, 0x80, 0x0, 0x2, 0xb3b}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000080)={0x1, 0x9, 0x409, 0xfffffffb, 0x7b1, 0x7ff, 0x20, 0x9, r4}, &(0x7f00000000c0)=0x20) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:07:29 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000000000000bfa30000000000004503000000fefff67a0af0ffe8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000100b7050000220000006a0a00fe00000000850000000b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3487bb07eb78c27b090941bd3108d31287801000000000000000012cf6956e09d1938013c217e0f6ab2366e8a87554c101f03733d40c62753ecd1f46f09beb1bbfad9bae24b4e8a96ec60f2af47f99376e43836ba33fd5a447f936e000755861103bb45e5d53c9fe36bbd35e53c6376c0c2b1daa58a9c34444bb7e9673476d017fc94c5857ead931db6cd370e93b6d5a74cc1d2c50896249ed7420f8680a730d876c36a1f3f1b8eb12d9390a49f2d99b5df916269392e0d0000556ec919d0b1681369d448c6f8c9969baa463b36d25ac1628ef858a5cc77c14c8df67f20fd224829af6de3d5ef71857496714db96c6db18ea5189cfbddd6e4de3617adabc339334b97b11911905d6692a33f1f370c05e1f134e5f90a326b0cb5268e40f5ba9b5360a516c3f87f05e5d1af657c445131edb61670ff2c62117e96eba22382758239e69127d5656e63bf02af42a5ac113879bfc27d7e6ba1f41301065efb1685e65f30df092251d556a89c2886ea64bc457280330dc9cdb6db023433e9ba97796a7823d241795ab1258fe937312fc5e921e8758153be202f000055a4921970e28e6238580101b710cf8b82bcab02c12fe01bd8df4e97c67e8a3693b23668c55eed4e24eafa16a4f43b6729990a9321531e5eb006b547c13cdfa2fa211d07a29377ea1c5aa7f5d58331ad45fc89ac44c9d2d6b3ac03ce76fc9d341f076264f8cf493901ad919329a295f63be4e91417b9cd09cf47272d46666571f24d71fcff2a9e869c2144f5775c37084acc57b5793f25f853f7a98965e5bd9ff5253f787eb321572355c706d6d2e27c475fd077876a4405b72b00000000000000b79d8029af8de217c23f79e68fe48420cbb226a752b817fc17efaa1268c6"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000280)={0x80000001, 0x2, 0x4, 0x2000, 0x5, {0x0, 0xea60}, {0x5, 0x2, 0x9, 0x6, 0x5, 0x0, "11f6bdbf"}, 0x7fff, 0x4, @planes=&(0x7f00000000c0)={0x20000, 0xffffffff, @mem_offset=0x541, 0x9}, 0xfffffffb, 0x0, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r5, 0x7, 0x10, 0x10000000, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000305008110e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3a8, 0x0, 0x4a, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) r6 = dup2(r4, r5) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) mq_open(&(0x7f0000000040)='!\x00', 0x2, 0x100, &(0x7f0000000080)={0xfffffffffffffffc, 0xcd, 0x4, 0x9}) pipe(&(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) 02:07:29 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1043.273181] binder: 28677:28680 ioctl c0306201 0 returned -14 02:07:29 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:07:29 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000140)=0x5, 0x4) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r3, 0xc1004111, &(0x7f0000000040)={0x415b, [0x0, 0x3, 0x1], [{0x3, 0x7, 0x1, 0x0, 0x1}, {0x60, 0x8, 0x0, 0x1, 0x1}, {0x80000001, 0x100}, {0x3ff, 0x4, 0x1, 0x0, 0x0, 0x1}, {0xfff, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x7, 0x7, 0x0, 0x1, 0x1}, {0xcb04, 0x4, 0x1, 0x0, 0x0, 0x1}, {0xd4, 0xffffffff, 0x0, 0x0, 0x0, 0x1}, {0xfff, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x1, 0xcae, 0x1, 0x1, 0x1}, {0x7fffffff, 0x5a0, 0x0, 0x1, 0x1}, {0x5, 0x7ff, 0x1, 0x1, 0x1, 0x1}], 0x573}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) [ 1043.324913] binder: 28711:28712 ioctl c0306201 0 returned -14 [ 1043.362282] ptrace attach of "/root/syz-executor.3"[28690] was attempted by "/root/syz-executor.3"[28715] 02:07:29 executing program 3: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2007ff9) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[], 0x4ea00) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc028660f, &(0x7f00000005c0)=0x40080ffff) tkill(r1, 0x1000000000016) ptrace(0x10, r0) ptrace$peeksig(0x2, r0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) getsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000080)=0x48) [ 1043.379244] binder: 28713:28719 ioctl c0306201 0 returned -14 [ 1043.400448] binder: 28714:28723 ioctl c0306201 0 returned -14 [ 1043.414510] binder: 28718:28724 ioctl c0306201 0 returned -14 [ 1043.454517] binder: 28713:28731 ioctl c0306201 0 returned -14 [ 1043.474343] binder: 28714:28733 ioctl c0306201 0 returned -14 02:07:29 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x3) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1043.655381] binder_alloc: 28743: binder_alloc_buf, no vma [ 1043.656002] binder: 28718:28747 ioctl c0306201 0 returned -14 02:07:29 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)={0x6c, 0x3, "caa444a037d4416614f669b8f919489dc00a22c7af6d5eaf7e243d33cbf86511901fa5f3422c354bc05f2383f3a13f9469a2bb17aa871a351edd9316d26ba72b84ed323b52d3dca3d35423f34f955e9f2bcb9fc7f9fc3754eaee7086c32f5b54c5a631e9"}, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 02:07:29 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x2) dup2(r1, r2) ioctl$TIOCSIG(r2, 0x40045436, 0x22) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r4 = add_key$fscrypt_provisioning(&(0x7f0000000080)='fscrypt-provisioning\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f00000001c0)={0x2, 0x0, "9b9b54cfee54e00c9702a9578a0d73d18f76d8d26d12f5416e1aab5525f6e5c5d5633edc5bce2f226ce2ca3f6ac821583777227900e5b7d5c0a1abf1d94d70f21838ac11d689713e9547ccfd4ba086732ea52d5b6f69897d29f8043b156c4b6cb88b8e7523eb31458f61af5cd83704aabc1eceac"}, 0x7c, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f00000011c0)={{0x0, 0x0, @descriptor="a0d1216905c0ea64"}, 0x1000, r4, [], "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"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r5 = dup2(r3, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$cgroup_int(r8, &(0x7f0000000040)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$binfmt_aout(r9, &(0x7f00000007c0)={{0x108, 0x81, 0xc2, 0x8, 0x2b, 0x2, 0x35c, 0x8554}, "ced6eb5b29c80287824740b03448683d4d9e765c0486e7c5392e048ebd7973321ee670499385091245dc6686f9188a99f2263c29fa09d00d49d782d6cd80b5b2a10aada3242f681285873f634c04ff71afc88ae21757080871d9eb9b422e75b6d0311410cd51e73c78e9964b76dd1d177f9a33096d3ea83742d32efc2f73367233982fd53f4a265dd53cea151a5ecf91a01b34c5e6411ec589020ff03a612ed25dbd24da1e26df56853e253f80223d6297133b34772a8ac6ed684972f1c82a8423b089d687fdbf3aa5e3e8", [[], [], [], [], [], [], [], [], []]}, 0x9eb) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:07:29 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1044.158203] binder: 28713:28731 ioctl c0306201 0 returned -14 [ 1044.170599] binder: 28749:28752 ioctl c0306201 0 returned -14 02:07:30 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fchmod(r2, 0x120) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000140)={0x3, 0xf8, &(0x7f0000000040)="8197e39854406ef9568861d293f0388107bdc409c21af6a784f3f9cf29ba6d57bca99f2306fa8f00489799e51f1f84de21cb8eb98698c7b5a890aeae4027d1a75df1625498dd3825b2dde77e35419754d4dc76da1bed8c90cad95116a02a00fe3f1b8f8b62e0efa6c7a3469e18cd7513d72b291ef51e1113f38a70bf65ce61dff446244452a2623e117be4301eb71fd8994535234b913d7ea061b8253c9d766013f62d3f6de48dd77e610372158f5eb66efecd3b8a54f07fd14fc4819a4a1016f69f14ebe3d1fce423424026e19b70c31ed7c1fd6200dfa02ea79cc9c8df28a5f9ba4cb12d3a4c79de396551b11aa9b3c56d3d8118885a6e"}) r3 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) 02:07:30 executing program 3: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() tkill(r1, 0x1000000000016) ptrace(0x10, r0) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) r2 = getpid() r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f0000000080)='\x00') sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) ptrace$peeksig(0x2, r2, 0x0, 0x0) [ 1044.252089] binder: 28754:28757 ioctl c0306201 0 returned -14 [ 1044.258809] binder: 28755:28760 ioctl c0306201 0 returned -14 [ 1044.272025] binder: 28759:28762 ioctl c0306201 0 returned -14 [ 1044.294506] binder: 28749:28764 ioctl c0306201 0 returned -14 [ 1044.325635] binder: 28754:28769 ioctl c0306201 0 returned -14 [ 1044.336642] binder: 28755:28770 ioctl c0306201 0 returned -14 02:07:30 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="052158766dc2269b654bdb8d6a630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1044.435029] binder: 28776:28777 unknown command 1985487109 [ 1044.437283] binder: 28759:28780 ioctl c0306201 0 returned -14 [ 1044.442204] binder: 28776:28777 ioctl c0306201 20000200 returned -22 02:07:30 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000001c0)={0x3, r3}) r4 = dup2(r1, r0) write$binfmt_aout(r1, &(0x7f0000000040)={{0x108, 0x4, 0x9, 0x9e, 0x37d, 0x6a, 0x6b, 0xf5af}, "d6af715db01f6e1c4355dc3004db3e0b0d2eedd6a60ac85fadccbaa5d3e0d6df0ec6ac34e1944f9eedab55541f556965f27bd75ce885ad3f6569dbed8885649af6815e02cb763f638646ce143eddc23b6c1d495ca8ccccb5dfdadfd3260a76191e713b3e8f02d91869b1477e4c8a9409661cc1dd684a6d7e63d1c47d22344a2eef246089c903a63101291ec8f9c049789c6bc7f26e0adb7aa3484af5faf0996047798cb423889a71efd9e86b241fc5b1d4c03e55b8f4bdc37730914fbed64e78ec2946978c905e2037d34de3b1bcbd7f31a4aebfa2712d5e12d66d005f04e597764c334c6dec7b005a9bd158e92b956414409d15403e91"}, 0x117) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) [ 1044.995066] binder: 28783:28785 ioctl c0306201 0 returned -14 02:07:30 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x1f, 0x200880) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000080)=0x5, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r3 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:07:30 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47c515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c0000", 0xa1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) [ 1045.035598] binder: 28754:28769 ioctl c0306201 0 returned -14 [ 1045.042263] binder: 28754:28769 ioctl c0306201 0 returned -14 [ 1045.045205] binder: 28755:28774 ioctl c0306201 0 returned -14 [ 1045.055822] binder: 28755:28774 ioctl c0306201 0 returned -14 02:07:30 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@setneightbl={0x1c, 0x43, 0x1, 0x0, 0x0, {0x2}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6e34, 0x7fff, 0x27, 0x80000000}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = dup2(r3, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1045.104069] binder: 28787:28793 ioctl c0306201 0 returned -14 [ 1045.122171] binder: 28791:28795 ioctl c0306201 0 returned -14 [ 1045.169316] binder: 28787:28798 ioctl c0306201 0 returned -14 [ 1045.171023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=28800 comm=syz-executor.0 [ 1045.188501] binder: 28791:28802 ioctl c0306201 0 returned -14 [ 1045.209311] binder: 28796:28800 ioctl c0306201 0 returned -14 02:07:31 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="14630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000080)={0x101, 0x5, 0x6}, 0x8) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) connect(r3, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x3, @dev={0xfe, 0x80, [], 0x37}, 0x3, 0x2}, 0x80) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="ee6260796fe14a21bc50085a4b1d19fa2f5924f4c2a0897ebcd1fd0f2604022802230508572b74ca663e5e42c422831e33d2"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1045.215732] binder: 28783:28803 ioctl c0306201 0 returned -14 [ 1045.254585] binder: 28805:28806 unknown command 1074029332 [ 1045.260447] binder: 28805:28806 ioctl c0306201 20000200 returned -22 [ 1045.267193] binder: 28796:28808 ioctl c0306201 0 returned -14 [ 1045.318979] binder: 28805:28810 unknown command 2036359918 [ 1045.324813] binder: 28805:28810 ioctl c0306201 20000280 returned -22 02:07:31 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) [ 1045.820944] binder: 28812:28813 ioctl c0306201 0 returned -14 02:07:31 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) flistxattr(r1, &(0x7f0000000040)=""/120, 0x78) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) [ 1045.903361] binder: 28787:28798 ioctl c0306201 0 returned -14 [ 1045.923721] binder: 28812:28817 ioctl c0306201 0 returned -14 02:07:31 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@setneightbl={0x1c, 0x43, 0x1, 0x0, 0x0, {0x2}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_ADD(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x34, r7, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="14f47e05ad29b106b638a37b20e8f6550dd7a3132021d92418abdf10ced7e3e46b7252d878824617e7354daf234a61cccf83d6ec162c1233fbab455f81151c9e537ebd163e58b6e94c09bb900483bebaa61c87613e89452d44ebc8cae7ad25cb1cc958590b642081cef1ed42b8", @ANYRES16=r7, @ANYBLOB="14002bbd7000fddbdf25040000000900010073797a31000000001400020076657468300000000000000000000000050004000100000005000400090000001400020076657468315f6d6163767461700000000900010073797a3100000000"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4002000) [ 1045.968913] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=28808 comm=syz-executor.0 [ 1045.990873] binder: 28818:28819 ioctl c0306201 0 returned -14 [ 1046.000492] binder: 28796:28808 ioctl c0306201 0 returned -14 02:07:31 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x100000000, 0x226602) ioctl$TIOCL_GETSHIFTSTATE(r5, 0x541c, &(0x7f0000000080)={0x6, 0x7f}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) accept$alg(r6, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1046.015098] binder: 28796:28808 ioctl c0306201 0 returned -14 [ 1046.015103] binder: 28820:28822 ioctl c0306201 0 returned -14 02:07:31 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="8373dd6ad5726a0ed08009f0a68f45a9518837443c4145c5dbe10d645859cc848258483950d92f0b5addb6a3b4f806d5a5bdd920b45dd40500000000000000750537ac774cfb002e24c92612003688bb3f3016b3c99ee41d9c03bcaee795f4bd1c2777c59e8cc8757c246d2304a91316694d4fbd0f8b7c8aa9026bb59c98415d5be75b386ba5d6b4c377a6397d55f227f53a5db198e30cb04c75dc8aa0cb06ed0eed670e4b4f13626583c1d876ba8689478f06a62ae670d49b1d5e326ea47ddb2d9d9076af0e7814747624f3cd5889f28a630d8528eac4e67930f60f7c3fcf06a28348bd6c55d6a743f8dec7a6d13fbc5d49a75b8731285e9fcc4a7f26c9e88d385905da627e81ea8fa374b9d5674700da9ed9a49fd05c40a7faa8f33f6df15b724b951bb696cf5f76be0ebd08be3f0a25bdf52222c9008000000000000050abac5210c0f31f332b66f2794d5dbf987a2cde8c"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_GET_REGS(r3, 0x8090ae81, &(0x7f00000000c0)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002c0603ccb4289471d06d17a020704b9ebda6"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1046.073893] binder: 28820:28826 ioctl c0306201 0 returned -14 [ 1046.076222] binder: 28825:28827 ioctl c0306201 0 returned -14 [ 1046.105861] binder: 28818:28831 ioctl c0306201 0 returned -14 [ 1046.115841] binder: 28829:28832 unknown command 1792897923 [ 1046.125360] binder: 28829:28832 ioctl c0306201 20000200 returned -22 [ 1046.145876] binder: 28825:28835 ioctl c0306201 0 returned -14 [ 1046.233962] binder: 28829:28839 unknown command 50736128 [ 1046.239496] binder: 28829:28839 ioctl c0306201 20000280 returned -22 [ 1046.813615] binder: 28820:28826 ioctl c0306201 0 returned -14 02:07:33 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = getpid() sched_rr_get_interval(r2, &(0x7f0000000040)) r3 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000043000000020000000500010000000000"], 0x1c}}, 0x0) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) getsockopt$IP_SET_OP_GET_BYINDEX(r5, 0x1, 0x53, &(0x7f0000000080)={0x7, 0x7, 0x1}, &(0x7f00000000c0)=0x28) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x88, r7, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7c53}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4de}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xd35}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) 02:07:33 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 02:07:33 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)="14b405d3b27e877c14f38e7a5ad3e1ca27670104000000000000a11cad64da91e08b98d1c898a13df6f49f7707d945223ab13a7e8915914e0c8a8a763b725e962bdfae6182b0420ca8def770b3876211fbbf3dd49f187cf52df71fec9570c81b3eb752eb8adb", 0x66}], 0x1, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = dup3(0xffffffffffffffff, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x6c, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000040)={r6, 0x9, 0xfffd}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={r6, 0x80, 0x0, 0x2, 0xb3b}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000001c0)={r6, 0xf6, "89442b0f3bc5f416fa397602443f9b85766f2de7de0cc075b8858d11c448512b2bfb151fabcf7d18861652d980a04b77a357d52e13c08ad43b40a0a8ec20cc5ee2ded99fbc32db72bb72e8c954b1f86b987f04186f416d40e39bc877ebe9aef4ab53b0bf887c2ac7bf463569eef285bec66fdd07ba2a548d4e7d330d57734eef70111e59453ec04de8a5e2097b23062c6bd01e758653146cc18c84d7677b0330480867da6dcacc4f8fb6a2bce721a6e859062f50763e981d54ee5a84bd26b7d8539927676e6deaa14da4f1b38d3224840aed73e1746e7704e52001143531e1633e60a11ab9a8c3b48622449fa0d79293d065e9e85493"}, &(0x7f0000000100)=0xfe) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:07:33 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$FIOCLEX(r4, 0x5451) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:07:33 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:07:33 executing program 3: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = semget$private(0x0, 0x7, 0x0) semop(r0, &(0x7f0000000100)=[{0x0, 0x0, 0x1000}], 0x1) r1 = getpid() r2 = gettid() tkill(r2, 0x1000000000016) ptrace(0x10, r1) ptrace$peeksig(0x2, r1, 0x0, 0x0) [ 1047.321122] binder: 28853:28858 ioctl c0306201 0 returned -14 [ 1047.328023] binder: 28851:28857 ioctl c0306201 0 returned -14 [ 1047.331010] binder: 28854:28859 ioctl c0306201 0 returned -14 [ 1047.343586] binder: 28852:28861 ioctl c0306201 0 returned -14 [ 1047.349615] binder: 28856:28860 unknown command 4 [ 1047.359058] binder: 28856:28860 ioctl c0306201 200000c0 returned -22 [ 1047.417157] binder: 28854:28869 ioctl c0306201 0 returned -14 [ 1047.423169] binder: 28853:28868 ioctl c0306201 0 returned -14 [ 1047.437743] binder: 28851:28873 ioctl c0306201 0 returned -14 [ 1047.474970] binder: 28852:28875 ioctl c0306201 0 returned -14 02:07:33 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_ACTIVATE(r3, 0x5606, 0x7) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:07:33 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x3) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x81, 0x4000) ioctl$SNDRV_PCM_IOCTL_REWIND(r5, 0x40084146, &(0x7f0000000080)=0x67205d7d) 02:07:33 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r8, 0xee00, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r10) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="790000007d010000005b000002000000024002000000070000000000000000001804700000000500000000000000000000000d002f6465762f62696e64658a23000d002f6465762f62696e64657223000100000d002f6465762f62696e64657223000900402f28252523245e7b", @ANYRES32=r6, @ANYRES32=r8, @ANYRES32=r10], 0x79) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) [ 1048.114626] binder: 28853:28868 ioctl c0306201 0 returned -14 [ 1048.116945] binder: 28854:28869 ioctl c0306201 0 returned -14 02:07:33 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@setneightbl={0x1c, 0x43, 0x1103, 0x0, 0x0, {0x2}, [@NDTA_THRESH3={0x8, 0x4, 0x4}]}, 0x1c}}, 0x0) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x10, 0xa, 0x801, 0x0, 0x0, {0xc, 0x0, 0xa}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8812}, 0x20000091) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="056304c0"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) write(r5, &(0x7f00000002c0)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b20565329a05d03a2467a31d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e2ea6e7b62256ae8faaae5f59f840c029418a34c", 0x9b) ioctl$VIDIOC_CROPCAP(r4, 0xc02c563a, &(0x7f00000001c0)={0x5, {0x4, 0xffffffff, 0x9, 0x3}, {0x2, 0x2, 0x9, 0x5}, {0x3, 0xbd3}}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x68, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_batadv\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1048.204487] binder: 28879:28883 ioctl c0306201 0 returned -14 [ 1048.218791] binder: 28853:28874 ioctl c0306201 0 returned -14 [ 1048.237594] binder: 28884:28888 ioctl c0306201 0 returned -14 [ 1048.242884] binder: 28882:28889 ioctl c0306201 0 returned -14 [ 1048.257805] divide error: 0000 [#1] PREEMPT SMP KASAN [ 1048.257810] Modules linked in: [ 1048.257821] CPU: 0 PID: 7045 Comm: kworker/0:3 Not tainted 4.14.184-syzkaller #0 [ 1048.257826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1048.257840] Workqueue: events console_callback [ 1048.257848] task: ffff88805fd9a1c0 task.stack: ffff88805fda0000 [ 1048.257859] RIP: 0010:fbcon_switch+0x1cb/0x1700 [ 1048.257863] RSP: 0018:ffff88805fda7a88 EFLAGS: 00010246 [ 1048.257870] RAX: 0000000000008000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1048.257875] RDX: 0000000000000000 RSI: ffffffff8ad6fe40 RDI: ffff8880919c4bfc [ 1048.257880] RBP: ffff888219230040 R08: 0000000000000001 R09: 0000000000000000 [ 1048.257884] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880919c48c0 [ 1048.257889] R13: ffff8880a5ff2d80 R14: 0000000000000001 R15: ffff8880919c4d38 [ 1048.257896] FS: 0000000000000000(0000) GS:ffff8880aec00000(0000) knlGS:0000000000000000 [ 1048.257901] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1048.257905] CR2: 0000000000768000 CR3: 000000008d3b9000 CR4: 00000000001406f0 [ 1048.257916] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1048.257920] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1048.257923] Call Trace: [ 1048.257934] ? lock_downgrade+0x6e0/0x6e0 [ 1048.257945] ? fbcon_set_font+0x7c0/0x7c0 [ 1048.257953] ? kernfs_notify+0x98/0x160 [ 1048.257965] ? mark_held_locks+0xa6/0xf0 [ 1048.257980] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1048.257988] ? kernfs_put+0x24/0x480 [ 1048.257995] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1048.258003] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1048.258011] ? fbcon_set_origin+0x1c/0x40 [ 1048.258017] ? fbcon_scrolldelta+0x1080/0x1080 [ 1048.258027] redraw_screen+0x332/0x760 [ 1048.258034] ? fb_get_color_depth+0x5a/0x70 [ 1048.258041] ? set_palette+0x130/0x130 [ 1048.258048] ? get_color+0x1b8/0x3a0 [ 1048.258061] complete_change_console+0xf9/0x350 [ 1048.258075] change_console+0x156/0x270 [ 1048.258083] console_callback+0x32c/0x380 [ 1048.258091] ? poke_blanked_console+0x1d0/0x1d0 [ 1048.258102] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1048.258112] process_one_work+0x7c0/0x14c0 [ 1048.258124] ? pwq_dec_nr_in_flight+0x2b0/0x2b0 [ 1048.258130] ? worker_thread+0x163/0x1080 [ 1048.258142] worker_thread+0x5d7/0x1080 [ 1048.258155] ? process_one_work+0x14c0/0x14c0 [ 1048.258165] kthread+0x30d/0x420 [ 1048.258173] ? kthread_create_on_node+0xd0/0xd0 [ 1048.258181] ret_from_fork+0x24/0x30 [ 1048.258191] Code: 0c a6 bc 07 83 c2 03 48 89 2d 42 a6 bc 07 48 89 2d bb a5 bc 07 38 ca 7c 08 84 c9 0f 85 9a 13 00 00 41 8b 9c 24 3c 03 00 00 31 d2 f3 83 f8 05 89 44 24 10 0f 8e b8 0a 00 00 e8 31 52 40 fe 8b [ 1048.258346] RIP: fbcon_switch+0x1cb/0x1700 RSP: ffff88805fda7a88 [ 1048.258379] ---[ end trace 728c759906574bc7 ]--- [ 1048.258383] Kernel panic - not syncing: Fatal exception [ 1048.259814] Kernel Offset: disabled [ 1048.535586] Rebooting in 86400 seconds..