dplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700ed0e002500"/32, 0x20) 03:42:31 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000ff0000000000000000", 0x20) 03:42:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000003020000fdfdffff06630440"], 0x0, 0x0, 0x0}) [ 1079.668606][T20007] IPv6: veth0_to_bond: Disabled Multicast RS [ 1079.732967][T20024] __nla_validate_parse: 14 callbacks suppressed [ 1079.733017][T20024] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1079.805523][T20032] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:42:32 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000f0ffff0000000000000000", 0x20) 03:42:32 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000f002500"/32, 0x20) 03:42:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000004020000fdfdffff06630440"], 0x0, 0x0, 0x0}) [ 1079.934484][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1079.934521][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1079.940357][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1079.946069][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:42:32 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00c0a700000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000200020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = accept4$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, &(0x7f0000000140)=0x10, 0x800) getsockopt$inet_dccp_buf(r3, 0x21, 0xc0, &(0x7f0000000180)=""/40, &(0x7f00000001c0)=0x28) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r6, 0x89f0, &(0x7f0000000080)={'sit0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={'veth0_to_bond\x10\x00\xe7', @ifru_names='bridge_slave_1\x00'}) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1080.048324][T20038] binder: BINDER_SET_CONTEXT_MGR already set 03:42:32 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000009effffff0000000000000000", 0x20) [ 1080.106235][T20047] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1080.116089][T20038] binder: 20037:20038 ioctl 40046207 0 returned -16 03:42:32 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700003f002500"/32, 0x20) [ 1080.168650][T20054] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:42:32 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c0000a800000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000300020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000005020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:32 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000c3ffffff0000000000000000", 0x20) 03:42:32 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000040002500"/32, 0x20) [ 1080.330444][T20067] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:42:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000400020000fdfdffff06630440"], 0x0, 0x0, 0x0}) [ 1080.421134][T20071] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:42:32 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c0040a800000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:32 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000f0ffffff0000000000000000", 0x20) 03:42:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = accept4$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, &(0x7f0000000140)=0x10, 0x800) getsockopt$inet_dccp_buf(r3, 0x21, 0xc0, &(0x7f0000000180)=""/40, &(0x7f00000001c0)=0x28) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r6, 0x89f0, &(0x7f0000000080)={'sit0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={'veth0_to_bond\x10\x00\xe7', @ifru_names='bridge_slave_1\x00'}) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:42:32 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407006558002500"/32, 0x20) 03:42:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000006020000fdfdffff06630440"], 0x0, 0x0, 0x0}) [ 1080.617667][T20086] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1080.671947][T20084] binder: BINDER_SET_CONTEXT_MGR already set [ 1080.675212][T20089] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:42:33 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000003400000000000", 0x20) 03:42:33 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000060002500"/32, 0x20) [ 1080.743264][T20084] binder: 20082:20084 ioctl 40046207 0 returned -16 [ 1080.747947][T20098] binder: BINDER_SET_CONTEXT_MGR already set [ 1080.779223][T20098] binder: 20097:20098 ioctl 40046207 0 returned -16 03:42:33 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c0080a800000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000500020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000007020000fdfdffff06630440"], 0x0, 0x0, 0x0}) [ 1080.987856][T20110] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:42:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000008020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:33 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407005865002500"/32, 0x20) [ 1081.050735][T20118] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:42:33 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000fffffffffffff00000000000", 0x20) 03:42:33 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00c0a800000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1081.141336][T20121] binder: BINDER_SET_CONTEXT_MGR already set [ 1081.160902][T20121] binder: 20120:20121 ioctl 40046207 0 returned -16 03:42:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = accept4$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, &(0x7f0000000140)=0x10, 0x800) getsockopt$inet_dccp_buf(r3, 0x21, 0xc0, &(0x7f0000000180)=""/40, &(0x7f00000001c0)=0x28) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r6, 0x89f0, &(0x7f0000000080)={'sit0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={'veth0_to_bond\x10\x00\xe7', @ifru_names='bridge_slave_1\x00'}) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:42:33 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000081002500"/32, 0x20) 03:42:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000600020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:33 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000100000000", 0x20) 03:42:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000030000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:33 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c0000a900000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:33 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000eed002500"/32, 0x20) [ 1081.486731][T20146] binder: BINDER_SET_CONTEXT_MGR already set 03:42:33 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000200000000", 0x20) 03:42:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000700020000fdfdffff06630440"], 0x0, 0x0, 0x0}) [ 1081.549294][T20146] binder: 20142:20146 ioctl 40046207 0 returned -16 03:42:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000050000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:33 executing program 0: r0 = socket(0xa, 0x3, 0x4) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000080)={0x3, @rose}) 03:42:33 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c0040a900000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000800020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:34 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000f0002500"/32, 0x20) 03:42:34 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000300000000", 0x20) 03:42:34 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x40000000, 0x0, 0x0, 0x0, 0x0) r0 = getpid() ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) tkill(r0, 0x9) 03:42:34 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c0080a900000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000060000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000003020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:34 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000600000000", 0x20) 03:42:34 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000003400"/32, 0x20) 03:42:34 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00c0a900000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1082.112670][T20190] IPVS: ftp: loaded support on port[0] = 21 03:42:34 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000f00000000", 0x20) [ 1082.204163][T20202] binder: BINDER_SET_CONTEXT_MGR already set [ 1082.244080][T20202] binder: 20199:20202 ioctl 40046207 0 returned -16 03:42:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c4000000000000c0000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:34 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000008100"/32, 0x20) 03:42:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000005020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:34 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c0000aa00000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:34 executing program 0: r0 = socket(0x8, 0xa, 0x7) r1 = getpid() ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000080)=r1) timerfd_create(0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") prctl$PR_GET_DUMPABLE(0x3) mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x6, 0x71, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) clone(0x4000000, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') clone(0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r3, r4, &(0x7f0000000100)=0x4, 0xe0) 03:42:34 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c0040aa00000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:34 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000004000000000", 0x20) 03:42:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000400000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:34 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000002002500"/32, 0x20) 03:42:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000006020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:34 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000ffffff9e00000000", 0x20) 03:42:34 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000003002500"/32, 0x20) 03:42:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000ff0000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:35 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c0080aa00000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000007020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:35 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000000000000ec000000000", 0x20) 03:42:35 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x2, 0x0, [{}, {0x0, 0x9}]}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 03:42:35 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00c0aa00000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:35 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000004002500"/32, 0x20) 03:42:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000040020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000030000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:35 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000000011c000000000", 0x20) 03:42:35 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c0000ab00000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:35 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000006002500"/32, 0x20) 03:42:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c4000000000ff020000fdfdffff06630440"], 0x0, 0x0, 0x0}) [ 1083.356563][T20301] binder: BINDER_SET_CONTEXT_MGR already set [ 1083.381296][T20301] binder: 20297:20301 ioctl 40046207 0 returned -16 03:42:35 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000ffffffc300000000", 0x20) 03:42:35 executing program 0: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000002400)=""/147, 0x93}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_matches\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 03:42:35 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c0040ab00000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:35 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000a002500"/32, 0x20) 03:42:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000040000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000002020000fdfdffff06630440"], 0x0, 0x0, 0x0}) [ 1083.694971][ C0] net_ratelimit: 14 callbacks suppressed [ 1083.695032][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1083.708284][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:42:36 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000fffffff000000000", 0x20) 03:42:36 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00020001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:36 executing program 0: 03:42:36 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000c002500"/32, 0x20) 03:42:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000050000fdfdffff06630440"], 0x0, 0x0, 0x0}) [ 1083.956075][T20342] binder: BINDER_SET_CONTEXT_MGR already set 03:42:36 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00030001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1084.021259][T20342] binder: 20338:20342 ioctl 40046207 0 returned -16 03:42:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000003020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:36 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000000000ff00000000", 0x20) 03:42:36 executing program 0: 03:42:36 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000e002500"/32, 0x20) [ 1084.094479][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1084.094485][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1084.094532][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1084.100358][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:42:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000060000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:36 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000f0ffffffffffff00000000", 0x20) 03:42:36 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00040001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:36 executing program 0: 03:42:36 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000f002500"/32, 0x20) 03:42:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000004020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:36 executing program 0: 03:42:36 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000200"/32, 0x20) 03:42:36 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000010002500"/32, 0x20) 03:42:36 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00050001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000080000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000005020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:36 executing program 0: 03:42:37 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000300"/32, 0x20) [ 1084.793122][T20406] __nla_validate_parse: 28 callbacks suppressed [ 1084.793158][T20406] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:42:37 executing program 0: [ 1084.869634][T20413] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1084.894509][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1084.900398][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1084.906303][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1084.912097][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:42:37 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000060002500"/32, 0x20) 03:42:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c4000000000000c0000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000006020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:37 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00060001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:37 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000600"/32, 0x20) 03:42:37 executing program 0: [ 1085.142979][T20431] binder: BINDER_SET_CONTEXT_MGR already set 03:42:37 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000f0002500"/32, 0x20) [ 1085.213996][T20434] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1085.236625][T20431] binder: 20423:20431 ioctl 40046207 0 returned -16 03:42:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000100000fdfdffff06630440"], 0x0, 0x0, 0x0}) [ 1085.264050][T20439] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:42:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000007020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:37 executing program 0: 03:42:37 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00070001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:37 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000f00"/32, 0x20) 03:42:37 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000032500"/32, 0x20) [ 1085.526668][T20456] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:42:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020200fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:37 executing program 0: 03:42:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000008020000fdfdffff06630440"], 0x0, 0x0, 0x0}) [ 1085.582005][T20462] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:42:37 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000f000"/32, 0x20) 03:42:37 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000062500"/32, 0x20) 03:42:38 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000a0001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:38 executing program 0: 03:42:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000030000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:38 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000003000000000000000000", 0x20) [ 1085.915152][T20484] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:42:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020300fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:38 executing program 0: 03:42:38 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000a2500"/32, 0x20) [ 1085.961934][T20486] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:42:38 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000006000000000000000000", 0x20) 03:42:38 executing program 0: 03:42:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000050000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:38 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000e0001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020400fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:38 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000c2500"/32, 0x20) 03:42:38 executing program 0: [ 1086.361325][T20513] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:42:38 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000c00e000000000000000000", 0x20) [ 1086.441042][T20517] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:42:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000060000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020500fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:38 executing program 0: 03:42:38 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000f0001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:38 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000e2500"/32, 0x20) 03:42:38 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000f000000000000000000", 0x20) 03:42:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c4000000000000c0000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:39 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000ed0e2500"/32, 0x20) 03:42:39 executing program 0: 03:42:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020600fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:39 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00480001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:39 executing program 0: 03:42:39 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000f2500"/32, 0x20) 03:42:39 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000c011000000000000000000", 0x20) 03:42:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000400000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020700fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:39 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c004c0001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:39 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x3, 0x0, 0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, 0x0) 03:42:39 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000003f2500"/32, 0x20) 03:42:39 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000040000000000000000000", 0x20) 03:42:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000ff0000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020800fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:39 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00600001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) dup3(r1, r3, 0x0) dup2(r3, r2) 03:42:39 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000402500"/32, 0x20) 03:42:39 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000ec0000000000000000000", 0x20) 03:42:39 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00680001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1087.660502][T20606] binder: BINDER_SET_CONTEXT_MGR already set [ 1087.712417][T20606] binder: 20592:20606 ioctl 40046207 0 returned -16 03:42:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020003fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:40 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000030000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:40 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000011c0000000000000000000", 0x20) 03:42:40 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c006c0001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:40 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000065582500"/32, 0x20) 03:42:40 executing program 0: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x200000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) semctl$IPC_INFO(0x0, 0x3, 0x3, 0x0) 03:42:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020005fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:40 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00740001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:40 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000f0000000000000000000", 0x20) 03:42:40 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000040000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:40 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000602500"/32, 0x20) 03:42:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020006fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:40 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000ff000000000000000000", 0x20) 03:42:40 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c007a0001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:40 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000050000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:40 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000058652500"/32, 0x20) 03:42:40 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000040030000000000000000", 0x20) [ 1088.662105][T20679] binder: BINDER_SET_CONTEXT_MGR already set [ 1088.694330][T20679] binder: 20678:20679 ioctl 40046207 0 returned -16 03:42:41 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) tkill(r0, 0xd) 03:42:41 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00f00001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020007fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000060000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:41 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000812500"/32, 0x20) 03:42:41 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000003400000000000000000", 0x20) [ 1089.038462][T20701] binder: BINDER_SET_CONTEXT_MGR already set [ 1089.054539][ C1] net_ratelimit: 15 callbacks suppressed [ 1089.054549][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1089.066066][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1089.071942][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1089.077775][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1089.083466][T20701] binder: 20693:20701 ioctl 40046207 0 returned -16 03:42:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020040fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:41 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000fffff00000000000000000", 0x20) 03:42:41 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000301000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:41 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000100000000000000", 0x20) 03:42:41 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000eed2500"/32, 0x20) 03:42:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000080000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:41 executing program 0: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x200000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) pipe(0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 03:42:41 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000200000000000000", 0x20) 03:42:41 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000501000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c4000000000000200fffdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:41 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000f02500"/32, 0x20) 03:42:41 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000300000000000000", 0x20) 03:42:41 executing program 0 (fault-call:2 fault-nth:0): r0 = gettid() exit(0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:42:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c4000000000000c0000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:41 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000601000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:41 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000600000000000000", 0x20) 03:42:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020002fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:42 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000022500"/32, 0x20) 03:42:42 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000701000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000100000fdfdffff06630440"], 0x0, 0x0, 0x0}) [ 1089.934476][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1089.940318][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:42:42 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000032500"/32, 0x20) [ 1090.016311][T20778] __nla_validate_parse: 24 callbacks suppressed [ 1090.016324][T20778] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:42:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020003fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:42 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000f00000000000000", 0x20) 03:42:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020200fdfdffff06630440"], 0x0, 0x0, 0x0}) [ 1090.071347][T20784] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1090.334476][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1090.334512][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1090.340335][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:42:42 executing program 0: r0 = gettid() exit(0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:42:42 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000a01000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:42 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000042500"/32, 0x20) 03:42:42 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000004000000000000000", 0x20) 03:42:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020004fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020300fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:42 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000062500"/32, 0x20) [ 1090.589271][T20806] binder: BINDER_SET_CONTEXT_MGR already set [ 1090.596820][T20810] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1090.615603][T20806] binder: 20805:20806 ioctl 40046207 0 returned -16 03:42:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020005fdfdffff06630440"], 0x0, 0x0, 0x0}) [ 1090.639635][T20818] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:42:42 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000ffffff9e00000000000000", 0x20) 03:42:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020400fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:42 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c001e0a01000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:43 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000a2500"/32, 0x20) [ 1090.843554][T20834] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1090.864262][T20836] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1091.144477][ C1] protocol 88fb is buggy, dev hsr_slave_0 03:42:43 executing program 0: r0 = gettid() exit(0x0) move_pages(r0, 0x204, 0x0, 0x0, 0x0, 0x0) 03:42:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020006fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:43 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000000ec000000000000000", 0x20) 03:42:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020500fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:43 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000e01000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:43 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000c2500"/32, 0x20) [ 1091.454897][T20848] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:42:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020600fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020007fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:43 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000e2500"/32, 0x20) [ 1091.518206][T20861] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:42:43 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00c00e01000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:43 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000011c000000000000000", 0x20) [ 1091.697299][T20873] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:42:44 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000ffffffc300000000000000", 0x20) [ 1091.754737][T20878] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:42:44 executing program 0: r0 = gettid() exit(0x0) move_pages(r0, 0x402, 0x0, 0x0, 0x0, 0x0) 03:42:44 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000f2500"/32, 0x20) 03:42:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020700fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020008fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:44 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000f01000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:44 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000fffffff000000000000000", 0x20) 03:42:44 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000102500"/32, 0x20) [ 1092.355353][T20900] binder: BINDER_SET_CONTEXT_MGR already set [ 1092.385648][T20900] binder: 20891:20900 ioctl 40046207 0 returned -16 03:42:44 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000ff00000000000000", 0x20) 03:42:44 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000a1e01000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fffdffff06630440"], 0x0, 0x0, 0x0}) 03:42:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020800fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:44 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000602500"/32, 0x20) [ 1092.573000][T20922] binder: BINDER_SET_CONTEXT_MGR already set [ 1092.615022][T20922] binder: 20916:20922 ioctl 40046207 0 returned -16 03:42:45 executing program 0: r0 = gettid() exit(0x0) move_pages(r0, 0x2040000, 0x0, 0x0, 0x0, 0x0) 03:42:45 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000f0ffff00000000000000", 0x20) 03:42:45 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00002001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:45 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000003400"/32, 0x20) 03:42:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020003fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff0b630000"], 0x0, 0x0, 0x0}) 03:42:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff0c630000"], 0x0, 0x0, 0x0}) 03:42:45 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000008100"/32, 0x20) 03:42:45 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00003f01000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020005fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:45 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000009effffff00000000000000", 0x20) 03:42:45 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000003400"/32, 0x20) 03:42:46 executing program 0: r0 = gettid() exit(0x0) move_pages(r0, 0x204000000000000, 0x0, 0x0, 0x0, 0x0) 03:42:46 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000c3ffffff00000000000000", 0x20) 03:42:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020006fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:46 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00004001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff0d630000"], 0x0, 0x0, 0x0}) 03:42:46 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250200"/32, 0x20) [ 1094.094481][ C0] net_ratelimit: 13 callbacks suppressed [ 1094.094491][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1094.106003][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:42:46 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00004801000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:46 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000f0ffffff00000000000000", 0x20) [ 1094.247973][T20986] binder: BINDER_SET_CONTEXT_MGR already set [ 1094.254019][T20986] binder: 20981:20986 ioctl 40046207 0 returned -16 03:42:46 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250300"/32, 0x20) 03:42:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020007fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff02630440"], 0x0, 0x0, 0x0}) 03:42:46 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00004c01000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1094.494496][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1094.500448][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1094.504474][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1094.511983][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1094.527806][T21010] binder: BINDER_SET_CONTEXT_MGR already set [ 1094.535584][T21011] binder: BC_ACQUIRE_RESULT not supported [ 1094.548445][T21010] binder: 21004:21010 ioctl 40046207 0 returned -16 [ 1094.558991][T21011] binder: 21005:21011 ioctl c0306201 200000c0 returned -22 03:42:47 executing program 0: r0 = gettid() exit(0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x204) 03:42:47 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000034000000000", 0x20) 03:42:47 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00006001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:47 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250400"/32, 0x20) 03:42:47 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020040fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff04630440"], 0x0, 0x0, 0x0}) [ 1095.117746][T21026] __nla_validate_parse: 14 callbacks suppressed [ 1095.117777][T21026] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1095.174760][T21030] binder: BINDER_SET_CONTEXT_MGR already set 03:42:47 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000fffffffffffff000000000", 0x20) [ 1095.228330][T21030] binder: 21025:21030 ioctl 40046207 0 returned -16 [ 1095.241820][T21042] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:42:47 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250600"/32, 0x20) [ 1095.294461][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1095.300283][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1095.306194][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1095.312333][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:42:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff07630440"], 0x0, 0x0, 0x0}) 03:42:47 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c4000000000000200fffdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:47 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00006801000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:47 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000001000000", 0x20) [ 1095.547925][T21059] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1095.549425][T21057] binder: BINDER_SET_CONTEXT_MGR already set [ 1095.598748][T21065] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1095.613347][T21057] binder: 21049:21057 ioctl 40046207 0 returned -16 03:42:48 executing program 0: r0 = gettid() exit(0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x402) 03:42:48 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250a00"/32, 0x20) 03:42:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff0c630440"], 0x0, 0x0, 0x0}) 03:42:48 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020002fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:48 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000002000000", 0x20) 03:42:48 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00006c01000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1096.054724][T21075] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1096.078117][T21082] binder: 21073:21082 unknown command 1074029324 [ 1096.090883][T21080] binder: BINDER_SET_CONTEXT_MGR already set [ 1096.099077][T21082] binder: 21073:21082 ioctl c0306201 200000c0 returned -22 [ 1096.108960][T21086] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1096.109005][T21080] binder: 21077:21080 ioctl 40046207 0 returned -16 03:42:48 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250c00"/32, 0x20) 03:42:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff10630440"], 0x0, 0x0, 0x0}) 03:42:48 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000003000000", 0x20) 03:42:48 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020003fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:48 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00007401000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:48 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250e00"/32, 0x20) [ 1096.329976][T21104] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1096.361168][T21103] binder: 21092:21103 unknown command 1074029328 [ 1096.361732][T21105] binder: BINDER_SET_CONTEXT_MGR already set [ 1096.382683][T21105] binder: 21100:21105 ioctl 40046207 0 returned -16 [ 1096.395436][T21107] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1096.403032][T21105] binder: BINDER_SET_CONTEXT_MGR already set [ 1096.405472][T21103] binder: 21092:21103 ioctl c0306201 200000c0 returned -22 [ 1096.414127][T21105] binder: 21100:21105 ioctl 40046207 0 returned -16 03:42:49 executing program 0: r0 = gettid() exit(0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x2040000) 03:42:49 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020004fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250f00"/32, 0x20) 03:42:49 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00007a01000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff12630440"], 0x0, 0x0, 0x0}) 03:42:49 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000006000000", 0x20) [ 1096.953188][T21123] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1096.965550][T21125] binder: 21119:21125 unknown command 1074029330 [ 1096.971916][T21125] binder: 21119:21125 ioctl c0306201 200000c0 returned -22 [ 1096.983918][T21130] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1096.996288][T21131] binder: BINDER_SET_CONTEXT_MGR already set 03:42:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000251000"/32, 0x20) 03:42:49 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000ec001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:49 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000000000000f000000", 0x20) [ 1097.034461][T21131] binder: 21120:21131 ioctl 40046207 0 returned -16 03:42:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000256000"/32, 0x20) 03:42:49 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020005fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff03630840"], 0x0, 0x0, 0x0}) 03:42:49 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c0000f001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:50 executing program 0: r0 = gettid() exit(0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x204000000000000) 03:42:50 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000040000000", 0x20) 03:42:50 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025f000"/32, 0x20) 03:42:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff0a630840"], 0x0, 0x0, 0x0}) 03:42:50 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020006fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:50 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000030080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1097.890537][T21177] binder: BINDER_SET_CONTEXT_MGR already set [ 1097.920207][T21177] binder: 21166:21177 ioctl 40046207 0 returned -16 [ 1097.932433][T21177] binder: BC_ATTEMPT_ACQUIRE not supported 03:42:50 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000000000ffffff9e000000", 0x20) 03:42:50 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020007fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:50 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000300000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1097.943410][T21177] binder: 21166:21177 ioctl c0306201 200000c0 returned -22 03:42:50 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000300"/32, 0x20) 03:42:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff10630840"], 0x0, 0x0, 0x0}) 03:42:50 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000ec0000000", 0x20) 03:42:50 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020008fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:42:50 executing program 0: r0 = gettid() exit(0x0) r1 = getpgid(r0) ptrace$peek(0x2, r1, &(0x7f0000000000)) move_pages(r1, 0xada48988, 0x0, 0x0, 0x0, 0x3) 03:42:50 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000400000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:50 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000000000000011c0000000", 0x20) 03:42:50 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000600"/32, 0x20) 03:42:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff0e630c40"], 0x0, 0x0, 0x0}) 03:42:51 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000201000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:51 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fffdffff06630440"], 0x0, 0x0, 0x0}) 03:42:51 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000000000ffffffc3000000", 0x20) 03:42:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000a00"/32, 0x20) 03:42:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff0f630c40"], 0x0, 0x0, 0x0}) 03:42:51 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000301000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:51 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff0b630000"], 0x0, 0x0, 0x0}) [ 1099.454464][ C1] net_ratelimit: 16 callbacks suppressed [ 1099.454473][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1099.465969][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1099.471740][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1099.477517][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:42:51 executing program 0: r0 = gettid() exit(0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) dup2(0xffffffffffffff9c, r1) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000400)="6ba2f50000000000000000d05995f64f8111dc041d12f0b654c15b2035a19c97345d9d6dc2a09ad5c8be3111e714be6b8a8ea18276e60a6252b7b057f32f72f0e6fead627edfa3017658fb9c21192db23b3e34b7b76ea4c273a52f3efd5a6b6464030a3616934c745a593c1bd35f01c0d3eeae7c509bfa408923fb15ed17a899c1a0efbe40608ae94100efb347f08325c6cade87d21d6c6c239a4d64c593a50f77a928f31ba4f1912bbc67a9040e4ffe1f4991a4dc53000000000000") 03:42:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000c00"/32, 0x20) 03:42:51 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000000000fffffff0000000", 0x20) 03:42:51 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff0c630000"], 0x0, 0x0, 0x0}) 03:42:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff08631040"], 0x0, 0x0, 0x0}) 03:42:51 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000401000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:52 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000e00"/32, 0x20) 03:42:52 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000501000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:52 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000000000000000ff000000", 0x20) 03:42:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff09631040"], 0x0, 0x0, 0x0}) [ 1099.786643][T21272] binder: BINDER_SET_CONTEXT_MGR already set [ 1099.811500][T21272] binder: 21266:21272 ioctl 40046207 0 returned -16 03:42:52 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff0d630000"], 0x0, 0x0, 0x0}) 03:42:52 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025ed0e00"/32, 0x20) [ 1100.334490][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1100.340349][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:42:52 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000500)={'ipvs\x00'}, &(0x7f0000000540)=0x1e) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) exit(0xfff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup(r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000000)={{0x6, 0x7c6}, 'port0\x00', 0x2, 0xa0430, 0x9, 0x2, 0x89, 0x8001, 0xb1, 0x0, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r4, 0x0, 0x70bd26, 0x25dfdbfd, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x2}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xd0}, 0x20040000) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {r3, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x7f, @dev={0xfe, 0x80, [], 0x28}, 0x6}, @in6={0xa, 0x4e24, 0x3, @remote, 0x8}}}, 0x118) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$adsp(&(0x7f0000000480)='/dev/adsp#\x00', 0x9, 0x40200) ioctl$PPPIOCGMRU(r5, 0x80047453, &(0x7f0000000380)) 03:42:52 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000f0ffffffffffff000000", 0x20) 03:42:52 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000601000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff00634040"], 0x0, 0x0, 0x0}) 03:42:52 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff02630440"], 0x0, 0x0, 0x0}) 03:42:52 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000f00"/32, 0x20) [ 1100.674079][T21310] __nla_validate_parse: 18 callbacks suppressed [ 1100.674092][T21310] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1100.719464][T21313] binder: BINDER_SET_CONTEXT_MGR already set [ 1100.734512][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1100.734548][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1100.740328][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:42:53 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025003f00"/32, 0x20) 03:42:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff01634040"], 0x0, 0x0, 0x0}) 03:42:53 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000002000000000000000000", 0x20) 03:42:53 executing program 0: r0 = gettid() r1 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x10000, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000140)={0x4, 0x9, 0x5bcc, 0x7ff, 0x0}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000001c0)={r2, 0x5}, 0x8) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc0\x00', 0x10000, 0x0) modify_ldt$write(0x1, &(0x7f0000000200)={0xffffffffffffffff, 0x20001000, 0xffffffffffffffff, 0xf2, 0x3, 0x5, 0x3, 0xffffffffffff0000, 0x200, 0x401}, 0x10) exit(0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) fchmodat(r4, &(0x7f0000000080)='./file0\x00', 0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0x0) keyctl$revoke(0x3, r5) [ 1100.773971][T21313] binder: 21311:21313 ioctl 40046207 0 returned -16 [ 1100.797459][T21326] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1100.800758][T21328] binder: BC_ACQUIRE_RESULT not supported 03:42:53 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000701000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1100.876041][T21328] binder: 21311:21328 ioctl c0306201 200000c0 returned -22 03:42:53 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025004000"/32, 0x20) [ 1100.945193][T21337] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:42:53 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff04630440"], 0x0, 0x0, 0x0}) 03:42:53 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000003000000000000000000", 0x20) [ 1101.005811][T21344] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:42:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff11634840"], 0x0, 0x0, 0x0}) 03:42:53 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000a01000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:53 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025655800"/32, 0x20) 03:42:53 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff07630440"], 0x0, 0x0, 0x0}) 03:42:53 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000006000000000000000000", 0x20) [ 1101.233167][T21362] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:42:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff12634840"], 0x0, 0x0, 0x0}) 03:42:53 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025006000"/32, 0x20) [ 1101.277638][T21368] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1101.544499][ C1] protocol 88fb is buggy, dev hsr_slave_0 03:42:54 executing program 0: r0 = gettid() exit(0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x1, 0x8100) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000040)="0e7c4b5fd883f74d1e5dc05398d52234768f2594ea912977060e797c0bdc0b0f3837475b5c", 0x25}], 0x7aade60f738ec05, 0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:42:54 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000f000000000000000000", 0x20) 03:42:54 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff0c630440"], 0x0, 0x0, 0x0}) 03:42:54 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000e01000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630240"], 0x0, 0x0, 0x0}) 03:42:54 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025586500"/32, 0x20) [ 1101.875956][T21396] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1101.902110][T21398] binder: BINDER_SET_CONTEXT_MGR already set [ 1101.902682][T21397] binder: 21389:21397 unknown command 1074029324 03:42:54 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025008100"/32, 0x20) [ 1101.922603][T21402] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1101.937471][T21398] binder: 21394:21398 ioctl 40046207 0 returned -16 [ 1101.959890][T21398] binder: 21394:21398 unknown command 1073898246 [ 1101.966360][T21397] binder: 21389:21397 ioctl c0306201 200000c0 returned -22 03:42:54 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000f0000000000000000000", 0x20) 03:42:54 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000f01000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1101.993163][T21398] binder: 21394:21398 ioctl c0306201 200000c0 returned -22 03:42:54 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff10630440"], 0x0, 0x0, 0x0}) 03:42:54 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000030000000000000000", 0x20) 03:42:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630340"], 0x0, 0x0, 0x0}) [ 1102.148951][T21419] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1102.182703][T21421] binder: 21420:21421 unknown command 1074029328 [ 1102.197754][T21422] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1102.221306][T21421] binder: 21420:21421 ioctl c0306201 200000c0 returned -22 [ 1102.267614][T21428] binder: 21426:21428 unknown command 1073963782 [ 1102.269654][T21421] binder: BINDER_SET_CONTEXT_MGR already set [ 1102.280973][T21428] binder: 21426:21428 ioctl c0306201 200000c0 returned -22 [ 1102.291941][T21421] binder: 21420:21421 ioctl 40046207 0 returned -16 03:42:55 executing program 0: r0 = gettid() r1 = open(&(0x7f0000000000)='./file0\x00', 0x10440, 0x102) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) exit(0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:42:55 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250eed00"/32, 0x20) 03:42:55 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000060000000000000000", 0x20) 03:42:55 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00004801000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:55 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff12630440"], 0x0, 0x0, 0x0}) 03:42:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630540"], 0x0, 0x0, 0x0}) 03:42:55 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000c00e0000000000000000", 0x20) [ 1102.866499][T21449] binder: 21440:21449 unknown command 1074029330 [ 1102.883426][T21451] binder: BINDER_SET_CONTEXT_MGR already set [ 1102.897001][T21449] binder: 21440:21449 ioctl c0306201 200000c0 returned -22 03:42:55 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00004c01000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:55 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500f000"/32, 0x20) [ 1102.926786][T21451] binder: 21442:21451 ioctl 40046207 0 returned -16 [ 1102.962370][T21451] binder: 21442:21451 unknown command 1074094854 03:42:55 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff03630840"], 0x0, 0x0, 0x0}) [ 1102.985226][T21451] binder: 21442:21451 ioctl c0306201 200000c0 returned -22 03:42:55 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500400300"/32, 0x20) 03:42:55 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00006001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:55 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000000f0000000000000000", 0x20) 03:42:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630640"], 0x0, 0x0, 0x0}) 03:42:55 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff0a630840"], 0x0, 0x0, 0x0}) 03:42:55 executing program 0: r0 = gettid() exit(0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40000) mq_notify(r1, &(0x7f0000000040)={0x0, 0x38, 0x6, @tid=r0}) 03:42:55 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00006801000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:55 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500034000"/32, 0x20) 03:42:56 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00006c01000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1103.812520][T21493] binder: 21483:21493 unknown command 1074160390 [ 1103.823727][T21495] binder: BINDER_SET_CONTEXT_MGR already set 03:42:56 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025fffff000"/32, 0x20) 03:42:56 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000c0110000000000000000", 0x20) [ 1103.881496][T21493] binder: 21483:21493 ioctl c0306201 200000c0 returned -22 [ 1103.914447][T21495] binder: 21487:21495 ioctl 40046207 0 returned -16 [ 1103.921897][T21501] binder: BC_ATTEMPT_ACQUIRE not supported 03:42:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630740"], 0x0, 0x0, 0x0}) [ 1103.948433][T21501] binder: 21487:21501 ioctl c0306201 200000c0 returned -22 03:42:56 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000400000000000000000", 0x20) 03:42:56 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00007401000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:56 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000000100"/32, 0x20) [ 1103.996665][T21495] binder: BC_ATTEMPT_ACQUIRE not supported [ 1104.021379][T21495] binder: 21487:21495 ioctl c0306201 200000c0 returned -22 03:42:56 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff10630840"], 0x0, 0x0, 0x0}) [ 1104.096685][T21515] binder: 21512:21515 unknown command 1074225926 [ 1104.160985][T21515] binder: 21512:21515 ioctl c0306201 200000c0 returned -22 03:42:56 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000000200"/32, 0x20) [ 1104.494510][ C0] net_ratelimit: 13 callbacks suppressed [ 1104.494516][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1104.506006][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:42:56 executing program 0: r0 = gettid() pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) exit(0x0) r2 = dup3(r1, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSIG(r2, 0x40045436, 0x30) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0xffefffffffffffff) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) 03:42:56 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00007a01000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630840"], 0x0, 0x0, 0x0}) 03:42:56 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000ec00000000000000000", 0x20) 03:42:56 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff0e630c40"], 0x0, 0x0, 0x0}) 03:42:56 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000000300"/32, 0x20) 03:42:57 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000003000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:57 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000000400"/32, 0x20) 03:42:57 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000011c00000000000000000", 0x20) [ 1104.759646][T21552] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.799007][T21552] binder: 21543:21552 ioctl 40046207 0 returned -16 [ 1104.820116][T21552] binder: 21543:21552 unknown command 1074291462 [ 1104.847005][T21552] binder: 21543:21552 ioctl c0306201 200000c0 returned -22 03:42:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630c40"], 0x0, 0x0, 0x0}) 03:42:57 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff0f630c40"], 0x0, 0x0, 0x0}) [ 1104.894469][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1104.894508][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1104.900276][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1104.911833][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:42:57 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000f00000000000000000", 0x20) [ 1105.102360][T21574] binder: BINDER_SET_CONTEXT_MGR already set [ 1105.109490][T21572] binder: 21569:21572 unknown command 1074553606 [ 1105.113454][T21574] binder: 21571:21574 ioctl 40046207 0 returned -16 [ 1105.123924][T21572] binder: 21569:21572 ioctl c0306201 200000c0 returned -22 [ 1105.142661][T21572] binder: BINDER_SET_CONTEXT_MGR already set [ 1105.149007][T21572] binder: 21569:21572 ioctl 40046207 0 returned -16 03:42:57 executing program 0: r0 = gettid() exit(0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000080)="727026cd97cfce91fdcac0a5d0888feecbff76f98a20530bd6357d711708cc4146efba7fe3f805fcc3a3707fd191539fda969df684c6b19e2a3948694a682dc7287c1ba0b88930684907cb3f9d41065172e2a88d326be71a75fcc0c5a8aa4ac2203d90778953b92208b4602daf5a8505f557c38f98f913b61e4372136f908fd621fa48afb043b8ee9750b5b7be1aaddf3150aa434fca0446663cc975a71fc0ae7a7f6a5bb0") move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:42:57 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000015000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:57 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000000600"/32, 0x20) 03:42:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06631040"], 0x0, 0x0, 0x0}) 03:42:57 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff08631040"], 0x0, 0x0, 0x0}) 03:42:57 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000ff0000000000000000", 0x20) [ 1105.694484][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1105.700336][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1105.702230][T21586] __nla_validate_parse: 16 callbacks suppressed [ 1105.702315][T21586] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1105.706268][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1105.706314][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:42:58 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000400300000000000000", 0x20) [ 1105.765418][T21595] binder: 21587:21595 unknown command 1074815750 [ 1105.778237][T21592] binder: BINDER_SET_CONTEXT_MGR already set [ 1105.792605][T21595] binder: 21587:21595 ioctl c0306201 200000c0 returned -22 [ 1105.801885][T21599] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:42:58 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000000a00"/32, 0x20) 03:42:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06631240"], 0x0, 0x0, 0x0}) [ 1105.820229][T21592] binder: 21589:21592 ioctl 40046207 0 returned -16 [ 1105.837389][T21595] binder: BINDER_SET_CONTEXT_MGR already set [ 1105.850310][T21595] binder: 21587:21595 ioctl 40046207 0 returned -16 03:42:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff09631040"], 0x0, 0x0, 0x0}) 03:42:58 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000025000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:58 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000034000000000000000", 0x20) [ 1106.023689][T21614] binder: 21608:21614 unknown command 1074946822 [ 1106.037871][T21615] binder: BINDER_SET_CONTEXT_MGR already set [ 1106.055504][T21615] binder: 21611:21615 ioctl 40046207 0 returned -16 [ 1106.071605][T21614] binder: 21608:21614 ioctl c0306201 200000c0 returned -22 [ 1106.072170][T21617] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1106.128112][T21623] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:42:58 executing program 0: r0 = gettid() exit(0x0) socket$inet_smc(0x2b, 0x1, 0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:42:58 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000000c00"/32, 0x20) 03:42:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630402"], 0x0, 0x0, 0x0}) 03:42:58 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000fffff000000000000000", 0x20) 03:42:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff00634040"], 0x0, 0x0, 0x0}) 03:42:58 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c0000003f000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1106.666781][T21637] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1106.675500][T21636] binder: 21633:21636 unknown command 33841926 [ 1106.685287][T21641] binder: BINDER_SET_CONTEXT_MGR already set [ 1106.705163][T21641] binder: 21634:21641 ioctl 40046207 0 returned -16 03:42:58 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000000e00"/32, 0x20) 03:42:59 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000001000000000000", 0x20) [ 1106.718324][T21636] binder: 21633:21636 ioctl c0306201 200000c0 returned -22 [ 1106.720721][T21643] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:42:59 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000040000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:59 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff01634040"], 0x0, 0x0, 0x0}) 03:42:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630403"], 0x0, 0x0, 0x0}) 03:42:59 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000002000000000000", 0x20) [ 1106.944230][T21660] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1106.987626][T21665] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1106.992250][T21661] binder: 21659:21661 unknown command 50619142 [ 1106.999188][T21664] binder: BINDER_SET_CONTEXT_MGR already set [ 1107.007040][T21661] binder: 21659:21661 ioctl c0306201 200000c0 returned -22 [ 1107.028569][T21664] binder: 21655:21664 ioctl 40046207 0 returned -16 03:42:59 executing program 0: r0 = gettid() exit(0x0) r1 = shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ffe000/0x2000)=nil) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$swradio(&(0x7f0000000300)='/dev/swradio#\x00', 0x1, 0x2) ioctl$sock_netrom_SIOCDELRT(r5, 0x890c, &(0x7f0000000340)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0='bpq0\x00', 0x1, 'syz0\x00', @default, 0x4, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default]}) r6 = getgid() shmctl$IPC_SET(r1, 0x1, &(0x7f0000000280)={{0x5, r2, r3, r4, r6, 0x0, 0x101}, 0x906, 0x800, 0x5, 0xffffffffffffffff, r0, r0, 0x9}) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:42:59 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000000f00"/32, 0x20) 03:42:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630404"], 0x0, 0x0, 0x0}) 03:42:59 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000003000000000000", 0x20) 03:42:59 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000068000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:59 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff11634840"], 0x0, 0x0, 0x0}) [ 1107.575143][T21680] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1107.607292][T21682] binder: BINDER_SET_CONTEXT_MGR already set [ 1107.613587][T21683] binder: 21677:21683 unknown command 67396358 [ 1107.627633][T21682] binder: 21676:21682 ioctl 40046207 0 returned -16 [ 1107.656707][T21690] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1107.660262][T21683] binder: 21677:21683 ioctl c0306201 200000c0 returned -22 03:42:59 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000001000"/32, 0x20) 03:42:59 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000006000000000000", 0x20) [ 1107.675185][T21682] binder_alloc: 21677: binder_alloc_buf, no vma 03:42:59 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000069000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:42:59 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff12634840"], 0x0, 0x0, 0x0}) 03:43:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630405"], 0x0, 0x0, 0x0}) 03:43:00 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000000f000000000000", 0x20) [ 1107.947446][T21710] binder: 21705:21710 unknown command 84173574 [ 1107.959580][T21710] binder: 21705:21710 ioctl c0306201 200000c0 returned -22 03:43:00 executing program 0: r0 = gettid() r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000340)={0x2000000006}, 0x4) semget$private(0x0, 0x3, 0x4) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x4802, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000280)) exit(0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000200)=""/52) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x200}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000007c0)=@assoc_value={0x0}, &(0x7f0000000800)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000006c0)={r5, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f0000000780)=0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000600)=@assoc_value={0x0, 0x8}, &(0x7f0000000640)=0x8) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000680)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000004c0)={r6, 0xfffffffffffffffe}, &(0x7f0000000480)=0x175d8b7de3310e7a) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000380)=0x4, 0x4) move_pages(r0, 0xfffffd69, 0x0, 0x0, 0x0, 0x2) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f00000001c0)) waitid(0x3, r0, &(0x7f00000003c0), 0x20000003, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000240)={{0x1, 0x0, 0x5, 0x0, 0x7}}) 03:43:00 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000020080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:00 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630240"], 0x0, 0x0, 0x0}) 03:43:00 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000003f00"/32, 0x20) 03:43:00 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000040000000000000", 0x20) 03:43:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630406"], 0x0, 0x0, 0x0}) [ 1108.546961][T21730] binder: BINDER_SET_CONTEXT_MGR already set [ 1108.583268][T21730] binder: 21726:21730 ioctl 40046207 0 returned -16 [ 1108.584112][T21733] binder: 21723:21733 unknown command 100950790 03:43:00 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000004000"/32, 0x20) 03:43:00 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000030080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:00 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000ffffff9e000000000000", 0x20) [ 1108.594290][T21730] binder: 21726:21730 unknown command 1073898246 [ 1108.609307][T21730] binder: 21726:21730 ioctl c0306201 200000c0 returned -22 [ 1108.628802][T21733] binder: 21723:21733 ioctl c0306201 200000c0 returned -22 03:43:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630407"], 0x0, 0x0, 0x0}) 03:43:01 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000040080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:01 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000ec0000000000000", 0x20) [ 1108.872311][T21753] binder: 21751:21753 unknown command 117728006 [ 1108.897756][T21753] binder: 21751:21753 ioctl c0306201 200000c0 returned -22 03:43:01 executing program 0: r0 = gettid() exit(0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000080}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x174, r2, 0x504, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5f0}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x53}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_NET={0x38, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x401}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7d86}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffffffffff9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xec}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20fb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffff9}]}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x40801}, 0x40810) 03:43:01 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630340"], 0x0, 0x0, 0x0}) 03:43:01 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000006000"/32, 0x20) 03:43:01 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000000011c0000000000000", 0x20) 03:43:01 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000050080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630408"], 0x0, 0x0, 0x0}) 03:43:01 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000060080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:01 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000586500"/32, 0x20) [ 1109.544763][T21773] binder: 21767:21773 unknown command 1073963782 [ 1109.559520][T21773] binder: 21767:21773 ioctl c0306201 200000c0 returned -22 [ 1109.575813][T21779] binder: BINDER_SET_CONTEXT_MGR already set 03:43:01 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000ffffffc3000000000000", 0x20) [ 1109.644842][T21779] binder: 21771:21779 ioctl 40046207 0 returned -16 [ 1109.645826][T21782] binder: 21771:21782 unknown command 134505222 03:43:01 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630540"], 0x0, 0x0, 0x0}) [ 1109.712389][T21782] binder: 21771:21782 ioctl c0306201 200000c0 returned -22 03:43:02 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000070080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:02 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000008100"/32, 0x20) [ 1109.805853][T21799] binder: 21798:21799 unknown command 1074094854 [ 1109.842965][T21799] binder: 21798:21799 ioctl c0306201 200000c0 returned -22 [ 1109.854471][ C1] net_ratelimit: 14 callbacks suppressed [ 1109.854480][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1109.866245][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1109.872107][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1109.877997][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:43:02 executing program 0: r0 = gettid() openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x8000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x8, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_GET(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="09fcb63c532d5df82ff07bdec80702b39c237a0a73fb5a1917d5b889050c47e10b1a83824e89a291ee8738ab04007ccf88580328e914cd4f08c9e5d3a2ff1caf79fd2b7052", @ANYRES16=r2, @ANYBLOB="000026bd707fa24b9726fc76983c25b36a470008000ae94e2300"/37], 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x1) exit(0x200000800000a) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:43:02 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000fffffff0000000000000", 0x20) 03:43:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630409"], 0x0, 0x0, 0x0}) 03:43:02 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630640"], 0x0, 0x0, 0x0}) 03:43:02 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025ffffa88800"/32, 0x20) 03:43:02 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000080080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:02 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025ffffff9e00"/32, 0x20) [ 1110.518507][T21823] binder: 21813:21823 unknown command 151282438 [ 1110.522958][T21817] binder: BINDER_SET_CONTEXT_MGR already set [ 1110.547701][T21817] binder: 21815:21817 ioctl 40046207 0 returned -16 [ 1110.558531][T21823] binder: 21813:21823 ioctl c0306201 200000c0 returned -22 03:43:02 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000090080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:02 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000000000ff000000000000", 0x20) [ 1110.591365][T21817] binder: 21815:21817 unknown command 1074160390 [ 1110.610767][T21817] binder: 21815:21817 ioctl c0306201 200000c0 returned -22 03:43:02 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630740"], 0x0, 0x0, 0x0}) 03:43:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff0663040a"], 0x0, 0x0, 0x0}) 03:43:02 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500000eed00"/32, 0x20) [ 1110.710997][T21838] __nla_validate_parse: 17 callbacks suppressed [ 1110.711011][T21838] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1110.734470][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1110.740309][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1110.875927][T21846] binder: 21843:21846 unknown command 168059654 [ 1110.886690][T21846] binder: 21843:21846 ioctl c0306201 200000c0 returned -22 [ 1110.912244][T21852] binder: 21845:21852 unknown command 1074225926 [ 1110.928127][T21852] binder: 21845:21852 ioctl c0306201 200000c0 returned -22 [ 1111.134508][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1111.140352][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1111.144479][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1111.152218][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:43:03 executing program 0: gettid() r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x20081, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)=0xffff, 0x4) exit(0x0) 03:43:03 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000f0ffff000000000000", 0x20) 03:43:03 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000000a0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff0663040b"], 0x0, 0x0, 0x0}) 03:43:03 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025fffffff000"/32, 0x20) 03:43:03 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630840"], 0x0, 0x0, 0x0}) [ 1111.471221][T21866] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1111.482907][T21867] binder: 21862:21867 unknown command 1074291462 [ 1111.491613][T21867] binder: 21862:21867 ioctl c0306201 200000c0 returned -22 [ 1111.499717][T21870] binder: BINDER_SET_CONTEXT_MGR already set [ 1111.514998][T21870] binder: 21859:21870 ioctl 40046207 0 returned -16 03:43:03 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630c40"], 0x0, 0x0, 0x0}) 03:43:03 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002588a8ffff00"/32, 0x20) [ 1111.533328][T21872] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1111.542323][T21870] binder: 21859:21870 unknown command 184836870 [ 1111.554481][T21870] binder: 21859:21870 ioctl c0306201 200000c0 returned -22 03:43:03 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000009effffff000000000000", 0x20) 03:43:03 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000000b0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff0663040c"], 0x0, 0x0, 0x0}) [ 1111.695948][T21881] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1111.747616][T21888] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1111.760701][T21890] binder: 21882:21890 unknown command 1074553606 [ 1111.778160][T21890] binder: 21882:21890 ioctl c0306201 200000c0 returned -22 03:43:04 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000c3ffffff000000000000", 0x20) [ 1111.796667][T21892] binder: BINDER_SET_CONTEXT_MGR already set [ 1111.829589][T21892] binder: 21887:21892 ioctl 40046207 0 returned -16 [ 1111.889580][T21892] binder: 21887:21892 unknown command 201614086 [ 1111.934008][T21892] binder: 21887:21892 ioctl c0306201 200000c0 returned -22 03:43:04 executing program 0: r0 = gettid() r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ubi_ctrl\x00', 0x4000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002980)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000002a80)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x8000c00}, 0xc, &(0x7f0000002a40)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="5c00000079e262933e402c6da7e07c8a2fab4a8741e1f3592b52c3133d39bc76b04acfe3944254e32727a75ecd6a62c6e5c7f66ab051300cf565892f15edad8473548bd68425810bda6ed2c02627846eaa8a166498f3fff5b12753582199", @ANYRES16=r2, @ANYBLOB="200e29bd7000fddbdf250d0000000800050005000000400001001400030000000000000000000000000000000000080004004e200000080004004e230000080001000a00000008000b00736970000800090042000000"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20000084) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000002840)={0x2, 0x8002, 0x4de7f866, 0xc2, 0x0}, &(0x7f0000002880)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000028c0)={r3, 0x7, 0x30}, &(0x7f0000002900)=0xc) exit(0x8) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r1) pipe(&(0x7f0000000080)) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x4000, 0x0) recvmmsg(r4, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/66, 0x42}, {&(0x7f0000000140)=""/235, 0xeb}], 0x2, &(0x7f0000000280)=""/172, 0xac}, 0x3f}, {{&(0x7f0000000340)=@hci, 0x80, &(0x7f0000002600)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/174, 0xae}, {&(0x7f0000001480)=""/153, 0x99}, {&(0x7f0000001540)=""/37, 0x25}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/91, 0x5b}], 0x6, &(0x7f0000002680)=""/176, 0xb0}, 0x6}], 0x2, 0x140, &(0x7f00000027c0)={0x0, 0x989680}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f0000000040)={0x2b, 0x367b7e5f, 0x20, 0x101, 0x3, @stepwise={{0x8, 0x6d1}, {0x0, 0x8001}, {0x9, 0x1}}}) 03:43:04 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000000c0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:04 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500f0ffff00"/32, 0x20) 03:43:04 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06631040"], 0x0, 0x0, 0x0}) 03:43:04 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000f0ffffff000000000000", 0x20) 03:43:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff0663040d"], 0x0, 0x0, 0x0}) [ 1112.491620][T21911] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1112.524643][T21910] binder: BINDER_SET_CONTEXT_MGR already set 03:43:04 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000259effffff00"/32, 0x20) [ 1112.538631][T21914] binder: 21907:21914 unknown command 218391302 [ 1112.545717][T21910] binder: 21909:21910 ioctl 40046207 0 returned -16 [ 1112.555251][T21914] binder: 21907:21914 ioctl c0306201 200000c0 returned -22 [ 1112.571544][T21919] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1112.580025][T21910] binder: 21909:21910 unknown command 1074815750 03:43:04 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000340000000", 0x20) 03:43:04 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06631240"], 0x0, 0x0, 0x0}) [ 1112.590110][T21910] binder: 21909:21910 ioctl c0306201 200000c0 returned -22 [ 1112.600785][T21914] binder: BINDER_SET_CONTEXT_MGR already set [ 1112.621766][T21914] binder: 21907:21914 ioctl 40046207 0 returned -16 03:43:04 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000000d0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff0663040e"], 0x0, 0x0, 0x0}) 03:43:04 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000fffffffffffff0000000", 0x20) [ 1112.775441][T21933] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1112.776726][T21931] binder: 21929:21931 unknown command 1074946822 [ 1112.828607][T21931] binder: 21929:21931 ioctl c0306201 200000c0 returned -22 [ 1112.833659][T21938] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1112.852618][T21940] binder: BINDER_SET_CONTEXT_MGR already set [ 1112.859108][T21940] binder: 21937:21940 ioctl 40046207 0 returned -16 [ 1112.918303][T21940] binder: 21937:21940 unknown command 235168518 [ 1112.948490][T21940] binder: 21937:21940 ioctl c0306201 200000c0 returned -22 03:43:05 executing program 0: r0 = gettid() r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000040)={0x8, 0x8, 0xfffffffffffffff8, 0x8, 0x1, "14dc2c6baeeacfcef3fd751d825980df0b8dbc", 0x3, 0x100}) exit(0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0x0, 0x5, 0x0, [], [{0x200, 0x7f, 0xe3, 0xfffffffffffffff7, 0x0, 0x9}, {0x4000000000000, 0x603e, 0x200, 0x8d, 0x3, 0x80000000}], [[], [], [], [], []]}) 03:43:05 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025f0ffffff00"/32, 0x20) 03:43:05 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000000010000", 0x20) 03:43:05 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000000e0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:05 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630402"], 0x0, 0x0, 0x0}) 03:43:05 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x2, 0x0, 0x0}) [ 1113.438070][T21955] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1113.455117][T21951] binder: 21950:21951 ioctl c0306201 200000c0 returned -14 03:43:05 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000000020000", 0x20) 03:43:05 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000003400000000000000000", 0x20) [ 1113.487905][T21961] binder: BINDER_SET_CONTEXT_MGR already set [ 1113.511600][T21961] binder: 21959:21961 ioctl 40046207 0 returned -16 03:43:05 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000000f0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:05 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x3, 0x0, 0x0}) [ 1113.555030][T21961] binder: 21959:21961 unknown command 33841926 [ 1113.561246][T21961] binder: 21959:21961 ioctl c0306201 200000c0 returned -22 03:43:05 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000000030000", 0x20) 03:43:05 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000100080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1113.731095][T21981] binder: 21980:21981 ioctl c0306201 200000c0 returned -14 [ 1113.740392][T21961] binder: BINDER_SET_CONTEXT_MGR already set [ 1113.781095][T21961] binder: 21959:21961 ioctl 40046207 0 returned -16 03:43:06 executing program 0: r0 = gettid() pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4800) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000040)={{0x9, 0x7}, 0x0, 0x8, 0x9, {0x3f, 0x4a7c}, 0x0, 0x9}) exit(0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', r1}, 0x10) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:43:06 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025fffffffffffff00000000000000000", 0x20) 03:43:06 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000000060000", 0x20) 03:43:06 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630403"], 0x0, 0x0, 0x0}) 03:43:06 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x4, 0x0, 0x0}) 03:43:06 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000110080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:06 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000000000000000000f0000", 0x20) [ 1114.386758][T22003] binder: 21997:22003 ioctl c0306201 200000c0 returned -14 [ 1114.388308][T22005] binder: BINDER_SET_CONTEXT_MGR already set 03:43:06 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000000100000000000000", 0x20) 03:43:06 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000120080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1114.493848][T22005] binder: 21995:22005 ioctl 40046207 0 returned -16 [ 1114.495399][T22014] binder: 21995:22014 unknown command 50619142 03:43:06 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x5, 0x0, 0x0}) [ 1114.559623][T22014] binder: 21995:22014 ioctl c0306201 200000c0 returned -22 03:43:06 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000000200000000000000", 0x20) 03:43:06 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630404"], 0x0, 0x0, 0x0}) [ 1114.703537][T22028] binder: 22026:22028 ioctl c0306201 200000c0 returned -14 [ 1114.736306][T22030] binder: BINDER_SET_CONTEXT_MGR already set [ 1114.754768][T22030] binder: 22029:22030 ioctl 40046207 0 returned -16 [ 1114.777074][T22030] binder: 22029:22030 unknown command 67396358 [ 1114.802665][T22030] binder: 22029:22030 ioctl c0306201 200000c0 returned -22 [ 1114.894503][ C0] net_ratelimit: 14 callbacks suppressed [ 1114.894513][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1114.906044][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:43:07 executing program 0: r0 = gettid() r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x400000, 0x0) getpeername$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x1c) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f00000001c0)) wait4(r0, &(0x7f00000000c0), 0x2, &(0x7f0000000100)) exit(0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000002c0)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f00000003c0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) r5 = geteuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0}, &(0x7f00000004c0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000500)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000600)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0, 0x0}, &(0x7f0000000680)=0xc) fsetxattr$system_posix_acl(r1, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000006c0)={{}, {0x1, 0x3}, [{0x2, 0x3, r2}, {0x2, 0x5, r3}, {0x2, 0x3, r4}, {0x2, 0x3, r5}, {0x2, 0x3, r6}, {0x2, 0x0, r7}], {0x4, 0x1}, [{0x8, 0x1, r8}], {0x10, 0x6}, {0x20, 0x4}}, 0x5c, 0x1) 03:43:07 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000130080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:07 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000000400000", 0x20) 03:43:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x6, 0x0, 0x0}) 03:43:07 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000000300000000000000", 0x20) 03:43:07 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630405"], 0x0, 0x0, 0x0}) [ 1115.294498][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1115.294861][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1115.300302][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1115.306036][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1115.387192][T22049] binder: BINDER_SET_CONTEXT_MGR already set [ 1115.393247][T22049] binder: 22045:22049 ioctl 40046207 0 returned -16 [ 1115.405166][T22043] binder: 22041:22043 unknown command 84173574 [ 1115.411362][T22043] binder: 22041:22043 ioctl c0306201 200000c0 returned -22 03:43:07 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000140080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:07 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000ffffff9e0000", 0x20) 03:43:07 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000000400000000000000", 0x20) [ 1115.448658][T22049] binder: 22045:22049 ioctl c0306201 200000c0 returned -14 03:43:07 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630406"], 0x0, 0x0, 0x0}) 03:43:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x7, 0x0, 0x0}) 03:43:07 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000150080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1115.677114][T22072] binder: 22071:22072 ioctl c0306201 200000c0 returned -14 [ 1115.723308][T22075] binder: 22074:22075 unknown command 100950790 [ 1115.762123][T22075] binder: 22074:22075 ioctl c0306201 200000c0 returned -22 [ 1115.763651][T22079] __nla_validate_parse: 13 callbacks suppressed [ 1115.763663][T22079] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1115.831122][T22082] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1116.094504][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1116.100359][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1116.106229][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1116.111985][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:43:08 executing program 0: r0 = gettid() r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x4) exit(0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:43:08 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000000600000000000000", 0x20) 03:43:08 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000000000000ec00000", 0x20) 03:43:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x8, 0x0, 0x0}) 03:43:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630407"], 0x0, 0x0, 0x0}) 03:43:08 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000160080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1116.314703][T22091] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1116.319398][T22096] binder: 22087:22096 ioctl c0306201 200000c0 returned -14 [ 1116.338571][T22094] binder: BINDER_SET_CONTEXT_MGR already set [ 1116.351111][T22099] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:43:08 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000170080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1116.360828][T22094] binder: 22092:22094 ioctl 40046207 0 returned -16 [ 1116.381533][T22094] binder: 22092:22094 unknown command 117728006 03:43:08 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000011c00000", 0x20) 03:43:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x300, 0x0, 0x0}) [ 1116.420822][T22094] binder: 22092:22094 ioctl c0306201 200000c0 returned -22 03:43:08 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000000a00000000000000", 0x20) 03:43:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630408"], 0x0, 0x0, 0x0}) [ 1116.489886][T22108] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1116.536773][T22112] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:43:08 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000ffffffc30000", 0x20) [ 1116.639251][T22118] binder: 22113:22118 ioctl c0306201 200000c0 returned -14 [ 1116.691948][T22121] binder: 22117:22121 unknown command 134505222 [ 1116.702092][T22118] binder: BINDER_SET_CONTEXT_MGR already set [ 1116.711143][T22118] binder: 22113:22118 ioctl 40046207 0 returned -16 [ 1116.717885][T22121] binder: 22117:22121 ioctl c0306201 200000c0 returned -22 03:43:09 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x8000, 0x0) ioctl$KDSETLED(r0, 0x4b32, 0x3) r1 = gettid() exit(0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000400)='/dev/vcs#\x00', 0x80, 0x800) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, r3, 0x408, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffffff8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xee}]}, @TIPC_NLA_BEARER={0x6c, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3f}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1000}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @mcast1, 0x10000}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x5, @ipv4={[], [], @empty}, 0x4}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40000}, 0x90) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="820000004517c65e94941a39fb8e62bd23bd093033f68498c06095ea0f2c0606a47ac695b292ebd82f7c45aebbe99c69162318e32e65c63f909704949607e9ff1794494f1169c99d671e3d939227957ac1f728f758b943e0db5bdf0700000000000098dddbdb30e648e0c564af0f23e19b55625d0448da2c2683bbbb25fd232a2a150ca5a941b2a4d918cb9c"], &(0x7f0000000500)=0x8a) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000540)={r4, @in={{0x2, 0x4e22, @broadcast}}}, 0x84) move_pages(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 03:43:09 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000180080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:09 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000000c00000000000000", 0x20) 03:43:09 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000fffffff00000", 0x20) 03:43:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630409"], 0x0, 0x0, 0x0}) 03:43:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x500, 0x0, 0x0}) [ 1117.258991][T22138] binder: 22136:22138 ioctl c0306201 200000c0 returned -14 [ 1117.264258][T22141] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1117.298476][T22144] binder: BINDER_SET_CONTEXT_MGR already set 03:43:09 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000000e00000000000000", 0x20) 03:43:09 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000000ff0000", 0x20) [ 1117.317657][T22144] binder: 22135:22144 ioctl 40046207 0 returned -16 [ 1117.326529][T22147] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1117.345831][T22144] binder: 22135:22144 unknown command 151282438 [ 1117.359883][T22144] binder: 22135:22144 ioctl c0306201 200000c0 returned -22 03:43:09 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000190080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x600, 0x0, 0x0}) 03:43:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff0663040a"], 0x0, 0x0, 0x0}) 03:43:09 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000000f00000000000000", 0x20) [ 1117.555572][T22162] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1117.575768][T22165] binder: 22160:22165 unknown command 168059654 [ 1117.587020][T22166] binder: BINDER_SET_CONTEXT_MGR already set [ 1117.593755][T22165] binder: 22160:22165 ioctl c0306201 200000c0 returned -22 [ 1117.602967][T22166] binder: 22164:22166 ioctl 40046207 0 returned -16 [ 1117.609549][T22168] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1117.617924][T22166] binder: 22164:22166 ioctl c0306201 200000c0 returned -14 03:43:10 executing program 0: r0 = gettid() exit(0x0) move_pages(r0, 0xfffffffffffffe72, 0x0, 0x0, 0x0, 0x8000000000000) 03:43:10 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000f0ffffffffffff0000", 0x20) 03:43:10 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000001a0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:10 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000001000000000000000", 0x20) 03:43:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff0663040b"], 0x0, 0x0, 0x0}) 03:43:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x700, 0x0, 0x0}) 03:43:10 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000003f00000000000000", 0x20) 03:43:10 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000001b0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:10 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000020000000000000000", 0x20) [ 1118.238459][T22189] binder: BINDER_SET_CONTEXT_MGR already set [ 1118.245738][T22186] binder: 22180:22186 unknown command 184836870 [ 1118.259794][T22189] binder: 22182:22189 ioctl 40046207 0 returned -16 [ 1118.268910][T22186] binder: 22180:22186 ioctl c0306201 200000c0 returned -22 [ 1118.318405][T22189] binder: 22182:22189 ioctl c0306201 200000c0 returned -14 03:43:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff0663040c"], 0x0, 0x0, 0x0}) 03:43:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x4000, 0x0, 0x0}) 03:43:10 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000004000000000000000", 0x20) [ 1118.514204][T22210] binder: 22207:22210 ioctl c0306201 200000c0 returned -14 [ 1118.596327][T22216] binder: 22213:22216 unknown command 201614086 [ 1118.603920][T22216] binder: 22213:22216 ioctl c0306201 200000c0 returned -22 03:43:11 executing program 0: r0 = gettid() exit(0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x800c1) ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={@remote={[], 0x2}, 0xf, 'nr0\x00'}) 03:43:11 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000001c0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:11 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000030000000000000000", 0x20) 03:43:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0xff00, 0x0, 0x0}) 03:43:11 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000006000000000000000", 0x20) 03:43:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff0663040d"], 0x0, 0x0, 0x0}) 03:43:11 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000001d0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1119.191790][T22236] binder: BINDER_SET_CONTEXT_MGR already set [ 1119.205826][T22231] binder: 22225:22231 ioctl c0306201 200000c0 returned -14 [ 1119.213349][T22236] binder: 22227:22236 ioctl 40046207 0 returned -16 03:43:11 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000060000000000000000", 0x20) 03:43:11 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000586500000000000000", 0x20) 03:43:11 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000001e0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x1000000, 0x0, 0x0}) [ 1119.253509][T22236] binder: 22227:22236 unknown command 218391302 [ 1119.287793][T22236] binder: 22227:22236 ioctl c0306201 200000c0 returned -22 03:43:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff0663040e"], 0x0, 0x0, 0x0}) [ 1119.482048][T22259] binder: 22258:22259 ioctl c0306201 200000c0 returned -14 [ 1119.501719][T22262] binder: BINDER_SET_CONTEXT_MGR already set [ 1119.523701][T22262] binder: 22261:22262 ioctl 40046207 0 returned -16 [ 1119.557079][T22262] binder: 22261:22262 unknown command 235168518 [ 1119.564578][T22262] binder: 22261:22262 ioctl c0306201 200000c0 returned -22 03:43:12 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) r1 = accept(r0, &(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000080)=0x80) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000002c0)=0x4258c6f9, 0x4) r2 = gettid() r3 = accept4$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14, 0x80800) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000140)={@empty, 0x45, r4}) exit(0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x6}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000280)={r5, 0x80000000}, 0x8) move_pages(r2, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 03:43:12 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000008100000000000000", 0x20) 03:43:12 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000000f0000000000000000", 0x20) 03:43:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x2000000, 0x0, 0x0}) 03:43:12 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000001f0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:12 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x2, 0x0, 0x0}) 03:43:12 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000200080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:12 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500000000ffffa88800000000000000", 0x20) [ 1120.010530][T22278] binder: 22275:22278 ioctl c0306201 200000c0 returned -14 [ 1120.018408][T22280] binder: BINDER_SET_CONTEXT_MGR already set [ 1120.039893][T22280] binder: 22274:22280 ioctl 40046207 0 returned -16 03:43:12 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x3, 0x0, 0x0}) [ 1120.092224][T22280] binder: 22274:22280 ioctl c0306201 200000c0 returned -14 03:43:12 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000f00000000000000000", 0x20) 03:43:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x3000000, 0x0, 0x0}) [ 1120.238670][T22300] binder: 22299:22300 ioctl c0306201 200000c0 returned -14 [ 1120.254451][ C1] net_ratelimit: 15 callbacks suppressed [ 1120.254461][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1120.266026][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1120.271968][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1120.277825][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:43:12 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000210080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1120.282645][T22303] binder: 22301:22303 ioctl c0306201 200000c0 returned -14 03:43:13 executing program 0: r0 = gettid() open(&(0x7f0000000000)='./file0\x00', 0xa0000, 0x0) exit(0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:43:13 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500000000ffffff9e00000000000000", 0x20) 03:43:13 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x4, 0x0, 0x0}) 03:43:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x4000000, 0x0, 0x0}) 03:43:13 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000300000000000000", 0x20) 03:43:13 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000220080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1120.913236][T22325] __nla_validate_parse: 16 callbacks suppressed [ 1120.913286][T22325] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1120.937523][T22327] binder: BINDER_SET_CONTEXT_MGR already set [ 1120.951389][T22327] binder: 22319:22327 ioctl 40046207 0 returned -16 [ 1120.957055][T22324] binder: 22323:22324 ioctl c0306201 200000c0 returned -14 03:43:13 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000000000000eed00000000000000", 0x20) 03:43:13 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000600000000000000", 0x20) [ 1120.989624][T22331] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1120.999464][T22327] binder: 22319:22327 ioctl c0306201 200000c0 returned -14 03:43:13 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000230080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:13 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x5, 0x0, 0x0}) 03:43:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x5000000, 0x0, 0x0}) 03:43:13 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500000000fffffff000000000000000", 0x20) [ 1121.134533][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1121.140482][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1121.162536][T22343] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1121.224042][T22349] binder: 22345:22349 ioctl c0306201 200000c0 returned -14 [ 1121.256037][T22351] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1121.271074][T22353] binder: BINDER_SET_CONTEXT_MGR already set [ 1121.284238][T22353] binder: 22348:22353 ioctl 40046207 0 returned -16 [ 1121.320323][T22358] binder: 22348:22358 ioctl c0306201 200000c0 returned -14 [ 1121.534494][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1121.534500][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1121.534551][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1121.540324][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:43:14 executing program 0: r0 = gettid() r1 = socket(0x0, 0x0, 0x8001) bind$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x9, @remote, 0x80000001}}, 0x24) exit(0x78) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:43:14 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000c00e00000000000000", 0x20) 03:43:14 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x6, 0x0, 0x0}) 03:43:14 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000240080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:14 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500000000ffffffff00000000000000", 0x20) 03:43:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x6000000, 0x0, 0x0}) [ 1121.928986][T22369] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1121.935411][T22370] binder: 22364:22370 ioctl c0306201 200000c0 returned -14 [ 1121.966367][T22374] binder: BINDER_SET_CONTEXT_MGR already set [ 1121.982042][T22378] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1121.994092][T22374] binder: 22367:22374 ioctl 40046207 0 returned -16 03:43:14 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500f0ffffffffffff00000000000000", 0x20) 03:43:14 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x7, 0x0, 0x0}) 03:43:14 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000f00000000000000", 0x20) [ 1122.030346][T22381] binder: 22367:22381 ioctl c0306201 200000c0 returned -14 03:43:14 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000250080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x7000000, 0x0, 0x0}) [ 1122.197608][T22393] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1122.217585][T22392] binder: 22384:22392 ioctl c0306201 200000c0 returned -14 03:43:14 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x8, 0x0, 0x0}) [ 1122.251259][T22397] binder: BINDER_SET_CONTEXT_MGR already set [ 1122.257658][T22397] binder: 22396:22397 ioctl 40046207 0 returned -16 [ 1122.269164][T22399] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1122.273201][T22397] binder: 22396:22397 ioctl c0306201 200000c0 returned -14 [ 1122.416299][T22404] binder: 22403:22404 ioctl c0306201 200000c0 returned -14 03:43:15 executing program 0: r0 = gettid() r1 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x8000000000080000, 0x41) write$P9_RRENAMEAT(r1, &(0x7f0000000280)={0x7, 0x4b, 0x2}, 0x7) r2 = dup(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x200000, 0x0) capget(&(0x7f0000000180)={0x20080522, r0}, &(0x7f00000001c0)={0x401, 0x0, 0x6, 0x3f, 0xa7d5, 0x7f}) ioctl$KVM_GET_PIT(r3, 0xc048ae65, &(0x7f0000000040)) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000200)={0x6c, @multicast2, 0x4e21, 0x1, 'nq\x00', 0x4, 0x4, 0x7a}, 0x2c) exit(0x0) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000140)={0x2c, @rand_addr=0xdb, 0x4e24, 0x3, 'sh\x00', 0x0, 0x7, 0x52}, 0x2c) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000002c0)=r3, 0x4) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000300)={0x1, 0x3ff, 0x7, 0x38}) 03:43:15 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000c01100000000000000", 0x20) 03:43:15 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000200"/32, 0x20) 03:43:15 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000260080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x8000000, 0x0, 0x0}) 03:43:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x300, 0x0, 0x0}) [ 1122.863489][T22417] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1122.885908][T22421] binder: 22414:22421 ioctl c0306201 200000c0 returned -14 03:43:15 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000004000000000000000", 0x20) 03:43:15 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000270080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1122.918966][T22422] binder: BINDER_SET_CONTEXT_MGR already set [ 1122.919805][T22425] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1122.942501][T22422] binder: 22415:22422 ioctl 40046207 0 returned -16 03:43:15 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000300"/32, 0x20) 03:43:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x500, 0x0, 0x0}) [ 1123.015244][T22422] binder: 22415:22422 ioctl c0306201 200000c0 returned -14 03:43:15 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000000ec000000000000000", 0x20) 03:43:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x40000000, 0x0, 0x0}) [ 1123.203800][T22443] binder: 22438:22443 ioctl c0306201 200000c0 returned -14 [ 1123.284250][T22450] binder: 22447:22450 ioctl c0306201 200000c0 returned -14 03:43:15 executing program 0: r0 = gettid() exit(0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x4000, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x3) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000040)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000200)={0x101fe, 0x0, &(0x7f0000ff2000/0xd000)=nil}) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000180)='trusted.overlay.redirect\x00', &(0x7f00000001c0)='./file0\x00', 0x8, 0x3) 03:43:15 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000280080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:15 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000400"/32, 0x20) 03:43:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x600, 0x0, 0x0}) 03:43:15 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000011c000000000000000", 0x20) 03:43:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0xfdfdffff, 0x0, 0x0}) [ 1123.835981][T22464] binder: 22460:22464 ioctl c0306201 200000c0 returned -14 [ 1123.864881][T22466] binder: BINDER_SET_CONTEXT_MGR already set [ 1123.871160][T22466] binder: 22459:22466 ioctl 40046207 0 returned -16 03:43:16 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000f000000000000000", 0x20) 03:43:16 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000600"/32, 0x20) 03:43:16 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000290080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x700, 0x0, 0x0}) [ 1123.889254][T22466] binder: 22459:22466 ioctl c0306201 200000c0 returned -14 03:43:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0xff000000, 0x0, 0x0}) 03:43:16 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000002a0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1124.130082][T22479] binder: 22478:22479 ioctl c0306201 200000c0 returned -14 [ 1124.158080][T22490] binder: BINDER_SET_CONTEXT_MGR already set [ 1124.194602][T22490] binder: 22487:22490 ioctl 40046207 0 returned -16 [ 1124.217116][T22490] binder: 22487:22490 ioctl c0306201 200000c0 returned -14 03:43:17 executing program 0: r0 = gettid() exit(0x9) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:43:17 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000a00"/32, 0x20) 03:43:17 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000ff00000000000000", 0x20) 03:43:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x4000, 0x0, 0x0}) 03:43:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0xfffffdfd, 0x0, 0x0}) 03:43:17 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000002b0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1124.848282][T22515] binder: 22508:22515 ioctl c0306201 200000c0 returned -14 [ 1124.862399][T22516] binder: BINDER_SET_CONTEXT_MGR already set [ 1124.885926][T22516] binder: 22509:22516 ioctl 40046207 0 returned -16 03:43:17 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000002c0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:17 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000c00"/32, 0x20) 03:43:17 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000004003000000000000", 0x20) [ 1124.918694][T22516] binder: 22509:22516 ioctl c0306201 200000c0 returned -14 03:43:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0xff00, 0x0, 0x0}) 03:43:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x100000000000000, 0x0, 0x0}) 03:43:17 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000340000000000000", 0x20) [ 1125.165389][T22540] binder: 22536:22540 ioctl c0306201 200000c0 returned -14 [ 1125.176431][T22544] binder: BINDER_SET_CONTEXT_MGR already set [ 1125.190539][T22544] binder: 22534:22544 ioctl 40046207 0 returned -16 [ 1125.229502][T22544] binder: 22534:22544 ioctl c0306201 200000c0 returned -14 [ 1125.294463][ C0] net_ratelimit: 14 callbacks suppressed [ 1125.294472][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1125.306018][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:43:17 executing program 0: r0 = gettid() exit(0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x2, 0x8, 0x0, 0x9, 0x2080, 0x1, 0x6331, 0x9, 0x2, 0x7ff, 0x0, 0xfffffffffffffffa, 0x6, 0x5, 0x9, 0x4, 0x26e0d51a, 0x0, 0x3, 0x57, 0x100000000, 0x800, 0x7, 0x26, 0x3, 0x94d, 0x3, 0x5, 0x2, 0x9, 0x7, 0x2, 0x6, 0xfd, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x20000, 0x7f, 0x100000000, 0x0, 0x9, 0x8, 0x3}, r0, 0x5, r1, 0x0) 03:43:17 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000002d0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:17 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000e00"/32, 0x20) 03:43:17 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000fffff0000000000000", 0x20) 03:43:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x1000000, 0x0, 0x0}) 03:43:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x200000000000000, 0x0, 0x0}) [ 1125.694505][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1125.700323][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1125.704475][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1125.711939][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:43:18 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000f00"/32, 0x20) 03:43:18 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000002e0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x2000000, 0x0, 0x0}) [ 1125.806322][T22562] binder: 22553:22562 ioctl c0306201 200000c0 returned -14 [ 1125.816295][T22563] binder: BINDER_SET_CONTEXT_MGR already set [ 1125.842565][T22563] binder: 22554:22563 ioctl 40046207 0 returned -16 03:43:18 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000010000000000", 0x20) [ 1125.896182][T22563] binder: 22554:22563 ioctl c0306201 200000c0 returned -14 03:43:18 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025001000"/32, 0x20) 03:43:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x300000000000000, 0x0, 0x0}) [ 1126.015909][T22577] __nla_validate_parse: 14 callbacks suppressed [ 1126.015923][T22577] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1126.043862][T22580] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1126.068549][T22581] binder: 22573:22581 ioctl c0306201 200000c0 returned -14 [ 1126.103873][T22586] binder: BINDER_SET_CONTEXT_MGR already set [ 1126.121776][T22586] binder: 22583:22586 ioctl 40046207 0 returned -16 [ 1126.163083][T22586] binder: 22583:22586 ioctl c0306201 200000c0 returned -14 [ 1126.504485][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1126.510270][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1126.516136][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1126.521925][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:43:18 executing program 0: r0 = gettid() exit(0x0) move_pages(r0, 0x10220, 0x0, 0x0, 0x0, 0x3) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x20080, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x1000000) 03:43:18 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000020000000000", 0x20) 03:43:18 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000002f0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x3000000, 0x0, 0x0}) 03:43:18 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025006000"/32, 0x20) 03:43:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x400000000000000, 0x0, 0x0}) [ 1126.699311][T22601] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1126.732965][T22604] binder: 22598:22604 ioctl c0306201 200000c0 returned -14 [ 1126.736148][T22606] binder: BINDER_SET_CONTEXT_MGR already set 03:43:19 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500f000"/32, 0x20) 03:43:19 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000030000000000", 0x20) [ 1126.764498][T22606] binder: 22595:22606 ioctl 40046207 0 returned -16 [ 1126.778996][T22610] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1126.783369][T22611] binder: 22595:22611 ioctl c0306201 200000c0 returned -14 03:43:19 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000300080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x500000000000000, 0x0, 0x0}) 03:43:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x4000000, 0x0, 0x0}) 03:43:19 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000060000000000", 0x20) [ 1127.027850][T22626] binder: 22621:22626 ioctl c0306201 200000c0 returned -14 [ 1127.037372][T22627] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1127.058751][T22628] binder: 22624:22628 ioctl c0306201 200000c0 returned -14 [ 1127.061134][T22626] binder: BINDER_SET_CONTEXT_MGR already set [ 1127.069633][T22631] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1127.081454][T22626] binder: 22621:22626 ioctl 40046207 0 returned -16 03:43:19 executing program 0: r0 = gettid() exit(0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x108) ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f0000000040)={{0x1, @addr=0x3}, 0x8, 0xfff, 0x8000}) 03:43:19 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500000300"/32, 0x20) 03:43:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x600000000000000, 0x0, 0x0}) 03:43:19 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000310080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x5000000, 0x0, 0x0}) 03:43:19 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000000000000f0000000000", 0x20) 03:43:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x6000000, 0x0, 0x0}) [ 1127.650767][T22650] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1127.658306][T22647] binder: 22643:22647 ioctl c0306201 200000c0 returned -14 [ 1127.678272][T22648] binder: 22644:22648 ioctl c0306201 200000c0 returned -14 03:43:19 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500000600"/32, 0x20) [ 1127.699130][T22648] binder: BINDER_SET_CONTEXT_MGR already set [ 1127.706531][T22648] binder: 22644:22648 ioctl 40046207 0 returned -16 [ 1127.740845][T22658] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:43:20 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000400000000000", 0x20) 03:43:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x700000000000000, 0x0, 0x0}) 03:43:20 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000320080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1127.857393][T22662] binder: 22659:22662 ioctl c0306201 200000c0 returned -14 [ 1127.909996][T22662] binder: BINDER_SET_CONTEXT_MGR already set [ 1127.931947][T22671] binder: 22665:22671 ioctl c0306201 200000c0 returned -14 03:43:20 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500000a00"/32, 0x20) [ 1127.955488][T22662] binder: 22659:22662 ioctl 40046207 0 returned -16 [ 1127.981184][T22674] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1128.067555][T22680] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:43:20 executing program 0: r0 = gettid() exit(0x0) move_pages(r0, 0xfffffffffffffe48, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1d32, 0x200000) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d0000003f000000030000005a5ab661997c629743e17463bdee8359c1fd51803f397ca7db2dfe6509a36aa5308befe2bcdc72a84b84f6ba3baffb2d4f52c55710d6ba07fb5eabf32a8be48bc734ed47495ddbb842333fd98b63b78361976548731de8a261f0236b28b1bffd4ba9d342e42e954b2758c07a236148b9"]) 03:43:20 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000ffffff9e0000000000", 0x20) 03:43:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x7000000, 0x0, 0x0}) 03:43:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x800000000000000, 0x0, 0x0}) 03:43:20 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500000c00"/32, 0x20) 03:43:20 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000330080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:20 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000000ec00000000000", 0x20) 03:43:20 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000340080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1128.618092][T22692] binder: 22686:22692 ioctl c0306201 200000c0 returned -14 [ 1128.635719][T22696] binder: BINDER_SET_CONTEXT_MGR already set [ 1128.641748][T22696] binder: 22685:22696 ioctl 40046207 0 returned -16 03:43:20 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500000e00"/32, 0x20) [ 1128.698514][T22696] binder: 22685:22696 ioctl c0306201 200000c0 returned -14 03:43:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x8000000, 0x0, 0x0}) 03:43:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x4000000000000000, 0x0, 0x0}) 03:43:21 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000011c00000000000", 0x20) [ 1128.973968][T22718] binder: 22716:22718 ioctl c0306201 200000c0 returned -14 [ 1128.983575][T22719] binder: BINDER_SET_CONTEXT_MGR already set [ 1128.991714][T22719] binder: 22715:22719 ioctl 40046207 0 returned -16 [ 1129.022088][T22719] binder: 22715:22719 ioctl c0306201 200000c0 returned -14 03:43:21 executing program 0: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='gid_map\x00') ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYBLOB="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"/368]) exit(0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:43:21 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500ed0e00"/32, 0x20) 03:43:21 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000350080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0xfdfdffff00000000, 0x0, 0x0}) 03:43:21 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x40000000, 0x0, 0x0}) 03:43:21 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000ffffffc30000000000", 0x20) [ 1129.546763][T22736] binder: 22734:22736 ioctl c0306201 200000c0 returned -14 [ 1129.570603][T22741] binder: BINDER_SET_CONTEXT_MGR already set 03:43:21 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000fffffff00000000000", 0x20) 03:43:21 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000360080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1129.594045][T22741] binder: 22735:22741 ioctl 40046207 0 returned -16 03:43:21 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500000f00"/32, 0x20) 03:43:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0xff00000000000000, 0x0, 0x0}) [ 1129.629199][T22741] binder: 22735:22741 ioctl c0306201 200000c0 returned -14 03:43:21 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0xfdfdffff, 0x0, 0x0}) 03:43:21 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000ff0000000000", 0x20) [ 1129.796855][T22764] binder: 22763:22764 ioctl c0306201 200000c0 returned -14 [ 1129.885202][T22771] binder: 22766:22771 ioctl c0306201 200000c0 returned -14 03:43:22 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500003f00"/32, 0x20) 03:43:22 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000370080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:22 executing program 0: r0 = gettid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x4, 0x88202) r3 = fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f0000000080)={r2, r3, 0x3}) exit(0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:43:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x2, 0x0}) 03:43:22 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000f0ffff0000000000", 0x20) 03:43:22 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0xff000000, 0x0, 0x0}) 03:43:22 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500004000"/32, 0x20) 03:43:22 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000009effffff0000000000", 0x20) 03:43:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x3, 0x0}) [ 1130.461428][T22789] binder: BINDER_SET_CONTEXT_MGR already set [ 1130.490576][T22789] binder: 22780:22789 ioctl 40046207 0 returned -16 03:43:22 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000380080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1130.536355][T22789] binder: 22780:22789 ioctl c0306201 200000c0 returned -14 03:43:22 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0xfffffdfd, 0x0, 0x0}) 03:43:22 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500655800"/32, 0x20) 03:43:22 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000c3ffffff0000000000", 0x20) [ 1130.654460][ C1] net_ratelimit: 14 callbacks suppressed [ 1130.654469][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1130.666047][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1130.671913][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1130.677744][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:43:22 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500006000"/32, 0x20) [ 1130.780924][T22819] binder: 22818:22819 ioctl c0306201 200000c0 returned -14 03:43:23 executing program 0: r0 = gettid() exit(0x4) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:43:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x4, 0x0}) 03:43:23 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000390080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x100000000000000, 0x0, 0x0}) 03:43:23 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000f0ffffff0000000000", 0x20) 03:43:23 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500586500"/32, 0x20) [ 1131.377634][T22835] __nla_validate_parse: 12 callbacks suppressed [ 1131.377645][T22835] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1131.398613][T22832] binder: 22830:22832 ioctl c0306201 200000c0 returned -14 [ 1131.407240][T22838] binder: BINDER_SET_CONTEXT_MGR already set [ 1131.419133][T22838] binder: 22833:22838 ioctl 40046207 0 returned -16 03:43:23 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000003400000", 0x20) 03:43:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x200000000000000, 0x0, 0x0}) [ 1131.445648][T22841] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:43:23 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500008100"/32, 0x20) 03:43:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x5, 0x0}) 03:43:23 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000003a0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1131.534479][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1131.540303][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1131.646329][T22854] binder: 22852:22854 ioctl c0306201 200000c0 returned -14 [ 1131.667184][T22860] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1131.679452][T22861] binder: BINDER_SET_CONTEXT_MGR already set 03:43:23 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000fffffffffffff00000", 0x20) [ 1131.688556][T22862] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1131.705645][T22861] binder: 22853:22861 ioctl 40046207 0 returned -16 [ 1131.934502][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1131.934508][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1131.934568][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1131.940295][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:43:24 executing program 0: r0 = gettid() exit(0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xff, 0x1, 0xf463, 0x8, 0x2, 0x400}, 0x1ad0}, 0xa) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:43:24 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000eed00"/32, 0x20) 03:43:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x300000000000000, 0x0, 0x0}) 03:43:24 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000003b0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x6, 0x0}) 03:43:24 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000000000100", 0x20) [ 1132.309422][T22878] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1132.321167][T22880] binder: 22872:22880 ioctl c0306201 200000c0 returned -14 [ 1132.335675][T22876] binder: BINDER_SET_CONTEXT_MGR already set [ 1132.357706][T22876] binder: 22874:22876 ioctl 40046207 0 returned -16 [ 1132.374872][T22887] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:43:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x400000000000000, 0x0, 0x0}) 03:43:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x7, 0x0}) 03:43:24 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000f000"/32, 0x20) 03:43:24 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000000000200", 0x20) 03:43:24 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000003c0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1132.574579][T22902] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1132.611166][T22905] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:43:24 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000003d0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1132.621582][T22896] binder: BINDER_SET_CONTEXT_MGR already set [ 1132.641082][T22901] binder: 22894:22901 ioctl c0306201 200000c0 returned -14 [ 1132.648869][T22896] binder: 22895:22896 ioctl 40046207 0 returned -16 [ 1132.789520][T22913] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1132.806652][T22915] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:43:25 executing program 0: r0 = gettid() exit(0x0) r1 = syz_open_dev$admmidi(&(0x7f0000001280)='/dev/admmidi#\x00', 0x3, 0x200082) connect$rds(r1, &(0x7f00000012c0)={0x2, 0x4e22, @broadcast}, 0x10) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:43:25 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000000000300", 0x20) 03:43:25 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000400300"/32, 0x20) 03:43:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x500000000000000, 0x0, 0x0}) 03:43:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x8, 0x0}) 03:43:25 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000003e0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1133.282255][T22932] binder: BINDER_SET_CONTEXT_MGR already set 03:43:25 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000034000"/32, 0x20) 03:43:25 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000000000600", 0x20) 03:43:25 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000003f0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1133.329786][T22936] binder: 22925:22936 ioctl c0306201 200000c0 returned -14 [ 1133.342344][T22932] binder: 22925:22932 ioctl 40046207 0 returned -16 03:43:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x300, 0x0}) 03:43:25 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500fffff000"/32, 0x20) 03:43:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x600000000000000, 0x0, 0x0}) [ 1133.640655][T22956] binder: 22953:22956 ioctl c0306201 200000c0 returned -14 03:43:26 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000000000f00", 0x20) 03:43:26 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000400080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:26 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x700000000000000, 0x0, 0x0}) 03:43:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x500, 0x0}) 03:43:26 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000100"/32, 0x20) 03:43:26 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000000)) r1 = gettid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x170) exit(0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000040)) move_pages(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 03:43:26 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000410080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:26 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000000004000", 0x20) [ 1134.210167][T22978] binder: 22969:22978 ioctl c0306201 200000c0 returned -14 03:43:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x600, 0x0}) [ 1134.255513][T22978] binder: BINDER_SET_CONTEXT_MGR already set 03:43:26 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000200"/32, 0x20) [ 1134.298496][T22978] binder: 22969:22978 ioctl 40046207 0 returned -16 03:43:26 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x800000000000000, 0x0, 0x0}) 03:43:26 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000420080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:26 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000000000ffffff9e00", 0x20) 03:43:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x700, 0x0}) [ 1134.542476][T22999] binder: 22998:22999 ioctl c0306201 200000c0 returned -14 03:43:27 executing program 0: r0 = gettid() exit(0x0) userfaultfd(0x80000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000040)) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:43:27 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000300"/32, 0x20) 03:43:27 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x4000000000000000, 0x0, 0x0}) 03:43:27 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000000000000000000ec000", 0x20) 03:43:27 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000430080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x4000, 0x0}) [ 1135.204567][T23031] binder: BINDER_SET_CONTEXT_MGR already set [ 1135.210620][T23031] binder: 23022:23031 ioctl 40046207 0 returned -16 [ 1135.211507][T23030] binder: 23020:23030 ioctl c0306201 200000c0 returned -14 03:43:27 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000400"/32, 0x20) 03:43:27 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0xfdfdffff00000000, 0x0, 0x0}) 03:43:27 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000000000000011c000", 0x20) 03:43:27 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000440080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:27 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000600"/32, 0x20) 03:43:27 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000000000ffffffc300", 0x20) [ 1135.495688][T23049] binder: 23046:23049 ioctl c0306201 200000c0 returned -14 [ 1135.694505][ C0] net_ratelimit: 14 callbacks suppressed [ 1135.694515][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1135.706022][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:43:28 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000450080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0xff00, 0x0}) 03:43:28 executing program 0: r0 = gettid() r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="e43b4d9a1430ba9632573ddb757439e94afb016da86cb7d068c89991bc498a32d11659550465b29f67f4c4133801963ae24f1169d0355d86af56529601111ecce8a8fb9ab01247ef4ad116d27960bbe167e310ec8bbb35595ee04c35c96d9e696e02d2596b3696580e3b666e27ec99bb7dbb6472cb3bb7cf83b1c6be986f7dee6af47eaf", 0x84, r1) exit(0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:43:28 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000000000fffffff000", 0x20) 03:43:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000a00"/32, 0x20) 03:43:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0xff00000000000000, 0x0, 0x0}) [ 1136.094496][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1136.094710][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1136.100307][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1136.106069][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1136.187864][T23071] binder: 23064:23071 ioctl c0306201 200000c0 returned -14 [ 1136.200430][T23070] binder: BINDER_SET_CONTEXT_MGR already set 03:43:28 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000000000000000ff00", 0x20) 03:43:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000c00"/32, 0x20) [ 1136.238018][T23070] binder: 23066:23070 ioctl 40046207 0 returned -16 03:43:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x2, 0x0}) 03:43:28 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000460080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x1000000, 0x0}) 03:43:28 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000f0ffffffffffff00", 0x20) [ 1136.421176][T23094] __nla_validate_parse: 16 callbacks suppressed [ 1136.421188][T23094] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1136.459685][T23096] binder: BINDER_SET_CONTEXT_MGR already set 03:43:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000e00"/32, 0x20) [ 1136.481556][T23096] binder: 23092:23096 ioctl 40046207 0 returned -16 [ 1136.482632][T23098] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:43:28 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000470080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1136.650458][T23110] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1136.704331][T23112] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1136.894468][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1136.900290][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1136.906104][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1136.911841][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:43:29 executing program 0: r0 = gettid() exit(0x0) move_pages(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffb000/0x2000)=nil], &(0x7f0000000040)=[0x8, 0x5, 0x3995e4b9, 0x8, 0x7fc605c0, 0x3, 0x18000000000], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x2) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:43:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x2000000, 0x0}) 03:43:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x3, 0x0}) 03:43:29 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000200000000000000", 0x20) 03:43:29 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000f00"/32, 0x20) 03:43:29 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000480080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:29 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000001000"/32, 0x20) [ 1137.116681][T23124] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1137.135925][T23129] binder: BINDER_SET_CONTEXT_MGR already set 03:43:29 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000300000000000000", 0x20) 03:43:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x3000000, 0x0}) [ 1137.164679][T23129] binder: 23119:23129 ioctl 40046207 0 returned -16 [ 1137.179025][T23131] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:43:29 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000490080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:29 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000003f00"/32, 0x20) 03:43:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x4, 0x0}) [ 1137.390003][T23148] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1137.422987][T23152] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:43:30 executing program 0: r0 = gettid() exit(0xfbffffeffffffff9) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:43:30 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000600000000000000", 0x20) 03:43:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x4000000, 0x0}) 03:43:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x5, 0x0}) 03:43:30 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000004a0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:30 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000004000"/32, 0x20) [ 1138.017566][T23167] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1138.030843][T23163] binder: BINDER_SET_CONTEXT_MGR already set [ 1138.048585][T23171] binder: BINDER_SET_CONTEXT_MGR already set 03:43:30 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000006000"/32, 0x20) 03:43:30 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000f00000000000000", 0x20) 03:43:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x6, 0x0}) [ 1138.061490][T23163] binder: 23161:23163 ioctl 40046207 0 returned -16 [ 1138.077117][T23171] binder: 23159:23171 ioctl 40046207 0 returned -16 [ 1138.088902][T23176] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:43:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x5000000, 0x0}) 03:43:30 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000004b0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:30 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000586500"/32, 0x20) 03:43:31 executing program 0: r0 = gettid() r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vfio/vfio\x00', 0x4000000000400800, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000140)=""/251) exit(0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x8001, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000340)) r2 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x204001, 0x10) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000080)={0xa43, 0x1, 0x0, 0x1, 0x4, 0x2}) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x10000, 0x0) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x5, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0xc242) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000040)) 03:43:31 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000f000000000000000", 0x20) 03:43:31 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000004c0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x7, 0x0}) 03:43:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x6000000, 0x0}) 03:43:31 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000008100"/32, 0x20) 03:43:31 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500ffffa88800"/32, 0x20) 03:43:31 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000004d0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:31 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000003000000000000", 0x20) [ 1138.952192][T23217] binder: BINDER_SET_CONTEXT_MGR already set [ 1138.978859][T23217] binder: 23208:23217 ioctl 40046207 0 returned -16 03:43:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x8, 0x0}) 03:43:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x7000000, 0x0}) 03:43:31 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500ffffff9e00"/32, 0x20) 03:43:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x300, 0x0}) 03:43:32 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000004e0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:32 executing program 0: exit(0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:43:32 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000006000000000000", 0x20) 03:43:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x8000000, 0x0}) 03:43:32 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000000eed00"/32, 0x20) 03:43:32 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000c00e000000000000", 0x20) 03:43:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x500, 0x0}) 03:43:32 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500fffffff000"/32, 0x20) 03:43:32 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000004f0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1139.907565][T23262] binder: BINDER_SET_CONTEXT_MGR already set [ 1139.945725][T23262] binder: 23249:23262 ioctl 40046207 0 returned -16 03:43:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x40000000, 0x0}) 03:43:32 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000500080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:32 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250088a8ffff00"/32, 0x20) 03:43:32 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000000f000000000000", 0x20) 03:43:33 executing program 0: r0 = gettid() r1 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x20, 0x100) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_GET(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, r2, 0x800, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000a00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40800040}, 0xc, &(0x7f00000009c0)={&(0x7f0000000840)={0x178, r3, 0x731, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x4}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_BEARER={0x40, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8000000000000000}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA={0x40, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x68, 0x5, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9f9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x16}]}, @TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffffffffffb}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffffffffffb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x80c0}, 0x1) mount$9p_xen(&(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7472616e733d78656e2c6d6d61702c63616368653d6e6f6e652c6163636573733d616e792c63616368657461673d2e2539636772ef7570766d6e6574302c61705072616976a8c3cc2d700890bb73655f7479706519ac0ef6f226b175d70bf98d92367b8805954eecf3b5b130f4bf3b07ba2d4e445025f8ef1fa91ec47968673fa143ca57fd5a777964bf10dd97c7a984a199a48d65b8e639e5c90ed82e2de9a1706dd829a08f9032e7ed17046a7f32cc1e1d4eb57f84fecd7fe7d3b447d9742c3bb77b254c10fbe98c85768a707e2657072ffdff0708dd8ba32e13edf3c16483d26c7f204c"]) capget(&(0x7f0000000380)={0x20071026, r0}, &(0x7f00000003c0)={0xe0, 0x1, 0x0, 0x6, 0x10001, 0x3f}) exit(0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000780)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000a40)=ANY=[@ANYBLOB="f3a052a5e0fb8878a510b63d9500ccab7c8e00d1b72faead34156537da3d5989ecae5dd4cbe6286b71c217b6631d632023f0c7e0378a3c8b43d36c23692ae51cfe43415d1957641e9830f0b001308b6dc5fa435d476156357adde555e8de8947cad9678b03055aa5135e5ed1faabf2fa6184ce98f631b9364e77a285b3b53ae7e55c5ace188adf274c6450afe2c5adab65efafdf92a79fae5404864488f2feb4b689a66800fa78c9bc9d5e4a06dde53c84", @ANYRES16=r4, @ANYBLOB="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"], 0x2f8}, 0x1, 0x0, 0x0, 0x8000}, 0x4000881) 03:43:33 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000c011000000000000", 0x20) 03:43:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0xfdfdffff, 0x0}) 03:43:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x600, 0x0}) 03:43:33 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000510080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:33 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000f0ffff00"/32, 0x20) 03:43:33 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025009effffff00"/32, 0x20) 03:43:33 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000040000000000000", 0x20) [ 1140.882759][T23313] binder: BINDER_SET_CONTEXT_MGR already set [ 1140.905283][T23313] binder: 23302:23313 ioctl 40046207 0 returned -16 03:43:33 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000520080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x700, 0x0}) 03:43:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0xff000000, 0x0}) 03:43:33 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500f0ffffff00"/32, 0x20) [ 1141.054463][ C1] net_ratelimit: 15 callbacks suppressed [ 1141.054473][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1141.066051][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1141.071910][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1141.077733][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:43:34 executing program 0: exit(0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:43:34 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000530080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:34 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000ec0000000000000", 0x20) 03:43:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0xfffffdfd, 0x0}) 03:43:34 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000034000000000000000", 0x20) 03:43:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x4000, 0x0}) [ 1141.853233][T23352] __nla_validate_parse: 16 callbacks suppressed [ 1141.853244][T23352] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1141.873458][T23355] binder: BINDER_SET_CONTEXT_MGR already set [ 1141.883554][T23355] binder: 23351:23355 ioctl 40046207 0 returned -16 [ 1141.890695][T23354] binder: BINDER_SET_CONTEXT_MGR already set 03:43:34 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000000011c0000000000000", 0x20) [ 1141.906927][T23354] binder: 23348:23354 ioctl 40046207 0 returned -16 [ 1141.931757][T23364] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1141.941333][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1141.941414][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:43:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x100000000000000, 0x0}) 03:43:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0xff00, 0x0}) 03:43:34 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500fffffffffffff000000000000000", 0x20) 03:43:34 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000540080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:34 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000000000f0000000000000", 0x20) [ 1142.221293][T23385] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1142.249336][T23386] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1142.334473][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1142.334480][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1142.334531][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1142.340295][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:43:34 executing program 0: r0 = gettid() r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x218002, 0x0) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000040)) exit(0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:43:34 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000000001000000000000", 0x20) 03:43:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x200000000000000, 0x0}) 03:43:34 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000000000ff000000000000", 0x20) 03:43:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x1000000, 0x0}) 03:43:34 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000550080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1142.830610][T23396] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:43:35 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000000002000000000000", 0x20) 03:43:35 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000040030000000000", 0x20) 03:43:35 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000560080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1142.887746][T23406] binder: BINDER_SET_CONTEXT_MGR already set [ 1142.905158][T23406] binder: 23394:23406 ioctl 40046207 0 returned -16 [ 1142.911902][T23408] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:43:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x2000000, 0x0}) 03:43:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x300000000000000, 0x0}) [ 1143.076132][T23420] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:43:35 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000003400000000000", 0x20) [ 1143.130551][T23424] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:43:35 executing program 0: r0 = gettid() r1 = getpid() tkill(r1, 0x33) sched_setparam(r0, &(0x7f0000000040)=0x1) r2 = gettid() exit(0x8) r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) ioctl$RTC_WIE_ON(r3, 0x700f) move_pages(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 03:43:35 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000000003000000000000", 0x20) 03:43:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x3000000, 0x0}) 03:43:35 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000570080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x400000000000000, 0x0}) 03:43:35 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000fffff00000000000", 0x20) [ 1143.753856][T23446] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:43:36 executing program 0: r0 = gettid() r1 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000000080)=0x80, 0x800) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e24, 0x8001, @mcast2, 0xfffffffffffffffb}, {0xa, 0x4e20, 0x800, @ipv4, 0x101}, 0x2, [0x8001, 0x0, 0x6, 0x3d97, 0x1a, 0x9, 0x89, 0x7]}, 0x5c) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000140)=0xffffffffffffffff, 0x4) exit(0x9) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:43:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x4000000, 0x0}) 03:43:36 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000000004000000000000", 0x20) [ 1143.804981][T23454] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:43:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x500000000000000, 0x0}) 03:43:36 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000100000000", 0x20) 03:43:36 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000580080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x5000000, 0x0}) 03:43:36 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000000006000000000000", 0x20) 03:43:36 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000590080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:36 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000200000000", 0x20) 03:43:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x600000000000000, 0x0}) 03:43:36 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000005a0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:37 executing program 0: r0 = gettid() exit(0x0) syz_mount_image$nfs4(&(0x7f0000000000)='nfs4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x7, &(0x7f0000001400)=[{&(0x7f0000000080)="2879ee654c4f18a1144ac4dd271c397e5d147c80488d8403cde040f6c2e4003bf91c7d03a4a6c26df8663bbddd7a3db032ecf1a2f077bb74f7dece30a54f32a8fb0ab750154d1708087d0e0e2243f90de2c4b3d09707130df3435ef95ae8177d9b74e48efec0d309b438", 0x6a, 0x4}, {&(0x7f0000000100)="6d406621a8597ab646d02f55e0ed56de12959bb21f664b8d3d9497e24978fd68dc5a486c3650fb6aae203e6c44664afb73a8261ad841c8496a8ce00928b5d1532ec288a3e6a73ee3a546fa4cf432626c05b42b470ab388c33e9a8286d9cb3418aebba071da7e19a3f071df85b7cff2fe7fb69f4956381193ed82edb50e5686afa83ee94f074a1621d619748e6d05621cce298a4455f73b064e2c2aa9de1b8981dedd0cc86de935bd74aa6ec22be6d214fda0ae9b7c37e7fd36417da4b456da330aef3d2875e0dacf20b378b3d61c3e6689d403c3f1271361d9b415afd1346624bf834170a6ab2237e4d87fcb13a03cd1335f9420866fbd7303e843b654841aa33bfaf3217b085165e9ce3c148ff2cde28503110d3740a66ee2252500790d5f17fd6eaca443855fa6e725efac92d16e97ad953a1015d99c68ad4b04aa83f02a50c81a8bc690aeade085e463b6b863648af8cd36ea9fd2947113ebbde67347d7320c74764b2a41baa27d3b8e80dd8e85ef0eafaae68b885879ace935f75e9304ca7d9bbb0d2d98457d4c0f1775c45430c98c1cb7255092277ce499d11cad069ef3ddeb7a438734fd57270d909e3d7f67ba35a15ab616ede88308da8aab0c8ab734aec1b25eb91070b36145e7d330ec355b80fcac8162b17b6f63a03d5341da5e666cdeb06394f00b50a65927bf753b5ce01224cf908848bf6cfcc1009c0491fd514db3a821a4893c9eb4f9aa28b7907d37203f9f9ae3e801b7a0a7acb7524024b9d428f488c8ac38843c12cb753321086ace4d83fabb4c8eddb4f64832a6a0b4334a7d2c422422ccdfc6a7a6edc1018c9e3457184c9a9a63e6dd279d8a22ad4cd1ca5eeede431988db4243419dd4ca25e9c7a72796b275cff736151dd7f8daf6624a571ce13786f2079aeb557a5ea98e7873a3b5934ef5e1b0092d193f2b96a85f8b14bf9ecc8e76cdc2dee6c64f0f72a4a7093384f610f73cf2aa94696972981675d51334342f91d8f5e75f417bff8836ea4d0a0897cba35e354ffbf629b69bde99694bb4cb78d35289d82faa58a3f62c8ff722055bd0f7597dd00306dbfebc3bbe1fed3c7abe0534176a832b83d7a6fbf2fb4e24598c8773e0329e5f7f91c488265e68147bbdb8216b185a82d390a7ae8ed8ebe5afdc0e113952c29da99945c8ed0fbe29a5dd8372b534c15bd2e371e793de9eb2b1e196d0c80a5efa71dca4c79928789454ecff4db51a3c2d7cef90d1d4dc6c261fea876b016743baab34e12358734c6b1c111bb61d26c1b0a96672a4f7846731bad3efa0539f95d96a88f95792ff6a4642fcd566956ce4d1a38f21a12cc1fe5e7061ff89b880c5590d26417f191e545dc6b1b37577802a71f7ee61a6c620bc9fbc8da93dc22adfbed580ca06d2a55b37a0dc48f06d4cc5c04b5a7f27fa518e9b46f3f5b8eb5bf5dcb1f797d418093aaa3959281f660d6e408543b9f2dd18d5042a63410d0ea11690b53a0b55bca4590835ca3fe9b8c805ce4bb4ed4484d3dfcac6f62d1bc2a96c9b5d32f6138c3f3b80d5ba2cb46b601238d8067a58edbda04672654a8033b5d1c6edd034be9b3b00423cee7f4ac97333168bef13c50638c25c7c55a4a0f461d18e6ea1a964f9c86434d3576fc47ecddc76dcb49eb071db6d07b7aaeed0ac655867505e9abd2223c78b5487b3b647f98c56daf7272eafab4b04e0a6e3b38e33f7067fef60ecff1aa04277f93c41ccfa1e9a233310092641b406d295a8e98a9558224cee50abfde201f326af95442917a43d6763f93da98739aa2d828c511d868cf056f3b90b3bbaf05a2abdc0b897d12144ec239c3fdd4b8e31bb31951ac9fb77d7b31e592fc7f04c0a34bb3c36f56ee3928f3e71f5a3c7acf1d3d8287439b4be2f85e79387aed087ab429a49b7f4f153c43f545e860aae459650cc14aa856e67ee3795413878dbf91a04779961eab7e0549d94cb27bae9605acec461607c68d3b2a74f773a236f4d3e1a357710b94fe4a51f154f373ce5ae1410e169a816406a8610227d8cc02f0513e53a1ca3046ec12b4ac2452d9cc0d6786dea577cc1a5f4fe337ebfc1562840a0f1e0f498ceca6073f50fc135c86c40c02cff643ea910b4c9ce0556687c72acd017ee4cc6104c460289bf9247306414bcc71550e8e3bef00fc661bb8c3c14ce7ba603e922be01582f7f7894e5cd3a1961bb2a4679385c2b2f6b2ea2b55d32a855e26ea70d9af36d6fc615c41f5084900997def9fe61d42cb8125944439affff4dcd1bc896c1fe740a89040e8ed93c6cce9e38523413e9cd04bbd728778f45597ff078ec7bb8f3afed31f0871f514ddf247e4685a8020147968fa8e987cb14f295240dad1a2882361f679594fc0d0339133548513ab925eb41d71629db77786583cf3d96d5092878438d8b7a6a49607577782fba5059d534affb7f80e1699d021366ed3521f0f4bc7fed4644c6fa1985bdf69580e9fa9f58cf149e73bbfe2ca014189bc3e30c8687917d6cb5c744ea7a637a06bef92c69b39760237cb46bf7f068447bcc97e17015cb07ee8f6a388819af228ab67755b508d71fe06494006d7c915af86b137356f64e637b37c9f712387bea8b5832a3f316b95d16c1c2025278b6b92d2222150612931c0c97eecbd3a92cd05a6de61d4deecbfd430f4a48c997968b5ff0e906342eba28581606c21e7714b08592b5762fcb620b8a204f0f9d5713dfba7d7a16e693d6d4019e8c4f7805c56e4d81e6cee6b1bc06fa1c42cc95ae7cad7eff452b0de92b95369c348abc0fb650e3e81b437017afd8cfc4f346437b7aef1290a5073a2ad143c7a63bcac9f7d0d8c84db189c3a764cf6581673547589ff26da53938de4577e563d6b0a0ac40b1f68144d923760c98b3fbf875f64afe5f9e97a9c367ed94fd59a651197442705d539bf88d3dd66e484ac6afe69278280a8f16238442b629fde7e0162c00412da990bf3715242820c454b9e4b43ca3e3506a3652687ee9f59f79ef5ef127160e3fcc091506e10616d8f4d798d302994f5030b97c2be8767d6e439229dd84622a53c0d2d82846316499e8cb0d74386b735a8258932da9e49e9278d0aa71d3a0a7eff1d8b8df4f429fa6301944398b4ec6d3e136e342e443f13bc01488f57f38644cb4ffb2122ff912a502bead2c7ae33bff2e3c5fa00ff35d48a060ee15402567fac175ba93a74fd0ba7a2c4f724fbc5f1cde85e27533c0e20ef964618f6a6e5a8de743a85f5f241f1c8e0e3f4d29063010ee8c564d029cb999232e6542d66cc2778e59e703989c9c907dd987bbb67756d74a88bde882f9555c8f8e8daa0017351ea010ff1d249b853e9c5a9c1459a155464553a2439babb99e310981299fb6075e56282f7ed1318156c3f6a4c9e9177f52bb98a1f776f6d11ec78442d05b1c4972dae631d1e1f04d9d4ea827294a01f3844b2ce64c7f3c80c7152094058770e75ee5da8a3721bf9dfca83992adc34b56601c14fbcee662d6bbb2c7080f0d357b962d4e1d0190d30fef7ed05fd1bf17cef0aca4e9b8475db33afd19c4704af1f7ec85c1f1d5d0db5668d3c1affeb3983946b43fefd07a3a26a5bb18b99eeb5482cd6a606cb15ce57ce90816a62e2519ea080be789d36c484fb5532a43c90a38bd80f3d6a89abd194c9269e721ab8552e7b1891fffef3dc36edf5823155285ae472ea0983a47ac295d24c211f6c2f158b7288c464a38fb69136aa2720b3cc19a524bc7892dc6baa8436c992a7e78739d16a5f500eb976b662fdafc150f180c5a75d3eeb326dfcde53f1be4776bd5488426d889fd6b73870aee347d64d4286b78ab834483410a749f01d481fad5d0a86ac1519538430821165f17ec072bb9c4d18b2269321adcd4fd3acb934b9b0ba95c85ab50aa7a06770d415281a7ade333e96a8fc384cd2feaabf79c050b8efddcbe4b794418ee9bb96f6dce397e32839e5a882b1f6c1e3f1219e156bfff5145edb12763044da251f54d203dfe910b26668a659e08bef9b8cc7eee52730156bdac4537ebbd5277b88d1b62edf257fd61d1ec4ca82644b2a63e0e7de80ca796640ee4ca26b4830d6d088f38578824a061314be69e6b34a5a95c1b86a179e1c03443f1aa41d81ed72f627342679aff6c55e53514a5ffdd03843308f7adb483d0c5906232c05bab9ca8d92342cfaa72216ced7ea2c6e9881b900e0d488a8f1a792dcac1bef0d7e6c6ddb62d3d33dd03237487b0c9177ac5b6143aa26c230d90d114d1432447ba0b2a90d2a61b024fd51bf727f3cf6092817c5cf7c4ab90faa9d1f8e5266eb6bba9d04c6b6a720cbd9a10166ec31d3154cf4f0f5a576b1607cb2bf5cff4baa43f1a3a05a1e8d5941ec70f5e7b684855b1224f3325043c9e0e5d63cb3e357a1143f177401680b9ec6b3871a1aea432bcadaf284793e38335aea255b0fa0b3300e716142de164b33901c64681b891b13586213469528478416d2f52c57a1b54f185f40712f2abd0dacbbdabca6d00729d1880b99549ae06ab4ebcaaf2a7cce79dc4fecd4048a1e84fd1c9d55573d791d25895f248d2374804e0a03412c5a4a62f0c33c117f92178eafd9b573ac81c0c867a04ac8185f99ad75d5c7b97119e55bf18665d227b6a7c69381ca9dd6f461612fbe0eaf77612c2ff79bbab647b4dcb585efdf50466e5f928f5cfd13d7190aab239fdb445ec6d3ef306926bb9812f14b36997d77026ba6f571d3285efc75b1724d75af70f02dcb368dfb9d3b9bb001498ff2c28c6416657be46bc4096b4a8c43e96102061ec0d1dbff8fa354d60f91e76d59b4ae2b701b2bcb3e125f40b8237526d06562746c3bb7238530b3333dff4b682297329b673c276d27956b84fe0ba5caf7fadd491e0fd44db227a5810a5ec2ff08f3847b0ab9bf8024c1e7cdff4750ee277a50b4ec68af4f7672de4393efd45556503fad80a8ed1298002655eab431263b2dc1d3280c3f2ccbed09a2c725de5a551340ff5c86035d6cab161cc2643559d1bea902a731730ed09e2393fa10672be9789c41bb8e16c719a2798e31e14b5e1798d0412af7089436efd9bfe2f80829900da6a7329a01cf72a06f2694a478f781fac121293dd7ce8ee475633eba2d12f01ebc9b51dde033efbb0faac8b61a61a7c881f8becf6526718b426bd235f7fe8675c8ccb5f19da590910a3117d2b724525aba53a2217b988dfd6f5e8c527766da70bf8101b57d93a48b2879c7b35a6d8d25c982ef311d0d3364494eecaf2fd4d26c0c4554acc697c4dc328fc426299de19d7cc2b33e14a9a58fd188712f45d25f6a4867002ff8cbb3ee9e675eb7384668acf567f504bfc017b467c81b29cc9076bc4cec9035a8faf77883d9b9e1076665ee77ebdfb73aff181bc592db4c308546a5c333213c2e8f9c25e5611d1735e08b1e05bfb63bdc10da6acec3d894d21e8a29087268a9a6e259aa9c5b80bb6fb8645825f640d00fe7872c11890bf095ff5d541287c8ffd159991ccb69c4afe9db21af861dc781d58bfea5f2c4878e3bfa41080ef058415eb21395525b668d6997c9cac48fa0a52206dc4c291d3263094091d96d25fa97a35eb0dce9e50ffeafed164b70ed4c48437920d026d87b11435d200989dfe85b1588c14ccf93db209880e6e88acd17209c563b29a24221ab8373528fb8ecdddf0952bc04c089bbe6561647b1eeb492b7538dfc7721dc66aa1f6add9b386c942c71e755734965c3b0e4c48b54055afc64836b129cf98e288cd00059ea6972a59f376fc0ffd9b4ea3c3a67ff976abf9bd08ba4f27a798", 0x1000, 0x2}, {&(0x7f0000001100)="b8668a34e7420f0c0b97809cb1d3c5bfc308e97c672cf534d53716f05c4dbb547727c543d7c92ad48e3ed415a67be0666c9b93bfea1e7bcb0c58a3bcbd353cde141abde48ff2e682424b5c2dc5393214939e760e585a1ed5535537ea6f9a57071f729b26494a73b72cdc1ab5a9b4b62fa9663c2563243364028af2d11affbc2e6d2bb3c8c3324308aef9e9572fb15a20238af5d71970413a8a1c9c32f1ef6afa530beb4c63ce7455aca14d8d", 0xac, 0xffff}, {&(0x7f00000011c0)="7402b635cec235d2096f732f06a105b080914e0e99fb1079c80972e179db139a54b9ec22614e395c730979959f7c30c5837552ccda4421ac19dd6bd1cb0ba48ecef92885ae4200e89c2480e7aef849c3f8390d1d8408937d5393622c09b2863662898c8dbd344aa31d979388c762782cdeb532d074478c56bb", 0x79, 0x6}, {&(0x7f0000001240)="588684024202dc6911d713997f5e7cb9ad7dd1dcddcc01c56e1598da77d87ff2359fd3c0cc987d1667cab93a1d39e533f203e48e5e", 0x35, 0x80}, {&(0x7f0000001280)="999fbc0b8c48ebe579aa7ef6deac386352bef5f0ea004c88908434f81e0ae5480c87ad92705027dca8fc3f324925a89fe1f852c566f0f3f235af8d9bb3f55d5e0cb927900529d2d2e2961cf4b32ddf2c1b828743a10635b8c00737c17e48f38bd897be83ffd6c0ad30e27a61a770672b33a0af", 0x73, 0x81}, {&(0x7f0000001300)="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", 0xfb, 0x20}], 0x4, &(0x7f00000014c0)='.\x00') move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:43:37 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500000000000000000a000000000000", 0x20) 03:43:37 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000300000000", 0x20) 03:43:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x700000000000000, 0x0}) 03:43:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x6000000, 0x0}) 03:43:37 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000005b0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1144.894324][T23509] binder: BINDER_SET_CONTEXT_MGR already set [ 1144.925718][T23509] binder: 23505:23509 ioctl 40046207 0 returned -16 03:43:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x7000000, 0x0}) 03:43:37 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500000000000000000c000000000000", 0x20) 03:43:37 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000600000000", 0x20) 03:43:37 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000005c0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x800000000000000, 0x0}) 03:43:37 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000005d0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:37 executing program 0: r0 = gettid() exit(0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x2) 03:43:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x8000000, 0x0}) 03:43:37 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000f00000000", 0x20) 03:43:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x4000000000000000, 0x0}) 03:43:37 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500000000000000000e000000000000", 0x20) 03:43:37 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000005e0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0xfdfdffff00000000, 0x0}) 03:43:38 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500000000000000000f000000000000", 0x20) 03:43:38 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000005f0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:38 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000004000000000", 0x20) 03:43:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x40000000, 0x0}) 03:43:38 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000000010000000000000", 0x20) [ 1146.094474][ C0] net_ratelimit: 13 callbacks suppressed [ 1146.094483][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1146.106076][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1146.494509][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1146.494550][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1146.500376][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:43:38 executing program 0: r0 = gettid() exit(0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1f, 0x24000) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0x3, 0x401, 0x1}) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x3, 0x101000) syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') 03:43:38 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000ffffff9e00000000", 0x20) 03:43:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0xfdfdffff, 0x0}) 03:43:38 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000600080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:38 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500000000000000003f000000000000", 0x20) 03:43:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0xff00000000000000, 0x0}) 03:43:39 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000610080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:39 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000000040000000000000", 0x20) [ 1146.759552][T23606] binder: BINDER_SET_CONTEXT_MGR already set [ 1146.798409][T23606] binder: 23594:23606 ioctl 40046207 0 returned -16 03:43:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="056304d8d4401f85996d0c09c007c1c544544962dc40c6809e18f9240dc5d5b0b010d3b73a83698986ad74d074a7b4ea91c0766e941b660c518bd8cc6996725dadfee323446e508db51ac903c2715f3a1a4f4ed2310178d029d421dd92"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:43:39 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000000000000ec000000000", 0x20) 03:43:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0xff000000, 0x0}) [ 1146.888924][T23616] __nla_validate_parse: 18 callbacks suppressed [ 1146.888937][T23616] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1146.967850][T23624] binder: 23621:23624 unknown command -670801147 [ 1146.974761][T23624] binder: 23621:23624 ioctl c0306201 20000080 returned -22 03:43:39 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000000011c000000000", 0x20) [ 1147.009078][T23628] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1147.032233][T23624] binder: BINDER_SET_CONTEXT_MGR already set [ 1147.046373][T23630] binder: 23621:23630 unknown command -670801147 [ 1147.053798][T23624] binder: 23621:23624 ioctl 40046207 0 returned -16 [ 1147.074284][T23630] binder: 23621:23630 ioctl c0306201 20000080 returned -22 [ 1147.294478][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1147.300346][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1147.306302][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1147.312071][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:43:39 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000040)=r1) r2 = gettid() exit(0x0) move_pages(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 03:43:39 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000000060000000000000", 0x20) 03:43:39 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000620080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x6) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0xc00, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x29ce}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000240)={r2, 0x1}, 0x8) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e22, @rand_addr=0xdd}, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x51, 0xffffffffffffff6a}) 03:43:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0xfffffdfd, 0x0}) 03:43:39 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000ffffffc300000000", 0x20) [ 1147.614865][T23649] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:43:39 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000005865000000000000", 0x20) 03:43:39 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000fffffff000000000", 0x20) 03:43:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x100000000000000, 0x0}) [ 1147.678853][T23658] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:43:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x80000) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000140)="4d9a366bb2b5d6538eb30aa72ae72a64b252824ee5b5c4cc2da204123df4511ae1f99688f98f9d263c306fd5611b0a23aad46a7c04c526b43ba6f4923f895f414a7c0fc5e6bc8b4171e760d0f25659f800fbab47997cec9326d40653d13806cb4fbe29c917625d1e320753155ee9e18bebc9205cb343e3732021523957010aae5388c4cb0da7bd736128c5b5bae20937b5c9e529d160fce465601644332c65a46a") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000200)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYRES64=0x0]], 0x380, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c4000009c8400020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:43:40 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000630080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:40 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000000000ff00000000", 0x20) [ 1147.947968][T23673] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1147.966225][T23676] binder: 23668:23676 unknown command 536871488 [ 1147.972533][T23676] binder: 23668:23676 ioctl c0306201 20000080 returned -22 [ 1147.987662][T23679] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1148.019159][T23680] binder: 23668:23680 unknown command 536871488 [ 1148.036116][T23680] binder: 23668:23680 ioctl c0306201 20000080 returned -22 [ 1148.174523][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:43:40 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_mreq(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @rand_addr=0x4}, 0x8) r1 = gettid() exit(0x0) move_pages(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 03:43:40 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000000081000000000000", 0x20) 03:43:40 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x200000000000000, 0x0}) 03:43:40 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000000000f0ffff00000000", 0x20) 03:43:40 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000640080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000280)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x101000, 0x0) ioctl$SIOCRSSL2CALL(r2, 0x89e2, &(0x7f00000001c0)=@bcast) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x210000, 0x0) r4 = getuid() ioctl$SIOCAX25GETUID(r3, 0x89e0, &(0x7f0000000040)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, r4}) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000140)={0x7, 0x7ff, 0x2, 0x0, 0x0, [{r0, 0x0, 0x41f}, {r0, 0x0, 0x45}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0}) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f00000002c0)=@generic={0x3, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f0000000200)={0x0, 0x0, 0x102, 0x4, {0x6, 0x6, 0x0, 0x3}}) 03:43:40 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000009effffff00000000", 0x20) [ 1148.595331][T23699] binder: BINDER_SET_CONTEXT_MGR already set [ 1148.602401][T23692] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:43:40 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000000000ffffa888000000000000", 0x20) [ 1148.644331][T23705] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1148.666991][T23699] binder: 23690:23699 ioctl 40046207 0 returned -16 03:43:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="332489055c98657c63f0b6ecef1097e9c478c179fc5587a178f8fa7b4471346e48a769d7cec49bd6346a56591c8ab7ae7abdf7597eb3e7eb99047c00e23f32baa81055764b73b2eb5d72046a7a048281d1c25de4dc09d390357b0d670efb5cdc77ae3e74876b7a1becfad2f117273a16857d8542"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:43:40 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000000000ffffff9e000000000000", 0x20) 03:43:41 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000650080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x300000000000000, 0x0}) [ 1148.873682][T23721] binder: 23715:23721 unknown command 92873779 [ 1148.903851][T23724] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1148.921834][T23725] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1148.926241][T23721] binder: 23715:23721 ioctl c0306201 20000080 returned -22 [ 1148.950078][T23727] binder: BINDER_SET_CONTEXT_MGR already set [ 1148.959859][T23727] binder: 23723:23727 ioctl 40046207 0 returned -16 [ 1148.969519][T23726] binder: 23715:23726 unknown command 92873779 [ 1148.980317][T23727] binder: BINDER_SET_CONTEXT_MGR already set [ 1148.987016][T23726] binder: 23715:23726 ioctl c0306201 20000080 returned -22 [ 1148.989591][T23727] binder: 23723:23727 ioctl 40046207 0 returned -16 03:43:41 executing program 0: r0 = gettid() exit(0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7, 0x4401) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000020}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x610, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000180)) 03:43:41 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000c3ffffff00000000", 0x20) 03:43:41 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000000eed000000000000", 0x20) 03:43:41 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000660080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x400000000000000, 0x0}) 03:43:41 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffff9c, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000140)={0x0, r1}) r2 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) finit_module(r0, &(0x7f0000000180)='/dev/binder#\x00', 0x3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:43:41 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000000000fffffff0000000000000", 0x20) [ 1149.526167][T23746] Unknown ioctl -1073191926 03:43:41 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000670080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:41 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000f0ffffff00000000", 0x20) 03:43:41 executing program 3: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@xdp, &(0x7f0000000140)=0x80, 0x80000) fsetxattr$security_smack_transmute(r0, &(0x7f0000000180)='security.SMACK64TRANSMUTE\x00', &(0x7f00000001c0)='TRUE', 0x4, 0x2) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) [ 1149.584257][T23751] Unknown ioctl -1073191926 03:43:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x500000000000000, 0x0}) 03:43:42 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000680080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1149.807564][T23770] binder: BINDER_SET_CONTEXT_MGR already set [ 1149.852474][T23770] binder: 23760:23770 ioctl 40046207 0 returned -16 03:43:42 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000000034000", 0x20) 03:43:42 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000000000ffffffff000000000000", 0x20) 03:43:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) epoll_wait(r1, &(0x7f0000000040)=[{}, {}], 0x2, 0xff) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05634bcb"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:43:42 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000690080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:42 executing program 0: r0 = gettid() exit(0xffffffffffffffff) r1 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000140)={0xfffffffffffff48b, 0x0, 0x3abd, 0x1, 0x0, 0xff, 0x800a}, 0xc) ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000180)) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x80000, 0x0) accept4$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14, 0x80000) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$revoke(0x3, r3) 03:43:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x600000000000000, 0x0}) [ 1150.427484][T23787] binder: 23781:23787 unknown command -884251899 [ 1150.449283][T23794] binder: BINDER_SET_CONTEXT_MGR already set [ 1150.449937][T23787] binder: 23781:23787 ioctl c0306201 20000080 returned -22 03:43:42 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000fffffffffffff000", 0x20) 03:43:42 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000f0ffffffffffff000000000000", 0x20) [ 1150.477980][T23795] binder: 23781:23795 unknown command -884251899 [ 1150.489920][T23795] binder: 23781:23795 ioctl c0306201 20000080 returned -22 [ 1150.501107][T23794] binder: 23784:23794 ioctl 40046207 0 returned -16 03:43:42 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000006a0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x700000000000000, 0x0}) 03:43:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x8000, 0x0) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000140)=""/100) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:43:42 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500000200"/32, 0x20) 03:43:42 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000000000001", 0x20) 03:43:43 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000006b0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x800000000000000, 0x0}) 03:43:43 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500000300"/32, 0x20) 03:43:43 executing program 0: r0 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = gettid() r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x5, 0x100) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000040)=0x4002088) exit(0x20000000007ffffd) move_pages(r1, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() 03:43:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:43:43 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000000000002", 0x20) 03:43:43 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000006c0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:43 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500000400"/32, 0x20) 03:43:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x4000000000000000, 0x0}) [ 1151.402526][T23846] binder: BINDER_SET_CONTEXT_MGR already set [ 1151.438301][T23846] binder: 23843:23846 ioctl 40046207 0 returned -16 03:43:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0xfdfdffff00000000, 0x0}) 03:43:43 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500000600"/32, 0x20) [ 1151.454535][ C1] net_ratelimit: 15 callbacks suppressed [ 1151.454544][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1151.466054][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1151.471916][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1151.477756][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:43:43 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x4, 0x0) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05770440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) r2 = fcntl$getown(r0, 0x9) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0xb00, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_procfs(r2, &(0x7f0000000140)='attr/exec\x00') 03:43:43 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000006d0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:43 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000000000003", 0x20) 03:43:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0xff00000000000000, 0x0}) [ 1151.707077][T23872] binder: 23868:23872 unknown command 1074034437 [ 1151.744478][T23872] binder: 23868:23872 ioctl c0306201 20000080 returned -22 [ 1151.815176][T23875] binder: BINDER_SET_CONTEXT_MGR already set [ 1151.841981][T23875] binder: 23868:23875 ioctl 40046207 0 returned -16 [ 1151.872723][T23872] binder: 23868:23872 unknown command 1074034437 [ 1151.880690][T23872] binder: 23868:23872 ioctl c0306201 20000080 returned -22 03:43:44 executing program 0: r0 = gettid() statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/157) exit(0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:43:44 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500000a00"/32, 0x20) 03:43:44 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000006e0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:44 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000000000006", 0x20) 03:43:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) socket$caif_stream(0x25, 0x1, 0x1) 03:43:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000140)=[@in={0x2, 0x4e23, @rand_addr=0x6}, @in6={0xa, 0x4e24, 0x75f, @remote, 0xe97}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e24, 0xbd, @dev={0xfe, 0x80, [], 0xd}, 0x1}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}], 0x88) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x1a4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x18f, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f0000000080)={0xa, 0x1, 0x3, 0x6, 'syz0\x00', 0x3}) [ 1152.297468][T23895] binder: BINDER_SET_CONTEXT_MGR already set [ 1152.303518][T23895] binder: 23888:23895 ioctl 40046207 0 returned -16 [ 1152.329689][T23899] __nla_validate_parse: 16 callbacks suppressed 03:43:44 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000000000000000000f", 0x20) 03:43:44 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500000c00"/32, 0x20) [ 1152.329754][T23899] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1152.337334][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1152.337914][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1152.342418][T23895] binder: 23888:23895 unknown command 0 03:43:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="7bd1cd16"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) [ 1152.407761][T23895] binder: 23888:23895 ioctl c0306201 20000000 returned -22 [ 1152.421212][T23906] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:43:44 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000006f0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1152.472338][T23912] binder: 23888:23912 unknown command 0 [ 1152.497451][T23912] binder: 23888:23912 ioctl c0306201 20000000 returned -22 03:43:44 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000000000040", 0x20) [ 1152.518412][T23916] binder: BINDER_SET_CONTEXT_MGR already set 03:43:44 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500000e00"/32, 0x20) [ 1152.553013][T23916] binder: 23910:23916 ioctl 40046207 0 returned -16 [ 1152.611068][T23919] binder: 23910:23919 unknown command 382587259 [ 1152.620298][T23921] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1152.638050][T23919] binder: 23910:23919 ioctl c0306201 20000080 returned -22 [ 1152.673328][T23919] binder: 23910:23919 unknown command 382587259 [ 1152.673892][T23926] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1152.710290][T23919] binder: 23910:23919 ioctl c0306201 20000080 returned -22 [ 1152.734516][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1152.734536][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1152.740384][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1152.746083][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:43:45 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x20000) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000140)={r1}) r3 = gettid() ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000180)=0x6a52) syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0xffff, 0x10000) exit(0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) accept$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10) move_pages(r3, 0x0, 0x0, 0x0, 0x0, 0x0) 03:43:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) r2 = accept4$llc(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x0) connect$l2tp(r1, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @local}, 0x3, 0x1, 0x3, 0x1}}, 0x2e) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffeed, 0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:43:45 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000700080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:45 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000000000000000ffffff9e", 0x20) 03:43:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c4000ff7f0000000100000000ff06630440"], 0x0, 0x0, 0x0}) 03:43:45 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500000f00"/32, 0x20) [ 1153.319812][T23945] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1153.331115][T23944] binder: BINDER_SET_CONTEXT_MGR already set [ 1153.343058][T23946] binder: 23933:23946 ioctl 660c 0 returned -22 [ 1153.363197][T23948] binder: 23933:23948 ioctl 660c 0 returned -22 03:43:45 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x2, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:43:45 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500001000"/32, 0x20) 03:43:45 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000000000ec0", 0x20) [ 1153.370170][T23944] binder: 23936:23944 ioctl 40046207 0 returned -16 [ 1153.402189][T23951] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:43:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="a946cea93a04f8fcffffff0c40e69000009800c5d551ee8b2da21f5a7493d0cafb7bfddf0800aa50a76a4351f838dca9e0f130ee0f4c5a6afd1ef819174afd76b6f78d178e751fc288c021334fa9771b0a7dceb8d12591eb29fc93982f54118d4f783dbcbadb678c267d5aeaefaec59f52d3203eb4fd7ff379f36a8d5cf71d2a1ac83ba12644"], 0x0, 0x0, 0x0}) [ 1153.479499][T23955] binder: 23954:23955 ioctl c0185879 20000040 returned -22 03:43:45 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000710080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1153.587905][T23955] binder: 23954:23955 ioctl c0185879 20000040 returned -22 [ 1153.612745][T23967] binder: BINDER_SET_CONTEXT_MGR already set 03:43:45 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000000000000000000011c0", 0x20) [ 1153.633666][T23967] binder: 23960:23967 ioctl 40046207 0 returned -16 [ 1153.649894][T23968] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1153.676980][T23967] binder: 23960:23967 unknown command -1446099287 [ 1153.696014][T23971] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1153.697680][T23967] binder: 23960:23967 ioctl c0306201 200000c0 returned -22 03:43:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff0663044010ef1f0c49f973fe2806a3a2830247298cae3defac919cc0fa804ea416de6b7cdab56c4926d73eed38e4dacf5b055751d71ae26ce1d5c97a3ddd2c0e4337d8973aee754c01e5a735688d3f2740df5f2578153e43ff10a7cc0417a0197c1040497619f95243343c8efde3bf12f71d73b805dfd6fee00eaabf0b5f5b2e68e18b77855ea82f36fd774875bb"], 0x0, 0x0, 0x0}) 03:43:46 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500006000"/32, 0x20) 03:43:46 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000000000000000ffffffc3", 0x20) 03:43:46 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000720080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:46 executing program 0: rt_sigaction(0x13, &(0x7f0000000100)={&(0x7f0000000080)="c481c9569c683e00000066410fa0c423757ea54454580f07f10f313e430f01c1660f0f2ca90d65f3450f4e6d09c4c1f8770f381ed9", {0x9}, 0x8006, &(0x7f00000000c0)="c4e1fc50e1c4017972d70743e305c461c5e995040000002e67d3b6feefffffc4a2e59c01c482fd35a890c1000064f3aac4a2f930e4f326440fadef"}, &(0x7f0000000200)={&(0x7f0000000140)="3e660ff6417b410f940a460f95e7c4227d250534ad0000f343dff664f3410f708c7865566666008f2810b6c407c4c169142fc401e57646de8fe978d6a0c4ba0000", {}, 0x0, &(0x7f00000001c0)="c401897cea660f2dce660fe0c90f0fe5a764dc5a0367450f72f40ec4c17a125851f346c965450f73d54b410fe79000000080"}, 0x8, &(0x7f00000002c0)) r0 = gettid() exit(0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000040)={0x9}, 0x1) io_setup(0x3, &(0x7f0000000280)) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:43:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x48, 0x80) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1, 0x1, 0x9, 0x3e3, 0x100, 0x40000000, 0x7}, 0x1c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) [ 1154.253403][T23986] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1154.277900][T23989] binder: BINDER_SET_CONTEXT_MGR already set 03:43:46 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000000000000000fffffff0", 0x20) 03:43:46 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000f000"/32, 0x20) 03:43:46 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000730080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1154.305177][T23991] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1154.329422][T23989] binder: 23979:23989 ioctl 40046207 0 returned -16 03:43:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x5, 0x4000) sendto$ax25(r1, &(0x7f0000000040)="65cfb66a6db31da3dfdcb398f647dcd772e38c3d2dc51e8191394e33bf5b5092286e2ba45825ca82fe0ebccd673ced1456a9a5b60a4d064be3363788", 0x3c, 0x40090, 0x0, 0x0) 03:43:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) r1 = accept$inet(0xffffffffffffff9c, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x1, 0x10001, 0x8001, 0x1, 0x45}, &(0x7f0000000200)=0x98) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000240)={r2, 0x401}, &(0x7f0000000280)=0x8) 03:43:46 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000000300"/32, 0x20) 03:43:46 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000000000000000000000ff", 0x20) 03:43:46 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000740080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2800, 0xc) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x40) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000140)={0x18, 0x1, 0x0, {0x1}}, 0x1e750cf29d6336e4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:43:46 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000000600"/32, 0x20) 03:43:47 executing program 0: r0 = gettid() exit(0xf) move_pages(r0, 0x48b, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x4, 0x2, 0x5) r2 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x0, 0x2) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) write$P9_RWALK(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="570000006f010006004004000000060000000000000010040000000100000000000000480300000004000000000000000004000000080000000000000008030000000700000000000000d004000000010000000000000066f10001000000000000d235c7c6bda0fd03"], 0x57) r3 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x200, 0x10000) ioctl$PPPIOCATTACH(r3, 0x4004743d, &(0x7f00000001c0)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000480)) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x5, 0x5, 0x7, 0xc0, 0xff, 0x4a51e2e8, 0x8, {0x0, @in6={{0xa, 0x4e20, 0x8, @loopback, 0xca8}}, 0x9, 0x45, 0x0, 0x81, 0x3}}, &(0x7f00000002c0)=0xb0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000300)={r4, 0x8, 0x0, 0x8, 0x3, 0xfff}, 0x14) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000400)={0x5, 0x81, 0xffffffffffffff81}) r6 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x100, 0x8800) ioctl$KDGKBLED(r6, 0x4b64, &(0x7f00000003c0)) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr="5802968df0dca544a2ec093101cf1493"}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1b}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe0d3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xea}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44000}, 0x8004) 03:43:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x802) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x6, 0x101100) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180)=@sack_info={0x0, 0x6, 0x590d}, &(0x7f00000001c0)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000200)={r2, 0x6}, 0x8) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xff2e, 0x0, &(0x7f0000000140)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000000000007d4000000000000240000000"], 0x0, 0x0, 0x0}) 03:43:47 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000000000f0ffffffffffff", 0x20) 03:43:47 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000750080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:47 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500372400"/17], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:43:47 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000000a00"/32, 0x20) 03:43:47 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000000c00"/32, 0x20) [ 1155.359375][T24055] binder: 24047:24055 unknown command 607584261 [ 1155.390670][T24050] binder: BINDER_SET_CONTEXT_MGR already set [ 1155.394180][T24055] binder: 24047:24055 ioctl c0306201 20000080 returned -22 03:43:47 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000002000000000000", 0x20) 03:43:47 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000760080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1155.408021][T24050] binder: 24048:24050 ioctl 40046207 0 returned -16 [ 1155.431392][T24050] binder: 24048:24050 unknown command 808482864 [ 1155.449738][T24050] binder: 24048:24050 ioctl c0306201 20000080 returned -22 [ 1155.461110][T24063] binder: 24047:24063 unknown command 607584261 03:43:47 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000000e00"/32, 0x20) [ 1155.517808][T24063] binder: 24047:24063 ioctl c0306201 20000080 returned -22 [ 1155.527202][T24066] binder: 24048:24066 unknown command 2 03:43:47 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000003000000000000", 0x20) [ 1155.558898][T24066] binder: 24048:24066 ioctl c0306201 200000c0 returned -22 03:43:47 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000100)=ANY=[], 0xfffffffffffffde9, 0x0, 0x0}) [ 1155.607827][T24066] binder: 24048:24066 unknown command 808482864 [ 1155.628356][T24066] binder: 24048:24066 ioctl c0306201 20000080 returned -22 [ 1155.709232][T24080] binder: 24079:24080 unknown command 0 [ 1155.715185][T24080] binder: 24079:24080 ioctl c0306201 20000000 returned -22 03:43:48 executing program 0: r0 = gettid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r1, 0x1, &(0x7f0000000040)="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") exit(0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x80000, 0x0) 03:43:48 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000006000000000000", 0x20) 03:43:48 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000ed0e00"/32, 0x20) 03:43:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x4001, 0x0) r2 = accept4$llc(r1, 0x0, &(0x7f00000000c0), 0x80000) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xffffffffffffffc4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x128, 0x0, 0x0}) getsockname(r2, &(0x7f00000001c0)=@caif=@dbg, &(0x7f0000000240)=0x80) ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f0000000140)) 03:43:48 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000770080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:48 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000140)=0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:43:48 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000780080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:48 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000000f00"/32, 0x20) [ 1156.318302][T24103] binder: BINDER_SET_CONTEXT_MGR already set [ 1156.332783][T24103] binder: 24093:24103 ioctl 40046207 0 returned -16 03:43:48 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000000f000000000000", 0x20) 03:43:48 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) [ 1156.371562][T24103] binder: 24093:24103 ioctl c0306201 20000000 returned -14 [ 1156.390955][T24107] binder: 24093:24107 ioctl c0306201 20000000 returned -14 03:43:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x6, 0x4801) r2 = accept4$unix(0xffffffffffffff9c, &(0x7f0000001140)=@abs, &(0x7f0000000040)=0x6e, 0x318b68446a624aa) sendto(r1, &(0x7f0000000140)="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", 0x1000, 0x4000000, &(0x7f00000011c0)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @remote}, 0x0, 0x2, 0x0, 0x4}}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000001240)=ANY=[@ANYRES16=r1], 0x0, 0x0, 0x0}) [ 1156.494458][ C0] net_ratelimit: 14 callbacks suppressed [ 1156.494466][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1156.505986][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1156.507229][T24115] binder: 24112:24115 ioctl 8008700b ffffffffffffffff returned -22 03:43:48 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000790080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1156.569411][T24115] binder: 24112:24115 ioctl 8008700b ffffffffffffffff returned -22 [ 1156.652058][T24125] binder: 24123:24125 unknown command 0 [ 1156.675538][T24125] binder: 24123:24125 ioctl c0306201 20000080 returned -22 [ 1156.706203][T24130] binder: 24123:24130 unknown command 0 [ 1156.711818][T24130] binder: 24123:24130 ioctl c0306201 20000080 returned -22 [ 1156.894524][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1156.894584][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1156.900379][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1156.906161][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:43:49 executing program 0: r0 = gettid() r1 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x40) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000100)=0xaa88, 0x4) exit(0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:43:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000003f00"/32, 0x20) 03:43:49 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000000000f0000000000000", 0x20) 03:43:49 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x900) ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f0000000040)={0x6, 0x7640, 0x7f}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="eb63044031d2ff489afc56782cf49240d60333afc77989b400953493e4d6e7ac88497674a7ca825bf77e1f578a6bbb2bb7470b976713f563ec4347490eea11b65dd07f658bd1c1c9e9fcb1c72457d335ce97b0f3ff2071b3e7ec9e0d5c14a7597012b544b7b76492e17fbaddb33c539f6e06463613460c2e2b90e389fc2d4c9e99eabae980dceecd019ba73d865324890f87be37e1facf569e6cb9c9616b5541dde949b29dddc8185d49f608cca05eb3193b0ea6"], 0x0, 0x0, 0x0}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000900)={@dev={0xac, 0x14, 0x14, 0x11}, @empty, 0x0, 0x7, [@multicast2, @loopback, @multicast2, @dev={0xac, 0x14, 0x14, 0x10}, @remote, @broadcast, @remote]}, 0x2c) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x89800100}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0xa0, r2, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe4}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1f}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_BEARER={0x18, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000400)={{0x7, 0x3, 0x0, 0x7, 'syz0\x00', 0x39d6}, 0x0, [0x2, 0x0, 0x800, 0x6, 0x4756, 0x7, 0x39d8000000000, 0x2, 0xfffffffffffffffe, 0x4, 0xfffffffffffffff9, 0x6, 0x5, 0xb1, 0xff, 0x0, 0x80, 0x3, 0x1, 0x8, 0x7, 0x4, 0x4, 0x7, 0x0, 0x2, 0x5, 0x5, 0x1, 0x7, 0x3, 0x5, 0xfff, 0x2, 0x29, 0xad, 0x372c, 0xfffffffffffffff7, 0x1ff, 0x3282, 0x7a, 0xffffffffffff1cb4, 0x4, 0x8, 0x7f, 0x401, 0x9, 0x0, 0x6, 0x4094, 0x7, 0x7, 0x20, 0x1, 0x1, 0x0, 0x9, 0x3, 0xfffffffffffffffd, 0x200, 0x9, 0x200, 0xc7ae, 0x7fff, 0x80, 0x92, 0x5, 0x0, 0x7, 0x1, 0x9, 0x0, 0x80000001, 0x81, 0xb1b, 0x6, 0x6, 0x1, 0x3, 0x34, 0x8, 0x8, 0x6b, 0x9c, 0x0, 0x3e82950, 0x7fff, 0x81, 0x5, 0x6, 0x7, 0x100, 0x7, 0xff, 0x1, 0x808000000000, 0x4, 0x2, 0x4, 0x4fb9, 0xf55, 0xfff, 0x100, 0xfb84, 0xfffffffffffffffd, 0x5, 0x101, 0x8001, 0x44, 0x20, 0x5, 0x5, 0x0, 0x4, 0x4, 0x8001, 0x0, 0x77b, 0x7, 0x7, 0xac, 0x110, 0xb6c0, 0x8, 0x8000, 0xcd4e, 0x4, 0x800], {r3, r4+30000000}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:43:49 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000007a0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="38c633908a6a291032be49e72fe7daaeee4f1ddcfccbcd2920c92b5809193cb990b36448d1b086dad643c12d236c7d3b72468102b6d34079a882402f7221288a141d23de63a27d8c4564bb7660a7964bd1c6ce19b8632c5c05a028a511a8aa76702c065472166e2cd440bd2069"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:43:49 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000030000000000", 0x20) 03:43:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000004000"/32, 0x20) 03:43:49 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000007b0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1157.237802][T24149] binder: 24139:24149 unknown command 1074029547 [ 1157.247283][T24150] binder: BINDER_SET_CONTEXT_MGR already set [ 1157.258631][T24150] binder: 24141:24150 ioctl 40046207 0 returned -16 [ 1157.268955][T24149] binder: 24139:24149 ioctl c0306201 20000080 returned -22 [ 1157.277055][T24150] binder: 24141:24150 unknown command -1875655112 [ 1157.299243][T24150] binder: 24141:24150 ioctl c0306201 20000080 returned -22 [ 1157.340880][T24156] binder: 24139:24156 unknown command 1074029547 [ 1157.350344][T24150] binder: BINDER_SET_CONTEXT_MGR already set [ 1157.361076][T24156] binder: 24139:24156 ioctl c0306201 20000080 returned -22 [ 1157.371405][T24150] binder: 24141:24150 ioctl 40046207 0 returned -16 [ 1157.376157][T24158] binder: 24141:24158 unknown command -1875655112 03:43:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000655800"/32, 0x20) 03:43:49 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x200, 0x0) 03:43:49 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000060000000000", 0x20) [ 1157.392349][T24161] __nla_validate_parse: 15 callbacks suppressed [ 1157.392361][T24161] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1157.396774][T24158] binder: 24141:24158 ioctl c0306201 20000080 returned -22 [ 1157.417383][T24165] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1157.704462][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1157.710314][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1157.716228][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1157.722001][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:43:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = accept4$alg(0xffffffffffffff9c, 0x0, 0x0, 0x800) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400063000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:43:50 executing program 0: r0 = gettid() exit(0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x20000, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) 03:43:50 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000000000c00e0000000000", 0x20) 03:43:50 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000006000"/32, 0x20) 03:43:50 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x80000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='cpusetwlan0!\x00', r0}, 0x10) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xe5a24452b686b5e6, 0x0) getpeername$ax25(r1, &(0x7f0000000140)={{}, [@netrom, @bcast, @null, @remote, @default, @rose, @null, @default]}, &(0x7f0000000040)=0x48) r2 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0xe, 0x4, 0x378, 0x0, 0x0, 0x0, 0x220, 0x220, 0x2e0, 0x2e0, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000280), {[{{@ip={@empty, @local, 0xffffffff, 0xffffffff, 'irlan0\x00', 'ip_vti0\x00', {}, {}, 0x29, 0x2, 0x1}, 0x0, 0x98, 0xc0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x100, 0x160, 0x0, {}, [@common=@unspec=@limit={0x48, 'limit\x00', 0x0, {0x8, 0x5d, 0x3, 0x5, 0x401, 0x7, 0x1ff}}, @common=@socket0={0x20, 'socket\x00'}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0x5, 0x4, [0x11, 0x1, 0x2e, 0x30, 0x2e, 0x6, 0x1f, 0x22, 0xf, 0x1d, 0x35, 0x1c, 0x19, 0x37, 0x21, 0x19], 0x3, 0x1, 0x2}}}, {{@uncond, 0x0, 0x98, 0xc0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xe}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffe89, 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r2], 0xfffffffffffffe5b, 0x0, 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x0, 0xfffffffffffffeb8, 0x12d, &(0x7f0000000380)="841fa4bbaa391d65aacf9f0016dad80a9b687a28d34e95c66f5eba50e581e533b0a0ded19635c46c69e46cf5caac9e0b0ea1fb2f6bdb8bb05f263262fce5c31a900b9347184d639aa3612616688f75041de2b7e9f4eb6985f52229c83cc800"/110, &(0x7f0000000080)=""/9, 0x10}, 0x139) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c40cd80d910938d2e758e08270d2fd6912d"], 0x0, 0x0, 0x0}) 03:43:50 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000007c0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1158.125308][T24186] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1158.138410][T24190] binder: BINDER_SET_CONTEXT_MGR already set [ 1158.147549][T24187] binder: 24182:24187 unknown command 764532271 [ 1158.166667][T24190] binder: 24184:24190 ioctl 40046207 0 returned -16 03:43:50 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000000000000f0000000000", 0x20) [ 1158.173189][T24195] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1158.184624][T24187] binder: 24182:24187 ioctl c0306201 200000c0 returned -22 03:43:50 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000586500"/32, 0x20) 03:43:50 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x6, 0x441) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000340)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f00000003c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r2}}, 0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:43:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:43:50 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000007d0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:50 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000008100"/32, 0x20) 03:43:50 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000000000c0110000000000", 0x20) 03:43:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff066304404ff4f4fd1f11dd7b302c9b8830039d79c20e352d997850826258ddceee4dea3d199d9f7c315dd934697cc7431e2d386c1b0c0976c4a42650a8611a3daee7669c70ab55f0c54a93a6030e962b6e71400a3cd0a5335cd5bfc092b51d2f24f2118033fcd62d97047eb43cd025cae4858cf20abcc2a422d3c905050eb46e9b91cea66391bb10a7d918b4da80"], 0x0, 0x0, 0x0}) [ 1158.458347][T24215] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1158.490854][T24220] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:43:51 executing program 0: r0 = gettid() prctl$PR_SET_TIMERSLACK(0x1d, 0x7) exit(0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = semget$private(0x0, 0x2, 0x42) semctl$SEM_STAT(r1, 0x0, 0x12, &(0x7f0000000000)=""/95) 03:43:51 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmsg(r1, &(0x7f00000003c0)={&(0x7f0000000140)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, 0x341, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/112, 0x70}, {&(0x7f0000000240)=""/191, 0xc}, {&(0x7f0000000300)=""/84, 0x22}], 0x3, &(0x7f0000000380)}, 0x40) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vsock\x00', 0x42000, 0x0) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000400)={0x6, 0xf4, 0x8, 0x4, 0xb, 0x5, 0x1, 0x100000000, 0x8, 0xd4}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) 03:43:51 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000007e0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500000eed00"/32, 0x20) 03:43:51 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000400000000000", 0x20) 03:43:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630cff016304a1b7b14000"], 0x0, 0x0, 0x0}) [ 1159.065171][T24242] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1159.081495][T24241] Unknown ioctl 21510 [ 1159.086143][T24243] binder: BINDER_SET_CONTEXT_MGR already set [ 1159.099924][T24243] binder: 24237:24243 ioctl 40046207 0 returned -16 03:43:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000f000"/32, 0x20) 03:43:51 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000000ec00000000000", 0x20) [ 1159.124050][T24249] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1159.147272][T24243] binder: 24237:24243 unknown command -15965426 03:43:51 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000007f0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:51 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000140)={&(0x7f00000000c0)=[0x10001, 0x3, 0x84b, 0x2, 0xffffffffffffffff, 0x1000, 0x8], 0x7, 0x7, 0x9, 0x5, 0x2000000000000000, 0x800, {0x7, 0xfffffffffffff800, 0x8000, 0x3, 0x9, 0x5, 0x20, 0x4beb75fd, 0x1, 0x1f, 0xed63, 0x0, 0x9, 0x3f, "ec0e8d950e3cc421d93883ce0007f01fc0da2992bef01e00427fc4e8f73d45cc"}}) r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="a5630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xffffffffffffffed, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e0800000000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) write$cgroup_int(r0, &(0x7f0000000200)=0x9, 0x12) [ 1159.179873][T24243] binder: 24237:24243 ioctl c0306201 200000c0 returned -22 03:43:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000400300"/32, 0x20) 03:43:51 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ubi_ctrl\x00', 0x280801, 0x0) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000500)={0x1, 0x6, [{r2, 0x0, 0x5000, 0x2000}, {r0, 0x0, 0xfffffffff0000000}, {r0, 0x0, 0xfffffffffffff000}, {r2, 0x0, 0xfffffffffffff000, 0x100000000}, {r2, 0x0, 0x1000000, 0x1000000}, {r2, 0x0, 0x10000, 0xfffffffff0000000}]}) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x100, 0x0, &(0x7f0000000340)=[@acquire_done={0x40106309, 0x2}, @register_looper, @acquire_done={0x40106309, 0x3}, @acquire_done={0x40106309, 0x2}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/42, 0x2a, 0x0, 0x18}, @fda={0x66646185, 0xa, 0x2, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1000}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000280)={@flat=@binder={0x73622a85, 0x1001}, @fd={0x66642a85, 0x0, r2}, @flat=@weak_handle={0x77682a85, 0x1}}, &(0x7f0000000300)={0x0, 0x18, 0x30}}}, @free_buffer={0x40086303, r3}, @increfs_done, @exit_looper, @dead_binder_done], 0x7d, 0x0, &(0x7f0000000440)="a18dfca30467832f930290a966ddd482672a29426192fe3cf7df3ff49a88af0357e2c8c1929ecb591846fe3dcebc95a9aa4c79736761aa71ebaf804a15edba0ad359060c3852af95b718640f168f29323e7f820db1423aa455eaf538cd601e92b2416ceb0881e7e6ff79b99e1aaeb6a32118515048692433b0f1a2779b"}) r4 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) [ 1159.321361][T24263] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1159.378766][T24266] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1159.383959][T24264] binder: 24261:24264 unknown command 1074553765 [ 1159.440267][T24272] QAT: Invalid ioctl [ 1159.451012][T24264] binder: 24261:24264 ioctl c0306201 20000080 returned -22 [ 1159.463792][T24272] binder: BINDER_SET_CONTEXT_MGR already set [ 1159.488618][T24272] binder: 24267:24272 ioctl 40046207 0 returned -16 [ 1159.516382][T24274] binder: 24261:24274 unknown command 1074553765 [ 1159.524883][T24274] binder: 24261:24274 ioctl c0306201 20000080 returned -22 [ 1159.549354][T24276] QAT: Invalid ioctl 03:43:52 executing program 0: exit(0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x9) wait4(r0, 0x0, 0x8, &(0x7f0000000000)) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:43:52 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000800080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:52 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000011c00000000000", 0x20) 03:43:52 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000034000"/32, 0x20) 03:43:52 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xffffffffffffff91, 0x0, &(0x7f0000002280)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYPTR64=&(0x7f0000000280)=ANY=[@ANYBLOB="87bac3faea2ffd62288b718cb0e51095e309e8a8998afae061fdba71a7", @ANYBLOB="06868aa238e40969c54972729dfe4398072b849cac73c71d01f177aed752037cbbab10398e4027c9fd9881323d1bfb02491b925408af35f6db4030e87e1e4d5b1f19cb554dc3983be353698db28e", @ANYRES32=r0, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYPTR=&(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0], @ANYRES64=r0, @ANYRESDEC=r0, @ANYPTR=&(0x7f0000000140)=ANY=[@ANYRESDEC, @ANYBLOB="358e930e3ddb8b05ff82993e3bf6676b118bf35f4f2fa01f35023ce8b38b4698b0a88168a0bdfb91a7255af6f7c4ea405563ae55f31ec784fb04ce8e2c949c325e959e26c1eabba48d1248770506ecc7d7762f86882c32d99ece8d5090ee05e5e72fe4732dd2e484f80210b9f74965473e2ceb42c29605973c9514178615b4a0bcc4e30c5153de3ca79079e27d4d0549ddd0d77e97fd824d0098443b40d38e986dc3a1727a4c4e4d3c1678eed8c80ebcca64da617d782abc2778ae4f59c414114eeedee04438f8bd142baa3c5c325b91ba90fe3237daaf7f02877d9aab4d68559d09a27212353377a252fa63f1b1152e", @ANYPTR64, @ANYPTR]]], 0x0, 0x0, 0x0}) 03:43:52 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x3, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f00000001c0)=ANY=[], 0x151, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0xfffffffffffffef5, 0x0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000040)={0x2, [0x0, 0x0]}, &(0x7f0000000140)=0xc) 03:43:52 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000810080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:52 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000f00000000000", 0x20) 03:43:52 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000fffff000"/32, 0x20) [ 1160.128073][T24292] binder: 24286:24292 unknown command 536871552 [ 1160.154155][T24292] binder: 24286:24292 ioctl c0306201 20000380 returned -22 03:43:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x8000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYRES64=r1, @ANYPTR64=&(0x7f0000000400)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="d1f2cae68b6f39aecf6bec9b6a336321b323de6d6039e015eef1c0a803803d9228f758a3494a99719b06c979f20d2a272ecbd2f3aa392cf38e53f9b03ce3404f774c1bd834fb2b6904f9fa5c80fc2c9d9fed1c3e8b29251a30896e471c3285e9b55988ed9ee6dddc0dbe9a517d51e3e699549b3f1b68c8102181e1e6b5a3a31c4f2297de27a334be1df0d4d2a54f56010295178dc50ca21852341cf124b01a88d8e9239160e969e52fc8412d484b0aa0f6385825e02b103b66adde66e1", @ANYRES32=r0], @ANYRES64=r0, @ANYRES32=r1, @ANYRES64=r1, @ANYRES16, @ANYBLOB="71214c2b5f44578606167a81aa4014f8429cb18214e83a7297743797b6d3fec9ac40cffd9be0a99e0c7bcd25f5b938265b2a603f64c496f8cdccfe0abddbab69d4769d9103773f91062ebb5e06b5f8e1c9bb784a4d29917808f2a990365e398e37ab45de71198317499e3303eb63cac41782e858c8508f2b3e5536ece64da46c8ccd9d7283f6a8e73fb2e0682e3cdf251034099d35108e1a376f09a19cb2644914520e017f564436012ad9d51cc1ff4b788e", @ANYRESHEX=r1, @ANYPTR64], 0x461, 0x0, 0x0}) write$P9_RXATTRWALK(r1, &(0x7f0000000040)={0xf, 0x1f, 0x1, 0xffffffff}, 0xf) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:43:52 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="e0fd9d33637914a5c9cfa2a4d01aee8102dc2a576f91fec6a831456dc4771e6d2334d4d6ade271801bef0e34632d64f044632fe2e95d34889c8e3384bcf239be30e4b2"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:43:52 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000820080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1160.433593][T24318] binder: 24315:24318 unknown command 865992160 [ 1160.457460][T24318] binder: 24315:24318 ioctl c0306201 20000080 returned -22 [ 1160.483787][T24322] binder: 24315:24322 unknown command 865992160 [ 1160.498050][T24322] binder: 24315:24322 ioctl c0306201 20000080 returned -22 03:43:53 executing program 0: r0 = gettid() exit(0x7e) move_pages(r0, 0xffffffffffffff66, 0x0, 0x0, 0x0, 0x0) 03:43:53 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000001000000000000000000", 0x20) 03:43:53 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000ff0000000000", 0x20) 03:43:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x14, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e630c400000000000000002fdfdfffb0663044071b3794d820064f35cb17f07d3ce4701acf727d4a94dbc8695378e8a922f86f7e61ac2503cc7272e1b3f8f2ae730ada7d3dd3fef7356022d515bb4d1e7e217f91953330b0cf65dea8251892dabf4c4fbf054419a7962275b2b0d2586dbf9b2eaf17d1892967c2bb231468ad4058d6330cd6e5a0b1c7b4b2c21a10c2bcff2fc1910575022eba00f0829086c03f1d784675e684495b0385e047abf4e79c6fefded5106aae68885b4d76fdee95fa79ee07253"], 0xffffff51, 0x0, 0x0}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x5, 0x440) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f00000000c0)=""/79) 03:43:53 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000830080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:53 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x80000, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x3, 0x101000) setsockopt$inet6_dccp_int(r1, 0x21, 0x1b, &(0x7f0000000300)=0x1ff, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000340)=[@exit_looper], 0x22, 0x0, &(0x7f0000000380)="c0f188593f6081d49e4576023c0f7d80a947311672b62dcaf5531cf5ece40ef66358"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x2, 0x141200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4(r2, 0x0, &(0x7f0000000040), 0x80000) [ 1161.051574][T24339] binder: BINDER_SET_CONTEXT_MGR already set [ 1161.059946][T24337] binder: 24334:24337 unknown command 1098560886 [ 1161.070849][T24339] binder: 24332:24339 ioctl 40046207 0 returned -16 [ 1161.092350][T24339] binder: 24332:24339 ioctl c0306201 20000000 returned -14 03:43:53 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000400300000000", 0x20) [ 1161.104696][T24337] binder: 24334:24337 ioctl c0306201 20000080 returned -22 03:43:53 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000002000000000000000000", 0x20) [ 1161.150827][T24339] binder: BINDER_SET_CONTEXT_MGR already set [ 1161.151016][T24345] binder: 24332:24345 ioctl c0306201 20000000 returned -14 [ 1161.172394][T24339] binder: 24332:24339 ioctl 40046207 0 returned -16 03:43:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) [ 1161.217875][T24344] binder: 24334:24344 unknown command 1098560886 [ 1161.238210][T24344] binder: 24334:24344 ioctl c0306201 20000080 returned -22 03:43:53 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000840080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:53 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000034000000000", 0x20) 03:43:53 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000001180)={0x1, 0x0, {0x5, 0x4, 0x3008, 0x0, 0xb, 0x0, 0x3, 0x2}}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000140)=""/4096, &(0x7f0000000040)=0x1000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000001140)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) [ 1161.854518][ C1] net_ratelimit: 16 callbacks suppressed [ 1161.863067][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1161.868879][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1161.874764][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1161.880565][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:43:54 executing program 0: r0 = gettid() exit(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x88) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:43:54 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000003000000000000000000", 0x20) 03:43:54 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) r1 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x28, 0x0, &(0x7f0000000100)=[@clear_death={0x400c630f, 0x3}, @exit_looper, @release={0x40046306, 0x2}, @free_buffer={0x40086303, r1}], 0xf1, 0x0, &(0x7f0000000140)="2e66cb6c35ff0aceb41fe52d1ed70b114bb6da819c33253f38f084e3f04cc86b565c601b1361b42f502f8f4208aff46c353981a32fd1e6f5fe01ab95293a383fea645193cd8ce6a6ff999c9027d0df2a91d33de8fdb715527a9d4f6a104336da79d93b678cc6fe15e570db32721b8363b5d7116cc51184bdd2a235121a9a3c09b9cfba070a669a8d128106afc935bf9af7687b2037f7b606fb9780481e01e0ff547ce50136af82051e9bb13d8b800c3b681e448442afaefd1abf94dc1e8782c2ab572a49e1ec506a489b447d1018f3b6c31e260c57d6a0b3c035344d36e76905b7f6e2dc1202860722cce6dfe2d8e89f4c"}) r2 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0xffffff01, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e63e989db9d370c400000200000020000fdfdff53bebf8040"], 0x0, 0x0, 0x0}) 03:43:54 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000850080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:54 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000000000fffff000000000", 0x20) 03:43:54 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x6080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0xe4, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e20, @loopback}}}, 0x118) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="8482f5828067459a4005630444"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:43:54 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000004000000000000000000", 0x20) [ 1162.019075][T24393] binder: 24384:24393 unknown command -2097839484 [ 1162.041461][T24391] binder: BINDER_SET_CONTEXT_MGR already set [ 1162.042270][T24393] binder: 24384:24393 ioctl c0306201 20000080 returned -22 03:43:54 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000001000000", 0x20) 03:43:54 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000860080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1162.070231][T24391] binder: 24387:24391 ioctl 40046207 0 returned -16 [ 1162.100560][T24391] binder: 24387:24391 ioctl c0306201 20000080 returned -14 03:43:54 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0565044071438a349db1fe7d6f2ad42c110811fc58597b435dd8c24027d35c27fa5b6246c78d40bac048fcd870914b6d646037a7039a3d31a9c9c366205742778c0bcb7bc33d89868087bec51598122899a99b91ed1ed3bc5c2d2a0304c3097525e301f34c15b8508c22704b4b7f25d62b0d8e074ad0c4590b1dad92ad02f9e89119958de2ae01abef92313ea764cc0b92f00fbd"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) [ 1162.140619][T24391] binder: 24387:24391 unknown command -1981193458 [ 1162.173013][T24391] binder: 24387:24391 ioctl c0306201 200000c0 returned -22 03:43:54 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000002000000", 0x20) 03:43:54 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000870080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1162.347989][T24415] binder: 24413:24415 unknown command 1074029829 [ 1162.363221][T24415] binder: 24413:24415 ioctl c0306201 20000080 returned -22 [ 1162.408591][T24423] binder: 24413:24423 unknown command 1074029829 [ 1162.419378][T24423] binder: 24413:24423 ioctl c0306201 20000080 returned -22 [ 1162.734509][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1162.740449][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:43:55 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000006000000000000000000", 0x20) 03:43:55 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000003000000", 0x20) 03:43:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0xf7}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000140)={r2, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:43:55 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000008c0)={r0, 0x0, 0x3, 0x9, 0x1f}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000001540)="c0dca5055e0bcfec7be070") r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f00000000c0)={0x7f, 0x2, [0x80000004d0, 0x0, 0x400000b7], [0xc1]}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r5 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x1, 0x101000) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000840)=@broute={'broute\x00', 0x20, 0x3, 0x52a, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000300], 0x0, &(0x7f00000002c0), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x7, 0x12, 0xffff, 'bpq0\x00', 'veth1_to_bond\x00', 'gretap0\x00', 'gre0\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={[], 0xc}, [0xff, 0xff, 0x0, 0xff, 0xff], 0x9e, 0xee, 0x166, [@vlan={'vlan\x00', 0x8, {{0x1, 0x5, 0x805, 0x2, 0x2}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x454, 0x101}}}], @common=@nflog={'nflog\x00', 0x50, {{0x8, 0x0, 0x40, 0x0, 0x0, "f9324eff483e95f9d8e58202b15945da42fc29968a82a315a9aa7d5991216c1bf118eb0b5739325545ba3aed3629b82e78c69a6c01193807f17d36703c007364"}}}}, {0x7, 0x10, 0xf7, 'nr0\x00', 'bridge0\x00', 'team_slave_1\x00', 'rose0\x00', @empty, [0xff, 0xff, 0x0, 0x0, 0xff], @link_local, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], 0x146, 0x1ce, 0x246, [@mark_m={'mark_m\x00', 0x18, {{0x3, 0x9, 0x3, 0x3}}}, @physdev={'physdev\x00', 0x70, {{'syzkaller0\x00', {0xff}, 'nlmon0\x00', {0xff}, 0x10}}}], [@common=@log={'log\x00', 0x28, {{0x100, "a4b71e22c5ee3c8c5643df95c7333aee93a8813456c06c870358e1eeb363", 0xc}}}, @common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0xffffffffffffffff}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x200000, 0x8000, 0x80000001, 0x1, 0x0, "f0a262056bd591c087708fff80fb1f26f936c1535b522ebfa563c9eac2c4aa2d5879aec86164f5c70d3e5e04dad6272dfd5ba57459d11c9341a9a854525fd5ea"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{0x5, 0x0, 0x88fb, 'syzkaller1\x00', 'netdevsim0\x00', 'lapb0\x00', 'vlan0\x00', @link_local, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], @remote, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0xbe, [], [], @common=@log={'log\x00', 0x28, {{0x6, "688d2c58af9482b41671f962f67e5ad0114cc13500fea011a245ff792a87", 0x2}}}}]}]}, 0x5a2) chroot(&(0x7f0000000000)='./file0\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xa2) recvfrom$netrom(r6, &(0x7f0000000140)=""/140, 0x8c, 0x1, &(0x7f0000000200)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @default, @null]}, 0x48) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c40000000000002a0510000ffff06630440"], 0x0, 0x0, 0x0}) 03:43:55 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000880080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:55 executing program 0: r0 = gettid() setitimer(0x0, &(0x7f0000000000), 0x0) exit(0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1162.917312][T24434] __nla_validate_parse: 16 callbacks suppressed [ 1162.917323][T24434] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1162.949535][T24437] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1162.981533][T24435] binder: BINDER_SET_CONTEXT_MGR already set [ 1163.015049][T24439] kvm [24428]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 03:43:55 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500000000000a000000000000000000", 0x20) 03:43:55 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000006000000", 0x20) 03:43:55 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000890080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1163.046064][T24435] binder: 24432:24435 ioctl 40046207 0 returned -16 03:43:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_mount_image$nfs4(&(0x7f0000000040)='nfs4\x00', &(0x7f0000000100)='./file0\x00', 0x100000000, 0x5, &(0x7f00000012c0)=[{&(0x7f0000000140)="d1bca2b5ab6abdc41c5fb125a6fbdd73b796f012ff80328394062472bd011ad9c8025c4139019e56af4a7467bd494d3d7482f4da2a5cbbb5bfcb686eda6c37d9087527b7c6baa7406d5194218b7f3db72f626df69bb344d3504f0770c825bbb781306d4c948592d90cd8896c91e0affdb85b2e54a842e25e826c2773c66549efb882e13207bd1da0702f44d266f8756df36f0731876e435bbc589dfea2449b6f69fd1dd291c1fce6444f4f9fdda0fb9bf3c192d106d37772c5c8dffcd340bf3a112289a6719b1e710c3347e2acc5c22560ffd262b1bb096340df232a0bf136d9847aac128c3aaed0ca25d952811fea467009c1fac6fdd9eb6b491492cf518aa5df36bb68b488e380c1bef71130c5a2b89811f4923a8f5b0a8c87b50d86c10f3f28e7e61fa14189e177003b5df46031ecbfbe015dedcf2ad98eef34d9b95117d9241b828e76bb838b94ea5c3cacc269efee5aefc40630cbeb7648ca6d5cf30b03b64547ddd1cd255f57b305df8235eacd3c3f021082a7a02c161591582799ea1698456eb05a570c181d1c638feee69c40a6be7e78b24fdc1e817084c1b7672f24f0f88ea2e2c5f9c468f8c0bc4327864b1e6718dd666edf836907faa7c92781e7eb5e092d1584e490657c8bfd23df9795dac5e2bfdabfd206db11eb3dc489d8c4ac68229e49919ee14cdf2cee57faa56341622488e0159c7dd87b1f453f3389cf3b0b3c9973ea9136ad858144a492e5944e36c1f61dd1448ceafb5639ae240a8f2885775c9efe02763e85a0b33dc41c1314331964a08b3863794e836bb0c8376cca9d11eae2eaee81bfbbf3192e5e257fdf6de9dd5320703037f040a04131353bab91109b2fc4f5e74a286d70693a67c399a657465d0351ba657b26c2e19c0eb3cf98803c1120fe50778b7d4fa174d75f998d1f990c150dcbe3858b3dfc26c0a5b5cd7645325a90497015911040f41f5e865def2956279949146f6889e1ffdf087b8bb4ac63f847eb5cf2738c8779253a431ab2b170f8e267fc8cef51626ccf5018bbf7ea7df86043361fe351363af6cc34b399a90d8cec5a39eadece33f36a0f615f34b549ddfbe1cc271afde53acf7c90cedc436ceb5c56fe8c81558464ccf7b6d8dd32923c4250c031de02ff714a6b8ffae72818a862425562b0aba4739da08dc146a69e4e5b028952a1058a9a0fa8768c97d7e8bcd559cad44dc26bb90304b59ad69d6637a031ef2e027066e4e9cd4ca0244b2a8ace826f0035f33278798fab80c6f887e7e5c8baa1d91a231288ce72d0f66d0b3cf98c40ac6436a0b84efb7a1b1b96548fa0a2b540c237006615ae00a5927c75fe4507913a83ee034cf8d5a4ce3ac1f77c86f0fd194febbecccc1b477e9c365304255e01ee4b9b257290be7fb1cb0c097c1100845f1cdd38ffad750f9733a93a5916e1b4bbe09bb8655fe7c5c3557c6e06515453faa622f5ba3e8876793c9b23296165e8c6cee4256722bada9afbf2c8517bc2d3898aa5341cf9a7bc9998b7f265421e62ab6ea38cd736f6d3b19930b9b689af22825007a64ad7df03b14a27bb3bcc347da897e039146a4bb3b3250bc279f283de4c18f255514d523b7691f36fabc48a2d4568b19571741252c4fcc24a2d000d080fb473b84e8b8ec2c4e46684c04a5f173e0d89e35a7f536b83bbd957fabeb94833c69394c6382e6864f96fb6c5c0d892f5e1036936a1c1401141c1406be6902fffabed286a10917bfb1598c54836ec6c23dc3088cd809cb3c8baad5651559ce97e3ded10fdd2294b9f4bd7211648f4860f9d1804f8a4624385dc6604caa387f746cb218fd7c4e545b4ecaca3075066c4bb848821d5c2ba142a269f936b15bd575c53565e4aa166d48c4c6cebaab8784ec2dbec12046d1262b48315af52a8793e45fca5dd83a36aa96d5aa6bda611c399015084fb1159393e38679304b71c985b98a67d1b0890fb1990f792f71ed0f01060a29d572149042b18a9242fb1fc85bb0c486722dfdc030d3aed146aac70566fb8bb59e756ef194f086a82b5e0c2d3b1b8439824f203f6df035ba3952d54898d96f5324c98cbedc83e0260a657f7af07956648e85303ee62645c6b4b0fed559164f3dd65a2f9bb1142f49d7fab11f08e453d0042119cf26caa36c6e950de95484db4dea55ef84d4566369f67c2b8fe3548479e7e19a6a508d501516549d135c17b35ce6d87ac68b47f76e3282af84d7f13a74254eef00a39b06179a4b9c916aba3f778c9ee0821179f9955e8fcab3cd76ba013ebbf7a7ca9965ebd6fc6335d341ee0b50a3c6a682dffeac9ad0ffb64be4023463e3a99d0b27bd38bbd661c055f2a7ccbe53ec26a951582bfe373e0a37a9a06d6ba50c8069ec4d09b8972d05e302aafd43f58d6b0b5a76aa7cbf45b92d8c0c061a3be36f3cb993026be8114407c49997dac8e3eb6aa040e1d1d87b033d5a5894a8399eb07645a32710b6be224f56f47fbb95c6556b35f26a6994b1cf56545d8ac2cf130bc7ff6a8785dca0a282f9bcf205bc264077628838dc1a70927c80fe049a5de8c60b13fd5ec64279b4af4164cb0d420dbe7b6499642bc4bd900346c685d397d192863c9183b2b5e1664715c443010d48aa4d3f35eb8cbf955b394e99007769b1854c06377bb6b30f1324b7583a40b9021bd0185fd6288124d2ba3ff40708cce22af1d1aab8ed0fe75bf1f42c8451b01f4aefbd81b67f6d2247461b281da1687a497f7e1816d6a9beb2f65568618db27632bba22d97fed32eb0ea42dd08d57e3c3801e104e284ddcb8f5932944bb72fdf8742b322d34dddb1a70d822c7b5853c8a5746a296053ced78c1947843e06ccd9e17200d7e622308f09e303ed76adb96607390a074915309a28bad209ebf021b0a80c5ea785e59209ebbe17333f3135eb8430bd1cc18bb153097bdbe412de270cb559fb49f7c445cd6a2e05a5f3503d70f3d4b12b5e151aaa16a65284ace0033382b6a586698e63c4fa5aaae5c8741acc6f74e09ba4808aa8e9e0148c836656ee85dbaf602df7d232f267a931302beb2352a9303d762ab59480fa6d9ceaef83936d72f93fdd4b8c84cf5d3c7841c330b0c2e5e5c52bf20c0e8cf17592b4ac91ea8bc3790376a6916d7c39a056972d755a30cc218df4946218f1f2d85e3dac9c24cf18008d9fb3849407635b76f82f50cceaaf0ffbdeb9bf9e07a9b55eeacf348a71f6dc96179791c90f35b9a4efd3135d43cdbf0a808d4f36620c9e01217c3b146151afb483f86af9c7a4b6d81427e390ed619f51037e06d601b057bf0df825115634819eee9a06c49063d4608c5c6cd772fafd226abe72680cc1228551891692ec29d72b84e2d6e9f07b03dd476bf30f0b82112d1c463f1657e407acfb749a6b43c20d1977bf012d156ade1926d14f2cf9a9d90e36706196e233dc743e7239999eb73294594ae855a7c7c0f37072c12619aa048cf2932cf2dbd5217f794f1beb0df21bd141eb876737db9a760a1e5e172691fae4ba29b5b4823381eaa7503f913a491bf7a685b944c331f6df66fa9ec71690c2c96aafaad0860b8fdfc8b84eabac9830b67b4bdbf6d422d1c30043397df9f01ef37cc14644cf549e2b22a2494618e5eb570953ac0020a4e996d6afa873165256824961b3ea430a49029f43f76ad3a08472aed13fade393ecc30751c0ca95c05de1f2ad7182ddd7e8026759265e5983c2e3449b3d8c4b10ae99230aff1dcbe6311040c57d0fa4c274efcd692cab0b5a39a712ae401ad46f2736ee21502eabf0eecea529121a98e15ef0e74dedf476e4e3d0d27c3ddbb4f7d9cfc47bf32d7e4fe290b973e50f0bfa5c6dd373b653ecbf207e0b6668274d86cae9f3941b7b5fee8dc051dc8461575c681ddc610cd3f2d60228ec9c5ca81c3b64b2168273823a6a8692226c1a4a3f30ced1beea8e0c3a1fd09004f7346a3dc273d1a309690181926d5ca8875a68f849b5966f923dc54172f3859a0e3ec27e7fbb355897fc8a023a73efeb6b6cae02f903174362d4678b16dff645cdf5bb4d9e713131f000e209e3ac632c5e7f375798e2c7923bec32c162567589847670c8877cd7e57ab67a1c088e436083d1af98e911d0055e1f607f6b9ab508abbf34a45baa8917a10a0a0caabb4d25198451db2c1e253f0332b6532d9fcd68abedb27e6d51db4d542560ff74174e9f54e44a9cd77d2b58eb1edf47457b7773905dd57a0fd793d9d672b1d5fdec3cb44a7cb01b4523b65e8dff5f4d6d07f58f5309a9dc35658eff1b9df67dcbe438994e234edbe8bfa334401c12497d0eefdd0ab1c20200243f548000a7a64e9cc33331ea003f5f41fd20bee466f3ad63bf482ffe923482bfcfb4cda954573c67bdbf5fc2c0f5f06a5285883936d32e322a65a4b03feff9c86a11d239fb085de03a95e09e8bb6cd7e39e970abad7a4a9a17bf0855436a395bf30adbb9e632e055c346dfd945d556b2af7a3ec0cf50076f87a70c83f254727ff87fbdc135b2d5fdd426bc85f24eed6e39dd0f1bedba912d6a1e54c767e5b7ef2586ffddd876a10f927ada3ebb8a667fb93473b27ee4c2675be9ccd13f6b4b7090364808dac58865bc3cf09ff2a7eeef950cf6818e1c1fa4feeb0465412f328c01e7bebc9b403c2bad2ea16da28b2b265cccdd1004eb61acb6b4d729e836b5b8742f276d9a622c0dc853c209bdbc6e7e07b30ad3ed56d6cca8299b592796fa3935913c3a4455817db59bcc9145eeaca09c20b191ac3a6955445a1bf7defc6aa270d4f90a639159b054868feeef60bedb8744afde740ae8ede531ca4adc4e3a9f113352723d3fe7a7329f19614d9d1fcfcb853890fb592675ffd1759247b5809c0b4776b8c309d3e74af303ba86eb5799b35b44255c5c82cc33921c77d390b02e9039dde125c1570459c88d9c1f00d87f816163329f3acd269926f15b0743074e5533eaedce776305c7dfbb7c6a188d1b85ee55a87846503d6e57ec25445e5278074607009e38c75cca086f56307d4d67bb152a650fc8dff994590c53ec1fed0663b0e23e0f88f2b03c1ba921c6cfa3e1016f3e06b4efdd937168b19783bd83f247de35bcb9eb431370e2a64b747cbab097c3808b77a16d76fd0895667d7b542bafa7bea81f781e91fe928d5ad3c7ac0de6c0f11b53e0a0399d6f4841f0ef94ee2017554784c297bc21171bda7a2b9027bfc027c975ea93a6ef629daba5d04cdf74893e9cf837b0e4255f943698481fe3118370ad8bf13bfe4cefa3439a80b3c1ab95953f3daa3ccd621430982e910efa1800d58b6b605b7eb3521dd0f6585ccb8a5d2b49657f90906d68f037206df5a6c883f4ba4dc5d6fabcd463adc0ec98759b33bf8b5b4e4434542aedde7431cc9c451651e4cb2f66317b2edfd73be85c62eebae2f2dbb0d872747e97c7de528f964ad7635122c1e04e9a08ecd89d02403417496818cc3d4589c061f8b44f62ad28ff4e6fc3c8c99031fe7547f76ab708cc9856702bcbb3dd1aa5ae6637f1a8a1b0f87cc7c3938114d556d5bc65919980202d0e2e9b7d7fee689d5f79060e5f5d9ca13aeb42ae6b8f3fe5bc7043617464d5b8fbfa6c2ef7585932ac03d39a4280e900362adad7518d053e41577332f2fa90c81a9dd44ee5b19084dcce92a4495c4b065b74194a169821ff3c6f1ce65930102d6a8302cb53079e0dccc35b6e16181840c2ee16a29be59061d30b47ecb0f9f0ee4f4cc7b411bd21fdc08efa9928764bd0ef690be7de1a77d670a2b16f24605cc6230777a61233bffa08baeed80467edc451fd823da8d", 0x1000, 0x1000}, {&(0x7f0000001140)="4da25b531d885d7b82e457556f11", 0xe, 0x4000000080000000}, {&(0x7f0000001180)="1bc974d1291eaa47ef65efdfc90166a4a5dcb7864b81ec3d1c2cb8ff4abbd7163a1f24247debf0561eabac75c863140f10ff78335357a819f5b14e38b4", 0x3d, 0x6}, {&(0x7f00000011c0)="39241a56ad6f7953de17f00228c07f4c02c350c994977721d8c7e5551d812815eee7e2080cede4a42e5f38b97bb9c3b4adf00d151c925f1c4ef1f4effcd2ecf8249378c526b92f8dbe1c2b9491b16d9388680ffe0553408ed6ef9e7009b78793bbae59ca17f5fd64e63701ae0060993800ca40b845efcc8b8f0000a019104298b4cea21e1761e96b624ab7c9c1708c1427e1e786d9bae62e7f180e70207d9b13724dfe23affab6301ce3934ca899ce9fd008c6968ceeff307bf80948c91e34633899fb909e1f84d2ea350c", 0xcb, 0x234}, {&(0x7f00000022c0)="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", 0x1000, 0x2}], 0x2, &(0x7f0000001340)='\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440fd2f3e5a03d50b327d80eaf7da97d7832f52d4d63bdedd53e984fc1f"], 0x0, 0x0, 0x0}) [ 1163.134505][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1163.134544][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1163.140323][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1163.146561][T24439] kvm [24428]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 [ 1163.208739][T24456] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:43:55 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500000000000c000000000000000000", 0x20) 03:43:55 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000000000000f000000", 0x20) 03:43:55 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/28, 0x1c}, {&(0x7f0000000140)=""/116, 0x74}, {&(0x7f00000001c0)=""/35, 0x23}, {&(0x7f0000000200)=""/37, 0x25}, {&(0x7f0000000240)=""/184, 0xb8}, {&(0x7f0000000300)=""/165, 0xa5}, {&(0x7f00000003c0)=""/229, 0xe5}], 0x7) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="98985450c41cd77ec043fd"], 0x0, 0x0, 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000580)=0x8, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e1b0c400000000004c1a5d601fdffff06630440"], 0x0, 0x0, 0x0}) [ 1163.288379][T24460] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:43:55 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000008a0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1163.506250][T24480] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1163.532134][T24481] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1163.568250][T24483] binder: 24476:24483 unknown command 1347721368 [ 1163.582672][T24483] binder: 24476:24483 ioctl c0306201 20000080 returned -22 [ 1163.599422][T24483] binder: 24476:24483 unknown command 1074535182 [ 1163.606407][T24483] binder: 24476:24483 ioctl c0306201 200000c0 returned -22 03:43:56 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x113400, 0x0) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="a400000003000000d15b2c7dff2e93f6dbf74f0a00000000000000074eec90732f9ccb75ab8b04adedc23488ad825d28841ee81cf74498b21bbcd181804af47c4a3b24b07708ca746c9be3ee7b289c39310ceb3c7a92dc22c78c9a0e92ed31c4902c48a6ce3f91c7c7165fb80918b5091a240800375dec0c14ddd4556d98cdab1be4ae554202c270154cb73750d1f1dd6359ee7802442e7b269dc4803338f65e11671123"], 0x12203) exit(0x0) r1 = socket(0x3, 0x800, 0x6) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xd000) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000200)=0x1) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f00000000c0)={0x3, @null, r2}) move_pages(0x0, 0xfffffe91, 0x0, 0x0, 0x0, 0x3) 03:43:56 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000040000000", 0x20) 03:43:56 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:43:56 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500000000000e000000000000000000", 0x20) 03:43:56 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000008b0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1163.934465][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1163.941979][T24493] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1163.971361][T24497] binder: BINDER_SET_CONTEXT_MGR already set 03:43:56 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500000000000f000000000000000000", 0x20) [ 1163.987216][T24499] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1163.997660][T24497] binder: 24490:24497 ioctl 40046207 0 returned -16 03:43:56 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000000000ffffff9e000000", 0x20) 03:43:56 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000008c0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1164.033556][T24502] binder: BINDER_SET_CONTEXT_MGR already set [ 1164.050032][T24502] binder: 24490:24502 ioctl 40046207 0 returned -16 03:43:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="0440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x14100, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000140)={0x1, 0x2, {0x3, 0x3, 0x7, 0x3, 0x3}}) [ 1164.123917][T24509] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:43:56 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000010000000000000000000", 0x20) [ 1164.168659][T24515] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1164.260733][T24520] binder: 24476:24520 unknown command 1347721368 [ 1164.262633][T24519] binder: BINDER_SET_CONTEXT_MGR already set [ 1164.279647][T24520] binder: 24476:24520 ioctl c0306201 20000080 returned -22 [ 1164.281618][T24519] binder: 24476:24519 ioctl 40046207 0 returned -16 03:43:56 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x801, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000180)={{0xfffffffffffffdfb, 0xec95}, 'port0\x00', 0x8, 0x840, 0x1669, 0x7ff, 0x0, 0xfffffffffffffc01, 0x8, 0x0, 0x1, 0x100000000}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000240), &(0x7f0000000280)=0x30) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) write$smack_current(r2, &(0x7f0000000040)='/dev/binder#\x00', 0xd) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:43:56 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000ec0000000", 0x20) [ 1164.306225][T24521] binder: 24518:24521 unknown command 16388 [ 1164.313519][T24521] binder: 24518:24521 ioctl c0306201 20000080 returned -22 [ 1164.361181][T24527] binder: 24518:24527 unknown command 16388 [ 1164.403942][T24527] binder: 24518:24527 ioctl c0306201 20000080 returned -22 03:43:57 executing program 0: r0 = gettid() exit(0x0) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host}, 0x10, 0x80000) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000080)=""/20, &(0x7f00000000c0)=0x14) 03:43:57 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000008d0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:57 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500000000003f000000000000000000", 0x20) 03:43:57 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000000000000011c0000000", 0x20) 03:43:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x47e, 0xc, 0x1, "e07dc40c363df9759d0da468a79df862eeb5a0ca61e27e58779bd85f9413ac5a", 0x777d5f5f}) clock_adjtime(0x6, &(0x7f0000000280)={0x8, 0x200, 0x1000, 0x7, 0x6d, 0x10000, 0x7f, 0x86a8, 0x1, 0x1f, 0x4, 0x7, 0x4, 0x5, 0x5, 0x9, 0xfff, 0x487, 0x2, 0x0, 0x6, 0x3, 0x16, 0x0, 0x6, 0xffffffffffffff54}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e630c400000000000021200fdfdffff06630440564915f4e9554fe5001aaf96ef233aec97086aac2ee7d40f11bb525258d485d843a8681de366b355c4940f1bab7f97d71093f4f04bcd012d57e1a4473dfeed23dd87b1a028c59ad683c4ecc0f9aadf705ae275d980475da73ebb1cf04a305973c6a572b39c6aa2d0201afaaea79d47abf45d4583fe2ce1ce1f136165a0a75a93e96063ee085df3c3ac54f5bddf9093f341"], 0x0, 0x0, 0x0}) 03:43:57 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x1, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm_plock\x00', 0x341040, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dlm_plock\x00', 0x404000, 0x0) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) r6 = open(&(0x7f0000000480)='./file0\x00', 0x40002, 0x140) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer\x00', 0x2, 0x0) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000540)='/dev/dlm_plock\x00', 0x2000, 0x0) r10 = syz_open_dev$media(&(0x7f0000000580)='/dev/media#\x00', 0x13b, 0x408000) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x90, r2, 0x410, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x4c, 0x7, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r0}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x14}, 0x44000) getsockopt(r0, 0x40, 0xfffffffffffff000, &(0x7f0000000140)=""/167, &(0x7f0000000000)=0xa7) r11 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r11, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000200)=0x4) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) [ 1164.928653][T24547] binder: 24542:24547 ioctl c0405602 20000000 returned -22 03:43:57 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000000000ffffffc3000000", 0x20) 03:43:57 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000008e0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1164.972843][T24549] binder: BINDER_SET_CONTEXT_MGR already set [ 1165.000003][T24549] binder: 24540:24549 ioctl 40046207 0 returned -16 03:43:57 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000040000000000000000000", 0x20) [ 1165.021545][T24554] binder: 24542:24554 ioctl c0405602 20000000 returned -22 03:43:57 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000000000fffffff0000000", 0x20) 03:43:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10, 0x800) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x50, "b8bd36b9a78de227d288beabfa9c94e9ec064fd3a382f3498e39cffebf866f0d2c877b8f819435761dab87ebbcf14a98fe771ced28cf87d53394e7ff2543f10b4685498ec65c31420786d0fbc05c073a"}, &(0x7f0000000200)=0x58) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000240)={r2, 0x4}, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:43:57 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000140)="0038157f0d074b6d3a690421109dfcdeca8d109b4c4a5e5c94d1a94bad92c6b64e6287552d7b345d08118d968194de6779a9d994cd900da96cf5cc9ccfca9d3594fca9b04fe02d97159a3d4f52dce40494165b73e27bf52695881bf8ff8d936aa55587ffcf9c1407843474f80106d79747f54fab4e6a19a36e89823e3413f78522a1253b1119f2f6d7ae9da19a40b9788f0db57637aae8d836267008a5b32f1a3fb13924cf37db26c1a20e08374a611d9bb317772d02a865b30a3bb7ccca62f65475eea214ed6038f639f30213e5538b9c7077bf0fda98d72d3131f82cc6814740c611", 0xe3, 0xfffffffffffffffb) r2 = request_key(&(0x7f0000000240)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='cgroup\x00', 0xfffffffffffffffd) keyctl$negate(0xd, r1, 0x4, r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:43:58 executing program 0: gettid() exit(0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x800, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x4, 0xb, 0x2, "67f244ec5a400c86dffa4183c717c87e28e6ff17cfb8a658bc159a692744d0cd", 0x35303553}) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1ff, 0x800) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000040)) ioctl$RTC_WIE_OFF(r1, 0x7010) 03:43:58 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000060000000000000000000", 0x20) 03:43:58 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000008f0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:58 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000000000000000ff000000", 0x20) 03:43:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xee31e65446e30acf, 0xaf) connect$netlink(r1, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfb, 0x20000}, 0xc) 03:43:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x2002) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0xa2c00, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f00000001c0)={0x0, 0xf}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000180)={r2}, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:43:58 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000f0ffff000000", 0x20) 03:43:58 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000900080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:58 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000005865000000000000000000", 0x20) 03:43:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000200000000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:43:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x10000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:43:58 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000081000000000000000000", 0x20) 03:43:58 executing program 0: r0 = gettid() exit(0x0) move_pages(r0, 0xffffffffffffff9d, 0x0, 0x0, 0x0, 0x0) 03:43:58 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000910080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:58 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000009effffff000000", 0x20) 03:43:58 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xe00000000000000, 0x101000) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000040)={0x0, 0x800}) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000000)) r2 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e480c4000000700"/20], 0x0, 0x0, 0x0}) 03:43:58 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000ffffa888000000000000000000", 0x20) 03:43:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) write$P9_RATTACH(r1, &(0x7f0000000380)={0x14, 0x69, 0x2, {0x4, 0x4, 0x6}}, 0x14) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x80}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000180)={r2}, &(0x7f00000001c0)=0x8) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000280)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @ib={0x1b, 0xffffffff, 0xfffffffffffffff9, {"9df98615a8b2d198350952c440bacd4e"}, 0x5, 0x80, 0x6}}}, 0x90) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000340)=@ccm_128={{0x304}, "ae5578b1ca07431d", "f9d2ee219c26dfc312c41c5abcb9d9fe", "3f30ddbf", "5041103c165c15fa"}, 0x28) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) [ 1166.761231][T24635] binder: 24631:24635 unknown command 1074546702 [ 1166.786819][T24640] binder: BINDER_SET_CONTEXT_MGR already set [ 1166.792874][T24640] binder: 24632:24640 ioctl 40046207 0 returned -16 03:43:59 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000920080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1166.804711][T24635] binder: 24631:24635 ioctl c0306201 200000c0 returned -22 03:43:59 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000000000c3ffffff000000", 0x20) 03:43:59 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000ffffff9e000000000000000000", 0x20) 03:43:59 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) [ 1166.894478][ C0] net_ratelimit: 13 callbacks suppressed [ 1166.894487][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1166.906001][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:43:59 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f00000002c0)={0x7fff, 0x5, 0x0, 0x101, 0x9, 0x4, 0x8, 0x8, 0x0}, &(0x7f0000000300)=0x20) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000340)={r1, 0x101, 0x8, 0x6, 0x8, 0x3}, &(0x7f0000000380)=0x14) r2 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x100, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x8001, 0x2, [0x200, 0x3ff]}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100)={r4}, 0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r4, 0x5, 0x1}, 0xc) close(r2) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000240)={0x3}, 0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e63040000020000000000003176a5a92d60c7a0084b7476d08cd29eac82434e2803af81e95900000000e5e3fc043c887fffffffd06419f4ff969f685376c285aa4af71590f14fa1"], 0x0, 0x0, 0x0}) 03:43:59 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000930080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1167.294508][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1167.294514][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1167.294571][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1167.300446][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:43:59 executing program 0: r0 = gettid() exit(0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x2, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x5c, 0x0, &(0x7f0000000100)=[@acquire_done, @acquire, @enter_looper, @request_death={0x400c630e, 0x1}, @dead_binder_done, @dead_binder_done, @enter_looper, @request_death], 0x63, 0x0, &(0x7f0000000180)="1ee775a2103b0e6676be003d9ac1e2178138b593866e1aee5f4732ab6bb83501c981ecd6d46b08eb202b7abddea71d040476032848f1b871b91512285126c6de1b7e87cf44625a408ae3b9e47dd160865f5b213fd2be73eb5aa77f6e01e7cb1ea9979d"}) r2 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000040)={&(0x7f0000000000)=[0x5, 0x7, 0x4, 0xb9c, 0x5, 0x0, 0x3f3bc1c3], 0x7, 0x800, 0x3ff, 0xffffffff, 0x7, 0x3, {0x0, 0x5, 0x7000, 0x0, 0x1, 0x94c1, 0x0, 0x6, 0x2, 0x401, 0x4, 0x9, 0x7fffffff, 0x8, "8088fb48bc5920e4cb7151744d8bd9423864a6160e702b94e7008bd6b4be1ebb"}}) fcntl$addseals(r2, 0x409, 0x0) 03:43:59 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000000000f0ffffff000000", 0x20) 03:43:59 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYRESDEC=r0], 0x253c286c, 0x0, 0x0}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:43:59 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000eed000000000000000000", 0x20) 03:43:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000140)=""/84, &(0x7f00000001c0)=0x54) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x400000, 0x0) 03:43:59 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000940080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1167.653415][T24689] binder: BINDER_SET_CONTEXT_MGR already set 03:43:59 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000950080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:43:59 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000fffffff0000000000000000000", 0x20) 03:43:59 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000000000340", 0x20) [ 1167.706295][T24689] binder: 24680:24689 ioctl 40046207 0 returned -16 [ 1167.707053][T24695] binder: 24680:24695 unknown command -1 03:44:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x80000, 0x0) accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000140)=0x10, 0x80000) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000180), 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 03:44:00 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000960080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1167.838920][T24695] binder: 24680:24695 ioctl c0306201 20000080 returned -22 03:44:00 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000088a8ffff000000000000000000", 0x20) [ 1167.926494][T24695] binder: 24680:24695 unknown command -1 [ 1167.952842][T24712] binder: BINDER_SET_CONTEXT_MGR already set [ 1167.958092][T24695] binder: 24680:24695 ioctl c0306201 20000080 returned -22 [ 1167.975910][T24716] __nla_validate_parse: 18 callbacks suppressed [ 1167.975924][T24716] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1168.005028][T24712] binder: 24711:24712 ioctl 40046207 0 returned -16 [ 1168.094471][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1168.100304][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1168.106215][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1168.112016][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:44:00 executing program 0: r0 = gettid() r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x2000, 0x0) connect$x25(r1, &(0x7f0000000040)={0x9, @null=' \x00'}, 0x12) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000001c0)) lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000140)=@v1={0x1000000, [{0x4, 0x9}]}, 0xc, 0x2) fcntl$setown(r1, 0x8, r0) exit(0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x2000, 0x0) 03:44:00 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000000000fffffffffffff0", 0x20) 03:44:00 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) getsockopt$inet6_int(r0, 0x29, 0xfb, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r1 = dup2(r0, r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x340, 0x0, &(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f0000000140)=ANY=[@ANYPTR64, @ANYRESDEC=r1, @ANYPTR64, @ANYPTR64, @ANYBLOB="d605f483859079fa77587f16e6371df22215838019b12614888c63de714fdd5d3abf53366263375ec24b1b2d68c6f517af620d249ea9256bfb2cf9c68fad334166000fff8edd0a1bce2109b9c4852e19d720deaa2db71b1034642e7d18c72d86fdbcd58a31b20528f7b5cf9abc9f0062ff6b012029e1004f3cd3036dacdaa0ad3f592df106b8edd4d1059f8b0e5e7664f68284cdf5f4b3"], @ANYRESDEC=r1, @ANYRES16=r1, @ANYRESOCT=r0]], 0x0, 0x0, 0x0}) 03:44:00 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000f0ffff000000000000000000", 0x20) 03:44:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="39210010"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xf, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e630c40020000fdfdffff06630440"], 0x0, 0x0, 0x0}) fallocate(r0, 0x0, 0x5, 0x3) 03:44:00 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000970080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1168.597699][T24734] binder: 24731:24734 unknown command 268443961 [ 1168.615763][T24736] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1168.635428][T24738] binder: BINDER_SET_CONTEXT_MGR already set [ 1168.641470][T24738] binder: 24728:24738 ioctl 40046207 0 returned -16 03:44:00 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500009effffff000000000000000000", 0x20) 03:44:00 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500"/32, 0x20) [ 1168.664937][T24734] binder: 24731:24734 ioctl c0306201 20000080 returned -22 [ 1168.685057][T24743] binder: 24728:24743 unknown command 536870912 [ 1168.705613][T24744] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1168.705927][T24741] binder: 24731:24741 unknown command 268443961 [ 1168.726153][T24743] binder: 24728:24743 ioctl c0306201 20000240 returned -22 03:44:01 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500"/32, 0x20) 03:44:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e630c40000000000002002074a400000000000005c02b07adc7540c45b8d447fa4373cdeea8a9ea75eeed3b356ebc641d4e007c1e25d955cf2188851d543dacbd2cc9185bebebf490b3388a36d60a96fd121f091f31dae4eb840a2e3f1b01eba3f3364d49dcb0019e0ae56032533cf868227100a34cf7604d2a"], 0x0, 0x0, 0x0}) 03:44:01 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000f0ffffff000000000000000000", 0x20) [ 1168.757903][T24741] binder: 24731:24741 ioctl c0306201 20000080 returned -22 [ 1168.766145][T24738] binder: BINDER_SET_CONTEXT_MGR already set [ 1168.795495][T24738] binder: 24728:24738 ioctl 40046207 0 returned -16 03:44:01 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000980080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1168.945981][T24761] binder: 24758:24761 unknown command 0 [ 1168.961999][T24763] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1168.987556][T24761] binder: 24758:24761 ioctl c0306201 200000c0 returned -22 [ 1169.004100][T24767] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:44:01 executing program 0: r0 = gettid() r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80000, 0x100) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) exit(0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:44:01 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c40004000004000"/20], 0x0, 0x0, 0x0}) 03:44:01 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000000340000000000000", 0x20) 03:44:01 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500"/32, 0x20) 03:44:01 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000990080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0ee01100edc762c7f7bef4e237630c400000000000020000fdfdffff066304403ce13b0f5d21e1eee416ff025f4773edc4b6da7a1ddd3a61f63be139d05327d839f6e7e733258017a16b47cf5105b90d61a15459ec528285c0cf7fc783462045e19a"], 0x0, 0x0, 0x0}) [ 1169.582131][T24775] binder: 24773:24775 unknown command 0 [ 1169.592747][T24781] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1169.610395][T24784] binder: BINDER_SET_CONTEXT_MGR already set [ 1169.618293][T24775] binder: 24773:24775 ioctl c0306201 200000c0 returned -22 [ 1169.631016][T24788] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1169.644984][T24784] binder: 24779:24784 ioctl 40046207 0 returned -16 [ 1169.670170][T24784] binder: 24779:24784 unknown command 1171470 03:44:01 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500"/32, 0x20) 03:44:01 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x2, 0x2) accept$packet(0xffffffffffffff9c, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000240)={@ipv4={[], [], @loopback}, r1}, 0x14) r2 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:44:01 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000009a0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:01 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000fffffffffffff0000000000000", 0x20) [ 1169.683773][T24784] binder: 24779:24784 ioctl c0306201 200000c0 returned -22 03:44:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) fallocate(r0, 0x48, 0x100000001, 0x3) 03:44:02 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500"/32, 0x20) [ 1169.881923][T24807] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1169.938804][T24815] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:44:02 executing program 0: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) tkill(r0, 0x11) tgkill(r0, r0, 0x7) r1 = gettid() exit(0x0) move_pages(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 03:44:02 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000000000010000000000", 0x20) 03:44:02 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x3) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c40000000001c020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:44:02 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000009b0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:02 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500"/32, 0x20) 03:44:02 executing program 3: r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f0000000140)=0x10) accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14, 0x80000) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000200)={@remote, @multicast1, r1}, 0xc) r2 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r2, 0x3, 0x3, 0x8dc, 0x3}) [ 1170.436571][T24827] binder: 24825:24827 ioctl c028660f 20000000 returned -22 [ 1170.467326][T24828] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:44:02 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000000000020000000000", 0x20) 03:44:02 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x101002, 0x0) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000140)={[{0x45c, 0x1f, 0x4, 0xadbe, 0x2400000, 0x81, 0x7ad, 0x1ff, 0x1a, 0x6, 0x5, 0x6c, 0x4}, {0x6, 0x40000000, 0xf5b9, 0x4, 0x2, 0x4, 0x3, 0x6, 0x6, 0x5, 0x7, 0x20, 0xffffffff}, {0x269, 0x75, 0x8, 0x6, 0x81, 0x2a14, 0x20, 0x6, 0x8, 0x1, 0x3, 0x101, 0xffffffffffffffd0}], 0x7}) r1 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x7ff) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="056304d68ccdbd9453b9ff40bd8f923c415af70e8050290e7f5b3f58eb559c3d4c165fae277d67447e17b4e400006dc8a9fa1a4bc33f9530d3546ba07a9f61cd1cedf145dfe398d45122705d6ea660425db094aeff50727ba577f4b4b2b60cfbe25129b1726e3797623a16ba4422fd9f61ebc2ad44a1ee06fbd1b0be72d2c2954f8fe9baccdcc459dc3ba302590dbcc272e3c1e1eb8e"], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={&(0x7f0000000000)=[0x74de], 0x1, 0x40, 0x400, 0x3f, 0xe8, 0x7ff, {0x1, 0xfffffffffffffff8, 0x4, 0xffffffffffffffff, 0xfff, 0x8000, 0x8001, 0x3, 0x7fffffff, 0x4, 0x5, 0x180, 0x80, 0xfffffffffffffffa, "ac9cd675c2c0093622ad22d89716028b71fced011c62f95c03d757458b610523"}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630cfdfdff88ded532ff000000000000000000"], 0x0, 0x0, 0x0}) 03:44:02 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000009c0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:02 executing program 2: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) accept4$tipc(r0, 0x0, &(0x7f0000000000), 0x80800) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) accept$netrom(r0, &(0x7f0000000140)={{}, [@rose, @remote, @remote, @null, @bcast, @netrom, @null, @default]}, &(0x7f0000000040)=0x48) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f00000001c0)={0x2, 0x7, 0x8, 0x2, 0xfffffffffffffb49}) 03:44:02 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000000ffffff", 0x20) 03:44:02 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000000000030000000000", 0x20) [ 1170.785281][T24858] binder: 24849:24858 ioctl 4040aea4 200001c0 returned -22 03:44:03 executing program 0: r0 = gettid() exit(0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x3cd, 0x100) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000040)=0x16, 0x4) 03:44:03 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000009d0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:03 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000000000000000000e", 0x20) 03:44:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000580)='/dev/dmmidi#\x00', 0x8, 0x0) getsockopt$inet6_dccp_buf(r1, 0x21, 0xf, &(0x7f00000005c0)=""/87, &(0x7f0000000640)=0x57) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x3ff, 0x10000) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x600, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0}) 03:44:03 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c40ebdf7b05596096d9793fd133956d0000"], 0x0, 0x0, 0x0}) 03:44:03 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000000000040000000000", 0x20) 03:44:03 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000000000011", 0x20) 03:44:03 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000000000060000000000", 0x20) 03:44:03 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000009e0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1171.515848][T24876] binder: 24869:24876 unknown command 28053 [ 1171.523910][T24877] binder: BINDER_SET_CONTEXT_MGR already set [ 1171.548573][T24876] binder: 24869:24876 ioctl c0306201 200000c0 returned -22 [ 1171.553050][T24877] binder: 24868:24877 ioctl 40046207 0 returned -16 03:44:03 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="c307a36f3e00a6b72038725891650a6dada6ac60e2631b5e0700000001000000"], 0x0, 0x0, 0x0}) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.redirect\x00', &(0x7f0000000140)='mime_type\x00', 0xa, 0x1) fsetxattr$security_smack_transmute(r0, &(0x7f0000000180)='security.SMACK64TRANSMUTE\x00', &(0x7f00000001c0)='TRUE', 0x4, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000002000020000fdfdffff066f0440"], 0x0, 0x0, 0x0}) [ 1171.593174][T24877] binder: BINDER_SET_CONTEXT_MGR already set [ 1171.613534][T24877] binder: 24868:24877 ioctl 40046207 0 returned -16 03:44:03 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000000ffffff", 0x20) 03:44:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r1 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000140)='selinux\x00', 0xffffffffffffffff) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000180)={r1, 0x69, 0x1e}, &(0x7f00000001c0)={'enc=', 'pkcs1', ' hash=', {'sha3-512-generic\x00'}}, &(0x7f0000000240)="03f0ce76b7626dab82ca69b2d3384ea525290d387655449e7da2b973b382c8c709d2c7b7cdec331c8d784edc69a89bbeff4aa2c61dc0edd8dc0a5272865a8d2da301735292f4303f22f3e015d0416a3d764c2060d22c6395c70952dca48e32524f2afa67af75429d98", &(0x7f00000002c0)=""/30) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) [ 1171.757039][T24898] binder: 24895:24898 unknown command 1872955331 [ 1171.778198][T24898] binder: 24895:24898 ioctl c0306201 20000080 returned -22 [ 1171.815379][T24898] binder: 24895:24898 unknown command 1074032390 [ 1171.849293][T24898] binder: 24895:24898 ioctl c0306201 200000c0 returned -22 [ 1171.868362][T24906] binder: BINDER_SET_CONTEXT_MGR already set [ 1171.879664][T24906] binder: 24904:24906 ioctl 40046207 0 returned -16 [ 1171.880178][T24902] binder: 24895:24902 unknown command 1872955331 [ 1171.893732][T24906] binder: BINDER_SET_CONTEXT_MGR already set [ 1171.908016][T24906] binder: 24904:24906 ioctl 40046207 0 returned -16 [ 1171.911191][T24902] binder: 24895:24902 ioctl c0306201 20000080 returned -22 [ 1172.254476][ C1] net_ratelimit: 14 callbacks suppressed [ 1172.254483][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1172.266095][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1172.271927][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1172.277732][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:44:04 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000000000000000000a0000000000", 0x20) 03:44:04 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000009f0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:04 executing program 0: r0 = gettid() exit(0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x80, 0x8) fcntl$lock(r1, 0x27, &(0x7f0000000040)={0x2, 0x4, 0x35cf3d3e, 0xd0, r0}) 03:44:04 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000000ffffff", 0x20) 03:44:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x42240, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8100040}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r2, @ANYBLOB="000327bd7000fcdbdf250c0000004c00050008000100657468002400020008000400090000000800010016000000080004004400000008000300000000000c0002000800010000000000080001006962000008000100696200001c000900080002000400000008000100ff00000008000200f40cc7002c000600040002000400020004000200040002000400020004000200080001000600000008000100ff0000006c0004001400070008000400ef0700000800040007000000540007000800030005000000080001000c000000080002000001000008000200030000000800020007000000080001001e0000000800010014000000080002000101000008000300000000000800020000000100500001000800030001000000100001006574683a65727370616e300008000300ffffff7f2c0004001400010002004e217f00000100000000000000001400020002004e240000000000000000000000001c000100100001007564703a73797a310000000008000300828cf51a180004001400010062726f6164636173742d6c696e6b0000280001000800030008000000140001006574683a69703665727370616e300000080003005d8400006c000500080001006574680014000200080004001f00000008000100060000002c0002000800020001000080080001001d0000000800030008000000080001001800000008000200060000000800010069620000080001006962000008000100696226281e19af83cdef34c16c1200000800010075647000"], 0x22c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4) 03:44:04 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000700)={0x419e, 0xe0e, 0x6, 0x0, 0x1, 0x8, 0xffffffffffffffff, 0x7, 0x6, 0x1ff, 0x100000001}, 0xb) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000580)={0x7, 0x10001, 0x1, 0x4, 0x100, 0x8}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000003c0)=0x0) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) getsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000005c0), &(0x7f0000000bc0)=0xb) r5 = getpgid(0xffffffffffffffff) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x250010}, 0xc, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x2c4, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x7c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6c2b}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfe}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_MEDIA={0x14, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0xac, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5e7}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x9e2, @ipv4={[], [], @multicast1}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffff8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'bridge0\x00'}}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_LINK={0xf4, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x71e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x46c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc79035c}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffffff9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}]}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x1}, 0x800) fstat(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getgid() sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000240)="ba2750b2c45810c9386f346caedf7112287d90a858892b50f97a25a099de479726304979b8fba248acdd8e946fd71e7453fef259d0faa80bb33a03fec373b112572c4cd5c9ef3eec1ade5136230550d5b07ebdeab0bd307eceaf4e45374ed5505e7ecd1d1ccf8efc09c116e36c97cf2a", 0x70}, {&(0x7f00000002c0)="63a3c48113e9c48e77344f58e0d2e4cd5e27ef1f7b4015a641c859c9137b4ba3bfc87308148bd09e24a2a5d4d4f7a941e5679b524a93740464d98cc3007dcb76c244f9deb8e1d29f93e52ec2a459f8924a05d21152d76a71750cd2bf14784cd790e8e19aa28baf59429e35b78435a0f34caa65bb292722fcf95e78d7807ccfe543fcde14bd67ef49a0338356b8699bbbb9fe98ebf520ee56b813f9af9ea770ce61df33881391a4944f78caf302ba15e6472197c33dd94b78568c79594cf086c722f3f7ccd6de1a05f6", 0xc9}], 0x2, &(0x7f0000000600)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r1, r2, r3}}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r5, r7, r8}}}], 0xb8}, 0x20000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000002280)=ANY=[@ANYRES16], 0x0, 0x0, 0x0}) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$PPPIOCSDEBUG(r9, 0x40047440, &(0x7f0000000180)=0x4000000009) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c4000000000010200ffff86630440"], 0x0, 0x0, 0x0}) [ 1172.460981][T24921] binder: BINDER_SET_CONTEXT_MGR already set [ 1172.500059][T24924] binder: 24918:24924 unknown command 65535 03:44:04 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000a00080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:04 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000000000000000000c0000000000", 0x20) 03:44:04 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500"/32, 0x20) [ 1172.501813][T24921] binder: 24915:24921 ioctl 40046207 0 returned -16 [ 1172.531222][T24924] binder: 24918:24924 ioctl c0306201 20000040 returned -22 03:44:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/attr/fscreate\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x90, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f00000001c0)) set_mempolicy(0x8003, &(0x7f0000000180)=0x20, 0x9) symlinkat(&(0x7f0000000200)='./file0\x00', r1, &(0x7f0000000240)='./file0\x00') [ 1172.602495][T24924] binder: 24918:24924 unknown command 64 [ 1172.621323][T24924] binder: 24918:24924 ioctl c0306201 200000c0 returned -22 03:44:04 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000f0ffffffffff", 0x20) 03:44:04 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000000000000000000e0000000000", 0x20) 03:44:04 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000a10080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1172.705430][T24933] binder: 24918:24933 unknown command 65535 [ 1172.768598][T24933] binder: 24918:24933 ioctl c0306201 20000040 returned -22 [ 1172.783568][T24946] binder: 24945:24946 unknown command 0 [ 1172.800713][T24948] binder: 24918:24948 unknown command 64 [ 1172.803318][T24946] binder: 24945:24946 ioctl c0306201 20000080 returned -22 03:44:05 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000020000000000", 0x20) [ 1172.838080][T24948] binder: 24918:24948 ioctl c0306201 200000c0 returned -22 [ 1172.866074][T24959] binder: 24945:24959 unknown command 0 [ 1172.887433][T24959] binder: 24945:24959 ioctl c0306201 20000080 returned -22 [ 1173.144492][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1173.150294][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:44:05 executing program 0: r0 = gettid() exit(0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x200000, 0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:44:05 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x8001, 0x20000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x480, 0x280, 0x140, 0x0, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000040), {[{{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @mac=@random="d26d53d0b6e5", @dev={0xac, 0x14, 0x14, 0x23}, @multicast1, 0xa, 0x1}}}, {{@arp={@local, @multicast2, 0xff0000ff, 0x0, @empty, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}, @empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}, 0x7fff, 0xe35, 0x4, 0x6205, 0x2, 0x3, 'eql\x00', 'irlan0\x00', {0xff}}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @remote, @multicast1, 0xf, 0xffffffff}}}, {{@uncond, 0xf0, 0x118}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x100000000, 0x4}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:44:05 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000000000000000000f0000000000", 0x20) 03:44:05 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 03:44:05 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000a20080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:05 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000030000000000", 0x20) 03:44:05 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000000000100000000000", 0x20) [ 1173.422213][T24980] __nla_validate_parse: 13 callbacks suppressed [ 1173.422266][T24980] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1173.446291][T24982] binder: BINDER_SET_CONTEXT_MGR already set 03:44:05 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000060000000000", 0x20) 03:44:05 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05002440"], 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000600)={0x30, 0x6, 0x0, {0x2, 0x3, 0x7, 0x0, 'wlan1)/'}}, 0x30) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0xffffffff, 0x2}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000001c0)={r3, 0x1, 0x4000000009, 0x34}, &(0x7f0000000240)=0x10) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000400)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}}) connect$llc(r2, &(0x7f0000000200)={0x1a, 0x317, 0x4ba, 0x8, 0x8340, 0x3, @broadcast}, 0x10) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000540)={@nfc={0x27, 0x0, 0x2}, {&(0x7f0000000440)=""/185, 0xb9}, &(0x7f0000000500)}, 0xa0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e632940000000004000"/20], 0x0, 0x0, 0x0}) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000640)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000003c0)={0x3, 0x1, &(0x7f0000000280)=""/119, &(0x7f0000000180)=""/55, &(0x7f0000000300)=""/161, 0x8dc981bfc10a28d7}) [ 1173.478538][T24982] binder: 24972:24982 ioctl 40046207 0 returned -16 [ 1173.489026][T24987] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:44:05 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000000)) [ 1173.534495][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1173.534530][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1173.540385][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:44:05 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000a30080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1173.643194][T24996] binder: 24992:24996 unknown command 1076101125 03:44:05 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000000000000000003f0000000000", 0x20) [ 1173.716551][T24996] binder: 24992:24996 ioctl c0306201 20000080 returned -22 [ 1173.744794][T25004] binder: BINDER_SET_CONTEXT_MGR already set [ 1173.751038][T25002] binder: 24992:25002 unknown command 1076454158 [ 1173.761547][T25004] binder: 25001:25004 ioctl 40046207 0 returned -16 [ 1173.765306][T25002] binder: 24992:25002 ioctl c0306201 200000c0 returned -22 [ 1173.768752][T25005] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1173.793287][T25007] binder: 25001:25007 ioctl 2288 20000000 returned -22 [ 1173.801852][T25005] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1173.809833][T24996] binder: 24992:24996 unknown command 1076101125 [ 1173.826130][T24996] binder: 24992:24996 ioctl c0306201 20000080 returned -22 [ 1173.843648][T25004] binder: BINDER_SET_CONTEXT_MGR already set [ 1173.852883][T25004] binder: 25001:25004 ioctl 40046207 0 returned -16 [ 1173.853330][T25010] binder: 24992:25010 unknown command 1076454158 [ 1173.887857][T25010] binder: 24992:25010 ioctl c0306201 200000c0 returned -22 03:44:06 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000a40080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:06 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000000000000f0000000000", 0x20) 03:44:06 executing program 0: r0 = socket(0x3, 0x3, 0x5) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000080)=0x1, 0x4) r1 = gettid() exit(0xfffffbfffffffffc) r2 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0xfffffffffffffffc, 0xc002) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000100)={0x80000000000000, 0x1000, 0x101, 0xc, 0x1a}) rseq(&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2, 0x1, 0x0, 0x3}, 0x1}, 0x20, 0x0, 0x0) getpid() move_pages(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 03:44:06 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000000000400000000000", 0x20) 03:44:06 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000140)=0x9) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'syz_tun\x00', @link_local}) 03:44:06 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) [ 1174.278630][T25017] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1174.334479][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1174.346355][T25023] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:44:06 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000f00000000000", 0x20) 03:44:06 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000140)={{0x2, 0x4e20, @remote}, {0x6, @broadcast}, 0x42, {0x2, 0x4e21, @local}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:44:06 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000000000600000000000", 0x20) 03:44:06 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = creat(0xfffffffffffffffe, 0x8) mq_getsetattr(r1, &(0x7f0000000000)={0x8000, 0x7, 0xce, 0x101, 0x6, 0x9, 0x9, 0x6}, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:44:06 executing program 0: r0 = gettid() exit(0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x8000, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000000c0)={{0x7, 0x200, 0x0, 0x6, 0x2, 0x1}, 0x1}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="700030f6434f40d07425d43c48339bd567a60000", @ANYRES16=r3, @ANYBLOB="010725bd7000fedbdf250c0000002c00010008000300010001001000010069623a636169663000000000100001007564703a73797a32000000000c0006000800010001010000240009000800010001000000080002000104000008000200020000000800010006000000"], 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r2, 0xc0045520, &(0x7f0000000040)=0x7fffffff) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:44:06 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000a50080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:06 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000300000000", 0x20) 03:44:06 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000000058650000000000", 0x20) 03:44:06 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xfffffffffffffc01, 0x40) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) ioctl$VIDIOC_S_JPEGCOMP(r1, 0x408c563e, &(0x7f0000000200)={0x81, 0xe, 0x29, "7b4476ea43fdc7f6074ca2142c007e2491c32b81d266cfb376dab53bb7992091fbfed96ff196f32d221a436271a0d5adca80f9c293e371dbfe4f432f", 0x26, "128a60f0738054b2cdceac7d590d2f09fc65dc56f4ccd8f1d816238f23a882a5405b422f21815f4b914f4a3d9c95e1d9a2d6fa35d482401bb14ce263", 0x10}) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000140)) 03:44:07 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) [ 1174.709362][T25055] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:44:07 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000000000810000000000", 0x20) [ 1174.781007][T25065] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:44:07 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000600000000", 0x20) 03:44:07 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000a60080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffff9c, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r1, 0x2, 0x10}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) [ 1174.911414][T25072] binder: 25068:25072 unknown command 5 03:44:07 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000ffffa8880000000000", 0x20) [ 1174.978663][T25072] binder: 25068:25072 ioctl c0306201 20000080 returned -22 [ 1174.993624][T25080] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1175.007353][T25079] binder: 25068:25079 unknown command 5 [ 1175.025764][T25079] binder: 25068:25079 ioctl c0306201 20000080 returned -22 03:44:07 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000c00e00000000", 0x20) [ 1175.050045][T25083] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:44:07 executing program 0: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/ipv6_route\x00') ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x101) exit(0x0) setsockopt$ax25_int(r1, 0x101, 0x5, &(0x7f0000000180)=0xfffffffffffff110, 0x4) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000100), &(0x7f0000000140)=0x4) r2 = socket$inet6(0xa, 0x80003, 0x2) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000000)) fstat(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r3) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:44:07 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'system.', '+md5sum+\x00'}, &(0x7f0000000140)='keyring-*securitykeyring-\x00', 0x1a, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x200001, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f00000001c0)=""/63) 03:44:07 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000a70080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c40f6c7a95f00020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:44:07 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000ffffff9e0000000000", 0x20) 03:44:07 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000f00000000", 0x20) 03:44:07 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000a80080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1175.504629][T25108] binder: BINDER_SET_CONTEXT_MGR already set [ 1175.539216][T25108] binder: 25101:25108 ioctl 40046207 0 returned -16 03:44:07 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500000000000000000eed0000000000", 0x20) 03:44:07 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000c01100000000", 0x20) [ 1175.549848][T25105] binder: BINDER_SET_CONTEXT_MGR already set [ 1175.590264][T25105] binder: 25098:25105 ioctl 40046207 0 returned -16 03:44:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x50000, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000140)=@gcm_256={{0x307}, "e386122467ef89b9", "ecb25537e844e39fe0d6ae09de46db9d02a873eeac0f24df939877f2a23326fd", "2c2540cb", "e0e9dfbb1233c877"}, 0x38) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x40, 0x0) fspick(r2, &(0x7f0000000040)='./file0\x00', 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440d0049b4534848e42e826ecd4bc43f9a1a6fc57d78593c7ac9a76f57e0019d84d101d3f99af09843bc359a1c21fd270189e47bb613be041270795b73890450d2d562b45df296e945a6f1745bdd36003e6b281f62b93fb364d743026d6363e6ad9ce6a8f5fed80b709"], 0x0, 0x0, 0x0}) 03:44:07 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000fffffff00000000000", 0x20) 03:44:07 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x200244, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_delrule={0x34, 0x21, 0x18, 0x70bd26, 0x25dfdbff, {0xa, 0x90, 0x0, 0x8000000000, 0x8000, 0x0, 0x0, 0x5}, [@FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x890) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:44:08 executing program 0: r0 = gettid() exit(0x0) move_pages(r0, 0xfffffffffffffe34, 0x0, 0x0, 0x0, 0x88) 03:44:08 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000a90080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:08 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000004000000000", 0x20) 03:44:08 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000ffffffff0000000000", 0x20) 03:44:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1, 0x10000) ioctl$CAPI_CLR_FLAGS(r1, 0x80044325, &(0x7f0000000040)=0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = request_key(&(0x7f0000000140)='syzkaller\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='\x00', 0xfffffffffffffffa) r3 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x8e\x00', 0xffffffffffffffff) keyctl$search(0xa, r2, &(0x7f0000000200)='.dead\x00', &(0x7f0000000240)={'syz', 0x3}, r3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:44:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:44:08 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000000000000ec000000000", 0x20) 03:44:08 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000f0ffffffffffff0000000000", 0x20) [ 1176.453048][T25152] binder: BINDER_SET_CONTEXT_MGR already set [ 1176.484621][T25152] binder: 25148:25152 ioctl 40046207 0 returned -16 03:44:08 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000aa0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000280)="a0694176cf3193b0ae858066ae37e9e996bd56ac2af839e58b360bef92e611914fb5175ecbd0c1d734f3a292681e7d397183091937321a8099cc365b970bfb89bc87875054e8dbe707f2d67e767bc85f5879a73ae63c0a2658b966305af08606b41f4ef46d3e38dd79afa7109af11f8a9178813beadbc1e9f24e939c8a5e29fca5df92492eb580b528087f7b1664f34397ffb9022da54a1b8384bdebb9fcce56bd2ebbcf8939c3726a9fa9019d1658811b058cd1aafdd9f24a71506c96fd84253790841882fab0b1383cd4abb5aebeb1c61da236a2dae9c57228daeccaef2981551945e5206c27ce4a74ffcbe956673988") getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0xa9, "d158e5951328cd61a87bd8f5c4f6fe77fd6c6a397753ca5364570ffb1ec42cfcba6685c59fbe7a405c38f53efeece3562214c738c5b84a59a19fa1ba5ea2b41c868a630971a4ee049f2d5a9126a5c045a7d6022cf94d2f2ecc57b5c05bb6e4beac5977a2223510d920ac06ad988a3333b0f48a1facb6d2e704c6baae9c05f559c562099ab50827770b53063913c44cc9b68454dd57dd60d57a91efe94180f9e4387cd3e0b0c89b3e30"}, &(0x7f0000000040)=0xb1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000200)={r2, 0xef5e}, 0x8) 03:44:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x5, 0x0, 0x5, 0x407}, {0x6df2, 0x7, 0xfff, 0x9}, {0xe7c, 0x2, 0xfff, 0xa81}]}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000fdfd00000000000000000000000000000000ac2068dcbf4e4ba4fcd08588c1ea3215c65e4402a15c9b3d23f23c5cda877480348c37d9d79b8943071395cf1827945e14bdba6f0400611e4ca445ddfbfab79d0a4924ca43aab86e93a0df18425085c4c39c7dbf2b61c2ce9ca93f4a453936b5e04d082bb4929ee6148ca37d7580b8bbabb35257b0634595e0fc2ffea64c5d9ea6170db5b3bb5413d4fbaba3108fefb9233d6d3606241977158853249db141"], 0x0, 0x0, 0x0}) 03:44:08 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000000011c000000000", 0x20) [ 1176.763074][T25183] binder: BINDER_SET_CONTEXT_MGR already set [ 1176.784842][T25183] binder: 25181:25183 ioctl 40046207 0 returned -16 [ 1176.807829][T25183] binder: 25181:25183 unknown command -33751040 [ 1176.814292][T25183] binder: 25181:25183 ioctl c0306201 200000c0 returned -22 03:44:09 executing program 0: r0 = gettid() exit(0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xcb) prctl$PR_GET_THP_DISABLE(0x2a) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f0000000140)={0x6, 0x80000000}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x101100, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) getsockopt$ax25_int(r1, 0x101, 0xb, &(0x7f0000000040), &(0x7f0000000180)=0x4) bind$packet(r1, &(0x7f0000000100)={0x11, 0xb, r2, 0x1, 0x4}, 0x14) 03:44:09 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000000200"/32, 0x20) 03:44:09 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000ab0080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:09 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000000000f000000000", 0x20) 03:44:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001100)="814f0dd70da8ee3a42af1d6064ac3466a0d203ae035cc66a34158fe5e8550ee39e5fe2a01fb12b31c9d186a7f8eb4e0115bc623ac19fd857910d65f149b58dce5a", 0x41}], 0x2, 0x8) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001180)='/dev/vcs\x00', 0x10000, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f00000011c0)=""/140, &(0x7f0000001280)=0x8c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e630c4000b8009d3f020000fdfdffff066304408cae287ef84d1d9bc626e8ee921bc1d5baa8680812"], 0x0, 0x0, 0x0}) 03:44:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) [ 1177.294485][ C0] net_ratelimit: 13 callbacks suppressed [ 1177.294494][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1177.306041][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:44:09 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000000000ff00000000", 0x20) 03:44:09 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000000300"/32, 0x20) 03:44:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x12, 0x0, &(0x7f0000000500)=ANY=[], 0xffffff05, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="f6fe26be2587d50fadf298a30d383e3afd2bc3ee11e52521ab88af62daf8bf46bc1b38c283ba90dcceebf9716b66eb15f85169c9af0798dfab8af317019dded2063dd1a5c33457066fb8b2bb380116476c1ab4efc46b45955c63f7147672311d9ca73820e99c8cf0ba7942be9028c8b5d1afb07fc7116fe9c2025e623953c1edda8395f879399e004d34a715f363ce9a90b2d83a019a37e4c9d34fb78f9aa62bc253d5f0ddc22478614e"], 0x0, 0x0, 0x0}) r1 = accept(0xffffffffffffff9c, &(0x7f0000000000)=@ethernet={0x0, @remote}, &(0x7f0000000140)=0x80) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xa0000020}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)={0x228, r2, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x40, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xe8, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff00000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf47}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x21}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NODE={0x48, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf36d}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x69c}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10001}]}, @TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x38, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x10}, 0x4010) io_setup(0x1dca, &(0x7f0000000740)=0x0) io_getevents(r3, 0x2, 0x2, &(0x7f0000000100)=[{}, {}], 0x0) [ 1177.373651][T25199] binder: BINDER_SET_CONTEXT_MGR already set [ 1177.402663][T25199] binder: 25197:25199 ioctl 40046207 0 returned -16 03:44:09 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000004080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x7fffffff, 0x2402) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000300)={'veth1_to_bridge\x00', {0x2, 0x4e20, @remote}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000240)={{0xdc0, 0x7}, 'port0\x00', 0x40, 0x20000, 0x4a, 0x7fffffff, 0x4e9, 0x1f, 0x0, 0x0, 0x3, 0xbf5b}) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000180)) sendfile(r0, r0, &(0x7f0000000100)=0x23, 0x9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="aa9a00fb"], 0x0, 0x0, 0x0}) bind$bt_rfcomm(r1, &(0x7f0000000340)={0x1f, {0x1, 0x4, 0xffffffff, 0x8001, 0x9e6c, 0x3}, 0x5}, 0xa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e630cfdfdffff0663044096b87ef9f9f7662f258316beaa9bc423b5b3f2c8ff35b537ca9fc0cb1bc41b93b6539f8b7b03000000444a22a3eb52439404c8436f9c63f2886fd11e7984915718951a161060f56169c20f17576fb89b4ff128a23df303"], 0x0, 0x0, 0x0}) [ 1177.542281][T25222] binder: 25214:25222 unknown command 0 [ 1177.568173][T25222] binder: 25214:25222 ioctl c0306201 20000540 returned -22 03:44:09 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000014080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1177.608368][T25226] binder: 25214:25226 unknown command -1104740618 [ 1177.641372][T25226] binder: 25214:25226 ioctl c0306201 200000c0 returned -22 [ 1177.687045][T25229] binder: 25228:25229 unknown command -83846486 [ 1177.694473][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1177.694555][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1177.700307][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1177.706024][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1177.712748][T25229] binder: 25228:25229 ioctl c0306201 20000080 returned -22 [ 1177.735019][T25229] binder: 25228:25229 unknown command -49519858 [ 1177.748236][T25229] binder: 25228:25229 ioctl c0306201 200000c0 returned -22 [ 1177.768664][T25234] binder: 25228:25234 unknown command -83846486 [ 1177.777146][T25234] binder: 25228:25234 ioctl c0306201 20000080 returned -22 03:44:10 executing program 0: r0 = gettid() exit(0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sysinfo(&(0x7f0000000000)=""/236) 03:44:10 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000000400"/32, 0x20) 03:44:10 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000004003000000", 0x20) 03:44:10 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000024080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffff9c, 0xc0306201, &(0x7f0000000080)={0x3a, 0x0, &(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYRES64=r0, @ANYRES16=r0, @ANYRES16=r0, @ANYRES64=r0, @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR64, @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="5c35dac3589d7f391f45658bad6d5ab2afaf8ee3ba9ca292f60e7007b267944d27f591d943adcbcaac3c6f5301eba768c081d7ce12ab659cbf2ae1e3ce8907c3e94bde2aef0d1ac3a9288689a2c40eb03a4c98e9d608d93b9172d184185e723882505d6ce2e4c0aa9230ce50a7c5751562276baf557738e826f2b86f3ed65cf8826ef40a2477d38972d6b3589256d9dc1fde04b140aeff88d8a1243ada88ffcc222471f6eb570650beb7b434faa2632e8e21903ed3d2dcc372ad5115b8bc5bc856e81753cec76f16fe856371dd3971a611dc668884231bac43a87ab0fec4384a86eb1b10cb91d6f579e994dbf2", @ANYRESHEX=r0], @ANYRES32=r0, @ANYRESDEC, @ANYRES16=r0], @ANYRES32, @ANYRES64=0x0], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:44:10 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000000600"/32, 0x20) [ 1178.320915][T25255] binder: 25214:25255 unknown command 0 [ 1178.343653][T25255] binder: 25214:25255 ioctl c0306201 20000540 returned -22 03:44:10 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000340000000", 0x20) 03:44:10 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000034080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1178.366594][T25226] binder: 25214:25226 unknown command -1104740618 [ 1178.380103][T25226] binder: 25214:25226 ioctl c0306201 200000c0 returned -22 [ 1178.441523][T25264] __nla_validate_parse: 16 callbacks suppressed [ 1178.441535][T25264] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:44:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x208100, 0x0) 03:44:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:44:10 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000000a00"/32, 0x20) 03:44:10 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000fffff0000000", 0x20) [ 1178.494468][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1178.500297][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1178.506208][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1178.511966][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1178.532348][T25269] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1178.585808][T25272] binder: 25270:25272 unknown command 0 [ 1178.612759][T25272] binder: 25270:25272 ioctl c0306201 20000080 returned -22 [ 1178.662985][T25279] binder: 25270:25279 unknown command 0 [ 1178.683204][T25279] binder: 25270:25279 ioctl c0306201 20000080 returned -22 [ 1178.695038][T25282] binder: BINDER_SET_CONTEXT_MGR already set [ 1178.715534][T25282] binder: 25277:25282 ioctl 40046207 0 returned -16 03:44:11 executing program 0: r0 = gettid() exit(0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000040)=0x3, 0x4) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd4(r1, &(0x7f0000000080)={0x8}, 0x8, 0x800) 03:44:11 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000044080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:11 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000000c00"/32, 0x20) 03:44:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) io_setup(0x6, &(0x7f0000000000)=0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x20) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x8) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm_plock\x00', 0x2, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000680)='/dev/full\x00', 0x200, 0x0) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000740)='/dev/mixer\x00', 0x0, 0x0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ion\x00', 0x0, 0x0) r8 = eventfd(0x200) io_submit(r1, 0x8, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x5fad, r0, &(0x7f0000000140)="2c4079e57416d00ba72c31c75ecec7e8310bbd45d4be383dcf7622bcfc039e3c84a788b68b089525729a2137af03a714b497d2c6f415c429cc8c38a0cfdcd20a8799b0a4821e39ea6ea829278045d90fce6bf5032926440537d2acfce3d743db1e1502c1d95df96c5b325ffd9df7db605a180c34beea768c90fe2d44881aecaaecd9d528c4c9c2fc5fe5abd821622f55510761336dc6fdec710dfcc7f8465c0a47220aba1ba4a34b9af708c801b4115119bfee92498c8e7a25b559", 0xbb, 0x80000001, 0x0, 0x2, r2}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x6, r0, &(0x7f0000000240)="3b25d0c7969b81f7f3917c5a5699913a30e1e7f0135eb03e58dadebf67b669478f3d4f701e00a8a86f6c9086", 0x2c, 0x67, 0x0, 0x1, r3}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0xffff, r0, &(0x7f0000000300)="9983d85bca0d1463f96348d5222905f14ba6390bc3", 0x15, 0x7, 0x0, 0x0, r4}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7, 0x9, r0, &(0x7f00000003c0)="f94dd8d2b32e08ef82b1d6ecf0f20684479c8b649e6ba9a6a8ca48d4a6d017f1cde9914c1c5dae0ee05c99266dda973c1ca826cf893fd75f87505a2d999b187c44c0d1714322f66fe00106eb6f1ae67c1ed5634c727e7f6b79fbb909afb49929bae4296cd28b5b9d4a2750a85108e4bb20c1309d92c801f9ce81f21c9bc60b91a181e9f0d0881dcca1a25f34f3aa3bcf4df90c5f3064378d36bd21155e4b8d2a988d0eaf03902564aa82c734d86533c95ab3dc9ab328a5154adf52bef6bfd7445f5a661bd02c01d05a4ad2b5a7e7db", 0xcf, 0x7, 0x0, 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x5, r0, &(0x7f0000000500)="b6af23270fabec889e8c24dcf4746124aa0fd157133d081d38d4dd30a97c1a77786dcedcb7dec60114dc828d3e21970bf0fd7f123fadd98a2c76ae0dfd2894fac3de43c7df7a4c7bba85aec494dea61146293b47802c76f9776230edc12a440973ad8088aed0a006a969847147e9f7b64959c91bdce5de2e4a39fb7edfafc045ded9b2ca7699b1e4100eb136eea213e25f1b5acb8eaf6a95fbf4be914885fa5f8f28e6a5a6a3544cf01712f2d4", 0xad}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0xff, r0, &(0x7f0000000600)="192bd79b3d7db6dabe687dc9c8d5cf3fc5fca3416d1fd596c893a83c0616b40819986f937046e68ddbc0760dda78af722dd490ab063b0454c89e85bc80b690d98182a43b348b7517da90563a2a", 0x4d, 0x5, 0x0, 0x2, r5}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0xf, 0x7f, r0, &(0x7f0000000700)="bb216121f74398006cccd1c5f3b5c649b69d0d39502497ea595964aa1e962e2638f167970aab1f9c007fe8fc4a7d7863d1491a9d26be38dc7af2c8d6d035cf80", 0x40, 0x537, 0x0, 0x0, r6}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x6, 0x5, r7, &(0x7f0000000800)="d2c34632d2e52cdb2ccf540bc0777a10343d53872f82e7792a4f096e8abfd91f314298aa26991b00020e10ced1ad91ef00f69a360a6e19a417bbb0430311a7558a03893f1c8e1288303bf56ab71647fc6b3a33c1103dc93b11e9b3", 0x5b, 0x7e, 0x0, 0x3, r8}]) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:44:11 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000000010000", 0x20) 03:44:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) [ 1179.172966][T25294] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:44:11 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000000e00"/32, 0x20) 03:44:11 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000000020000", 0x20) 03:44:11 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000054080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:11 executing program 2: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x3, 0x240) r1 = socket$nl_crypto(0x10, 0x3, 0x15) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = socket$caif_seqpacket(0x25, 0x5, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000017c0)={0x16c, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="076304400300000011634840010000000000000000000000000000000000000001000000000000000000000058000000000000001800000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="852a747000000000", @ANYPTR=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000002000000000000000a00000000000000852a646600000000", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a62770a0000000200"/36], @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="40100000000000000563044003000000046304400300000012634840000000000000000000000000000000000000000011000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="8561646600000000070000000000000002000000000000000b000000000000008561646600000000040000000000000002000000000000003a000000000000008561646600000000000000000000000002000000000000001600000000000000"], @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="4010000000000000046304400100000008631040000000000000000000000000000000000f630c4000000000000000000000000012634840010000000000000000000000000000000000000011000000000000000000000058000000000000001800000000000000", @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'/148], @ANYBLOB="940000000000000002000000000000002f00000000000000852a646600000000", @ANYRES32=r2, @ANYBLOB="000000000000000000000000852a6273001000000300"/36], @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000000634040030000000000000000000000000000000000000011000000000000000000000058000000000000001800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a68730300000000000000000000000000000000000000852a747000000000", @ANYPTR=&(0x7f0000000480)=ANY=[@ANYBLOB='\x00'/231], @ANYBLOB="e70000000000000002000000000000003600000000000000852a646600000000", @ANYRES32=r3, @ANYBLOB='\x00'/12], @ANYPTR=&(0x7f0000000600)=ANY=[@ANYBLOB="000000000000000018000000000000004000000000000000"]], 0x1000, 0x0, &(0x7f00000007c0)="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"}) r4 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x55, 0x0, &(0x7f0000001880)=ANY=[@ANYRESHEX=r3, @ANYPTR64=&(0x7f0000001800)=ANY=[@ANYRESDEC=r4, @ANYRES16=r2, @ANYRESOCT, @ANYRESOCT=r3, @ANYPTR64, @ANYRESDEC=r4], @ANYRESOCT, @ANYRES16=r2, @ANYRESHEX=r4, @ANYPTR, @ANYPTR64], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400004000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000001900)={0x9, 0x6, {0x55, 0x1f, 0x9, {0xffffffffffffff0b, 0x4}, {0x4a6, 0x8}, @rumble={0x2f, 0x8}}, {0x57, 0x2, 0x1000, {0xc4c7, 0x937}, {0x28, 0x3}, @cond=[{0xff, 0x8, 0x12, 0x6bb, 0x3, 0x1}, {0x1, 0xe8, 0xfff, 0x6, 0x4, 0x2}]}}) [ 1179.216788][T25303] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:44:11 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000000f00"/32, 0x20) [ 1179.370898][T25316] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:44:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="284dfe26"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) flistxattr(r0, &(0x7f00000032c0)=""/4096, 0xfffffffffffffda6) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffff9c, 0xae41, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x400000) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000001200)) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000001240)=0x0) syz_open_procfs(r3, &(0x7f00000013c0)='net/ptype\x00') r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001180)='/dev/sequencer2\x00', 0xc440, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r4, 0x541b, &(0x7f0000000000)) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000001280)=ANY=[@ANYBLOB="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"]) [ 1179.411403][T25320] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1179.435017][T25317] binder: 25311:25317 unknown command 808482864 [ 1179.487718][T25317] binder: 25311:25317 ioctl c0306201 20000080 returned -22 [ 1179.566661][T25330] binder: 25328:25330 unknown command 654200104 [ 1179.574210][T25330] binder: 25328:25330 ioctl c0306201 20000080 returned -22 [ 1179.575045][T25325] binder: 25311:25325 unknown command 808482864 [ 1179.593956][T25333] binder: 25328:25333 unknown command 654200104 [ 1179.600643][T25333] binder: 25328:25333 ioctl c0306201 20000080 returned -22 [ 1179.623394][T25325] binder: 25311:25325 ioctl c0306201 20000080 returned -22 03:44:12 executing program 0: r0 = gettid() exit(0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005380)=[{{&(0x7f0000000000)=@in, 0x80, &(0x7f0000001700)=[{&(0x7f0000000080)=""/233, 0xe9}, {&(0x7f0000000180)=""/106, 0x6a}, {&(0x7f0000000200)=""/255, 0xff}, {&(0x7f0000000300)=""/197, 0xc5}, {&(0x7f0000000400)=""/72, 0x48}, {&(0x7f0000000480)=""/241, 0xf1}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/145, 0x91}, {&(0x7f0000001640)=""/147, 0x93}], 0x9, &(0x7f00000017c0)=""/75, 0x4b}, 0x3ff}, {{&(0x7f0000001840)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000001d40)=[{&(0x7f00000018c0)=""/165, 0xa5}, {&(0x7f0000001980)=""/245, 0xf5}, {&(0x7f0000001a80)=""/211, 0xd3}, {&(0x7f0000001b80)=""/167, 0xa7}, {&(0x7f0000001c40)=""/254, 0xfe}], 0x5, &(0x7f0000001dc0)=""/3, 0x3}}, {{&(0x7f0000001e00)=@tipc=@name, 0x80, &(0x7f0000002080)=[{&(0x7f0000001e80)=""/216, 0xd8}, {&(0x7f0000001f80)=""/225, 0xe1}], 0x2, &(0x7f00000020c0)=""/4096, 0x1000}, 0x2}, {{0x0, 0x0, &(0x7f00000030c0), 0x0, &(0x7f0000003100)=""/18, 0x12}, 0xfffffffffffffffe}, {{&(0x7f0000003140)=@nfc, 0x80, &(0x7f0000003640)=[{&(0x7f00000031c0)=""/205, 0xcd}, {&(0x7f00000032c0)=""/211, 0xd3}, {&(0x7f00000033c0)=""/207, 0xcf}, {&(0x7f00000034c0)=""/202, 0xca}, {&(0x7f00000035c0)=""/124, 0x7c}], 0x5, &(0x7f00000036c0)=""/4096, 0x1000}, 0x2}, {{&(0x7f00000046c0)=@xdp, 0x80, &(0x7f0000004880)=[{&(0x7f0000004740)=""/212, 0xd4}, {&(0x7f0000004840)=""/13, 0xd}], 0x2, &(0x7f00000048c0)=""/251, 0xfb}, 0x3}, {{&(0x7f00000049c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004a40)=""/20, 0x14}], 0x1, &(0x7f0000004ac0)=""/149, 0x95}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000004d00)=[{&(0x7f0000004b80)=""/239, 0xef}, {&(0x7f0000004c80)=""/93, 0x5d}], 0x2}, 0xe92}, {{&(0x7f0000004d40)=@ax25={{0x3, @netrom}, [@netrom, @bcast, @null, @rose, @null, @null, @rose, @netrom]}, 0x80, &(0x7f0000005240)=[{&(0x7f0000004dc0)=""/16, 0x10}, {&(0x7f0000004e00)=""/121, 0x79}, {&(0x7f0000004e80)=""/196, 0xc4}, {&(0x7f0000004f80)=""/13, 0xd}, {&(0x7f0000004fc0)=""/73, 0x49}, {&(0x7f0000005040)=""/157, 0x9d}, {&(0x7f0000005100)}, {&(0x7f0000005140)=""/110, 0x6e}, {&(0x7f00000051c0)=""/54, 0x36}, {&(0x7f0000005200)=""/22, 0x16}], 0xa, &(0x7f0000005300)=""/91, 0x5b}, 0x8000}], 0x9, 0x121, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f00000055c0)={0x0, @rand_addr, @dev}, &(0x7f0000005600)=0xc) r3 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000005640)={{{@in=@broadcast, @in6=@ipv4={[], [], @rand_addr=0x800}, 0x4e24, 0x0, 0x4e20, 0x0, 0x2, 0x20, 0x80, 0x0, r2, r3}, {0x466b, 0x3b0, 0x5, 0x8, 0xff, 0xfffffffffffffc62, 0x7, 0x5}, {0xfffffffffffffffc, 0x7, 0xffffffffffffffae, 0x3fc5}, 0xfffffffffffffff7, 0x6e6bb3, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x4d4, 0xff}, 0xa, @in6=@rand_addr="2742e1eee34695f49cfa5c7709d9ab5c", 0x3500, 0x0, 0x2, 0xffff, 0xd07, 0x5, 0xffff}}, 0xe8) 03:44:12 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000064080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:12 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000000030000", 0x20) 03:44:12 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000001000"/32, 0x20) 03:44:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x200000000000000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="07630440"], 0x0, 0x0, 0x0}) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xb6, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:44:12 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x21) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYPTR64, @ANYRES64, @ANYRES32=0x0, @ANYRESDEC=0x0], @ANYRESDEC=r0, @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYPTR, @ANYRESOCT=r0, @ANYPTR64, @ANYPTR, @ANYRESHEX=r1], @ANYRESDEC=r0, @ANYRES32=0x0]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0xffffffffffffff80, 0x0, 0x0}) 03:44:12 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000000060000", 0x20) [ 1180.081451][T25347] binder: BINDER_SET_CONTEXT_MGR already set [ 1180.087827][T25346] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1180.111264][T25355] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1180.116266][T25347] binder: 25341:25347 ioctl 40046207 0 returned -16 03:44:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0x0, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0563044040d3dd8900462c1a42af8f2765b37c24d534ab20001d64e955767c204aeee66ce805a7c9fb358d4834b7af7469da93584c3ce52e3e7aeeb83d469dd7993c30141157e96a1bb6d0"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff0663044002d6d2da51942a31b3e28bbe1ef80061a076f65d70ab855d29f3e5aa45d7a0fee3b9a95e58081cb8258997ae443e4a996e8c8d3cece95109408236bd99e53d3b965f9d5d00374dfb8a86224dbec020d877303798344f516b8b9f63ca98d997c55cd11d3f7b709716da3e0d12e8b72025baa263960ff3a508"], 0x0, 0x0, 0x0}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x800) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000040)) [ 1180.136760][T25347] binder: 25341:25347 unknown command 536871680 [ 1180.155677][T25347] binder: 25341:25347 ioctl c0306201 20000380 returned -22 [ 1180.165656][T25347] binder: 25341:25347 ioctl c0306201 200000c0 returned -14 [ 1180.181048][T25347] binder: 25341:25347 unknown command 536871680 03:44:12 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000006000"/32, 0x20) [ 1180.188908][T25357] binder: 25341:25357 ioctl c0306201 200000c0 returned -14 [ 1180.216553][T25347] binder: 25341:25347 ioctl c0306201 20000380 returned -22 03:44:12 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000074080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:12 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x800, 0x0) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f00000001c0)) syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x5d, 0x40000) 03:44:12 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000000000000000000f0000", 0x20) [ 1180.406452][T25376] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1180.471758][T25382] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:44:13 executing program 0: r0 = gettid() exit(0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000000)=0x7, 0x19, 0x4) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:44:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vfio/vfio\x00', 0x4000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2001}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, r2, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x24044095}, 0x40800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:44:13 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000f000"/32, 0x20) 03:44:13 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x100, 0x104) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, "daf2c82ef0a4a7fc37bd440c2ea6593f9e24d66405bb48bcfa18288ee8607032d55e3c40da1ab81fef5b37f7d17e608c345d496f6975ffe9d2166bb2e38910798fc7454ae92070dbaa7e5e92da221017"}, 0xd8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip6_flowlabel\x00') sendto$unix(r3, &(0x7f0000000240)="58395f92aa1bb0b9dbd6006086b87ec0283033c4aa8f67b235e31d40f59f9d5d410c69ff1d08d9a30ed5b69dd98a8d590919672aad6a47fdfa5aa857136ef558347fa8463d7e908557b7601176dfaace5dd06001f0cd9c325fa698ab0c7f4972fdd764ef4ff1c31e08a19019982a2adb5a84e0e38012b260b5997e92d90257c4ed08ea6d2aa740fb9537a56e0f372d2708f4e1531dbffe6239506481ceb598129309419a4e2a77cd7b0bbd97fb5071a41c34c03d7eefb5c3a1cfe3218501c327354822490c6d5a14343a96c24b322a79367850f93d52d79be80f1fe9220cc9c0d7a6f2", 0xe3, 0x8081, 0x0, 0xffffffffffffffbd) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000140)={0x64, &(0x7f0000000000)="b791be73c8d4fe6abdf979a47fb83bd9e6a38455e21fa1e4a8ee036575ff79e8f8bb80ec2a78261b9f4ed167830f83c5f05f0759afb2bb7a69ea1c1edd77bb7b5576a87ce2dbbffa1af818b56cb2de1db19af447cf5c07712a51b28b590096e36e9d6bf9"}) read$FUSE(r3, &(0x7f00000004c0), 0x1000) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r4 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:44:13 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000084080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:13 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000000400000", 0x20) 03:44:13 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000300"/32, 0x20) 03:44:13 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000094080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:13 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x42000, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000200)={0x1}) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x20000, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$l2tp(r2, &(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast1}, 0x0, 0x2, 0x2, 0x1}}, 0x26) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@null=' \x00', 0x1, 'hwsim0\x00'}) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400, 0x0) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:44:13 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000ffffff9e0000", 0x20) [ 1181.011598][T25400] binder: BINDER_SET_CONTEXT_MGR already set [ 1181.045269][T25400] binder: 25387:25400 ioctl 40046207 0 returned -16 03:44:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630cc0000000ffffff7ffcaf009a6a700ea482"], 0x0, 0x0, 0x0}) 03:44:13 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000600"/32, 0x20) [ 1181.303863][T25425] binder: 25422:25425 unknown command -1072930034 [ 1181.322347][T25425] binder: 25422:25425 ioctl c0306201 200000c0 returned -22 03:44:14 executing program 0: r0 = gettid() socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000)) exit(0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:44:14 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000000a4080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:14 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000000000000ec00000", 0x20) 03:44:14 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x2, 0x0) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x25) recvfrom$llc(r1, &(0x7f0000000140)=""/209, 0xd1, 0x40, &(0x7f0000000240)={0x1a, 0x309, 0x2, 0x40, 0x2, 0x6, @dev={[], 0x20}}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000300)={@initdev, 0x0}, &(0x7f0000000340)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@initdev}}, &(0x7f0000000580)=0xe8) getpeername(r1, &(0x7f0000001c40)=@can={0x1d, 0x0}, &(0x7f0000001cc0)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001e80)={'vcan0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001ec0)={{{@in6, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000001fc0)=0xe8) readv(r1, &(0x7f0000000840)=[{&(0x7f0000000280)=""/8, 0x8}, {&(0x7f0000000380)=""/215, 0xd7}, {&(0x7f00000005c0)=""/181, 0xb5}, {&(0x7f0000000680)=""/216, 0xd8}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f0000000780)=""/174, 0xae}], 0x6) getpeername$packet(r1, &(0x7f0000002000)={0x11, 0x0, 0x0}, &(0x7f0000002040)=0x14) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f00000008c0)=0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000021c0)={'irlan0\x00', 0x0}) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000003840)={@initdev, @initdev, 0x0}, &(0x7f0000003880)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000038c0)={{{@in6=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f00000039c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000003a00)={'vcan0\x00', 0x0}) recvmmsg(r1, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f0000005040)=[{&(0x7f0000003a40)=""/113, 0x71}, {&(0x7f0000003ac0)=""/52, 0x34}, {&(0x7f0000003b00)=""/216, 0xd8}, {&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/252, 0xfc}, {&(0x7f0000004d00)=""/15, 0xf}, {&(0x7f0000004d40)=""/242, 0xf2}, {&(0x7f0000004e40)=""/225, 0xe1}, {&(0x7f0000004f40)=""/96, 0x60}, {&(0x7f0000004fc0)=""/125, 0x7d}], 0xa, &(0x7f0000005100)=""/62, 0x3e}, 0x3618}, {{&(0x7f0000005140)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000005280)=[{&(0x7f00000051c0)=""/133, 0x85}], 0x1, &(0x7f00000052c0)=""/245, 0xf5}, 0x1}, {{&(0x7f00000053c0)=@nfc_llcp, 0x80, &(0x7f0000005600)=[{&(0x7f0000005440)=""/96, 0x60}, {&(0x7f00000054c0)=""/181, 0xb5}, {&(0x7f0000005580)=""/86, 0x56}], 0x3, &(0x7f0000005640)=""/239, 0xef}, 0x5}, {{&(0x7f0000005740)=@rc, 0x80, &(0x7f0000005980)=[{&(0x7f00000057c0)=""/19, 0x13}, {&(0x7f0000005800)=""/108, 0x6c}, {&(0x7f0000005880)=""/111, 0x6f}, {&(0x7f0000005900)=""/123, 0x7b}], 0x4, &(0x7f00000059c0)=""/48, 0x30}, 0x8}, {{&(0x7f0000005a00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000005c40)=[{&(0x7f0000005a80)=""/186, 0xba}, {&(0x7f0000005b40)=""/50, 0x32}, {&(0x7f0000005b80)=""/176, 0xb0}], 0x3, &(0x7f0000005c80)=""/135, 0x87}, 0x6}, {{0x0, 0x0, &(0x7f0000006f40)=[{&(0x7f0000005d40)=""/252, 0xfc}, {&(0x7f0000005e40)=""/46, 0x2e}, {&(0x7f0000005e80)=""/32, 0x20}, {&(0x7f0000005ec0)=""/21, 0x15}, {&(0x7f0000005f00)=""/26, 0x1a}, {&(0x7f0000005f40)=""/4096, 0x1000}], 0x6, &(0x7f0000006fc0)=""/247, 0xf7}, 0x7fff}, {{0x0, 0x0, &(0x7f0000007380)=[{&(0x7f00000070c0)=""/214, 0xd6}, {&(0x7f00000071c0)=""/170, 0xaa}, {&(0x7f0000007280)=""/242, 0xf2}], 0x3, &(0x7f00000073c0)=""/164, 0xa4}, 0xaf}], 0x7, 0x0, &(0x7f0000007640)) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000007c00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000007bc0)={&(0x7f0000007680)={0x530, r2, 0x0, 0x70bd26, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x21c, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x9850}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r6}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x44, 0x4, [{0x6, 0x7, 0x6, 0x2}, {0xc931732, 0x4, 0x68795863, 0x3b9}, {0xdb7, 0x2, 0x409afe94, 0x101}, {0x2, 0x9, 0x6, 0xa619}, {0xfffffffffffff9e6, 0x100000001, 0x4, 0xffffffffffffffff}, {0x9, 0xff, 0x9, 0x5}, {0x4, 0x8001, 0x8001}, {0x40, 0x4, 0x2baa26f4, 0x80000001}]}}}]}}, {{0x8, 0x1, r7}, {0x4}}, {{0x8, 0x1, r8}, {0xe8, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x59}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x80}}}]}}, {{0x8, 0x1, r10}, {0x1f4, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x8f}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x4eb5}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}]}}]}, 0x530}, 0x1, 0x0, 0x0, 0x40000}, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x1a3, 0x0, &(0x7f0000000180)=ANY=[], 0xfffffffffffffc49, 0x0, 0x0}) getuid() ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x1) 03:44:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x13a, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0}) r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x40000) ioctl$TCGETX(r1, 0x5432, &(0x7f0000000180)) 03:44:14 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000a00"/32, 0x20) [ 1181.908234][T25444] binder: 25435:25444 unknown command 0 [ 1181.914584][T25446] binder: BINDER_SET_CONTEXT_MGR already set [ 1181.944060][T25444] binder: 25435:25444 ioctl c0306201 20000080 returned -22 [ 1181.951510][T25446] binder: 25436:25446 ioctl 40046207 0 returned -16 03:44:14 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000000b4080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:14 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000c00"/32, 0x20) 03:44:14 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000011c00000", 0x20) [ 1181.955991][T25449] binder: 25435:25449 unknown command 3 [ 1181.977045][T25449] binder: 25435:25449 ioctl c0306201 20000100 returned -22 [ 1182.012094][T25446] binder: 25436:25446 unknown command 0 [ 1182.022038][T25449] binder: 25435:25449 unknown command 0 [ 1182.040074][T25446] binder: 25436:25446 ioctl c0306201 200000c0 returned -22 [ 1182.049674][T25449] binder: 25435:25449 ioctl c0306201 20000080 returned -22 [ 1182.073777][T25446] binder: BINDER_SET_CONTEXT_MGR already set [ 1182.096079][T25460] binder: 25436:25460 unknown command 0 [ 1182.109654][T25446] binder: 25436:25446 ioctl 40046207 0 returned -16 [ 1182.111349][T25444] binder: 25435:25444 unknown command 3 03:44:14 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000000c4080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:14 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000e00"/32, 0x20) [ 1182.123463][T25460] binder: 25436:25460 ioctl c0306201 200000c0 returned -22 [ 1182.135730][T25444] binder: 25435:25444 ioctl c0306201 20000100 returned -22 03:44:14 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000ffffffc30000", 0x20) [ 1182.664426][ C1] net_ratelimit: 15 callbacks suppressed [ 1182.664434][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1182.676032][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1182.681818][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1182.687625][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:44:15 executing program 0: r0 = gettid() exit(0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x10002) bind$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x1, @rand_addr=0x7}}, 0x1e) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:44:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x2, 0x0, &(0x7f0000002280)=ANY=[@ANYRES16=r0], 0xfffffffffffffe6d, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:44:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) fcntl$getown(r0, 0x9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000d65d1d95b2f26ecb5cd109755c0911d6064c1d25fae4dd2da64769d2301be8be1c1d5aba1a0ff0e48a13885aaa72f790558ddf32c27b9744c191cf28836e8e5d64a253c42fba618b39d565699febd1b869c06158e8b74a6ae81824788a3ef2cdffa3172674abdad16ebe321473530f"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000180)={0x0, 0x1}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000200)={r2, 0x76, "df585a0d1eb1874dd42569800c12d2266fc56cbcad008c0af144d40f65fbc45d86576c3b5cb7aa59a7a178b5b0bbf40021ddde88b301ca9b1c560c45835303b9318ea046c1b760bcb1843fa09d7a90be4d978e35974b185e40dc81dd6a5cd08a14daa36d64e7b4b86814cda58739848216e70701699e"}, &(0x7f0000000280)=0x7e) 03:44:15 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000fffffff00000", 0x20) 03:44:15 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000000d4080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:15 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000ed0e00"/32, 0x20) 03:44:15 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000000ff0000", 0x20) [ 1182.905566][T25488] binder: 25479:25488 unknown command 0 [ 1182.907834][T25492] binder: BINDER_SET_CONTEXT_MGR already set [ 1182.919706][T25488] binder: 25479:25488 ioctl c0306201 20000080 returned -22 [ 1182.934745][T25492] binder: 25483:25492 ioctl 40046207 0 returned -16 [ 1182.948759][T25492] binder: 25483:25492 unknown command 3 03:44:15 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000000e4080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:15 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000f00"/32, 0x20) [ 1182.960073][T25492] binder: 25483:25492 ioctl c0306201 20000000 returned -22 [ 1182.973796][T25488] binder: 25479:25488 unknown command 0 [ 1183.004549][T25488] binder: 25479:25488 ioctl c0306201 20000080 returned -22 [ 1183.012759][T25492] binder: BINDER_SET_CONTEXT_MGR already set [ 1183.012790][T25500] binder: 25483:25500 unknown command 3 [ 1183.039212][T25492] binder: 25483:25492 ioctl 40046207 0 returned -16 03:44:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:44:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) [ 1183.076284][T25500] binder: 25483:25500 ioctl c0306201 20000000 returned -22 03:44:15 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000000f4080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1183.534550][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1183.540466][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:44:15 executing program 0: r0 = gettid() openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x88000, 0x0) exit(0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:44:15 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000000000f0ffff0000", 0x20) 03:44:15 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000003f00"/32, 0x20) 03:44:15 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x101800, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000180)="d6be55761c96c0a7b1041cc58e4b3099da6c4d9c5088e56e4e69c25f76b560d1cdb7129aa634b1bf85da40d3ad0edffa180ae739e911edb2596c5633420211686edd00f50b448bfad194e8f20f94eec50c1df692a65069720a14dc17d2711d4c2ab1d21b3da67e9a5b45b1774f1c952e5815a3133ad79504460f8cf24216f1161f6891ad46f6f52d2820734ce48d40e85758e3f1bc49f1f989dcc3ac", 0x9c}, {&(0x7f0000000240)="97a62ea2dba483c9a64cd32c51b6843c94051d6469489c891fb7fa2b02ad38f1", 0x20}, {&(0x7f0000000280)}], 0x3, &(0x7f0000000300)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@cipso={0x86, 0x3a, 0x3, [{0x7, 0x11, "7f8f9967dfc0e77a2cf3141124e0b7"}, {0x7, 0xb, "7843224a36ef904344"}, {0x0, 0x5, "93e205"}, {0x1, 0xc, "b3ebfcbd8569f0c399c3"}, {0x7, 0x7, "90e145fa17"}]}]}}}], 0x68}, 0x0) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:44:15 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000104080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r1 = syz_open_dev$audion(&(0x7f00000009c0)='/dev/audio#\x00', 0x3, 0xe8081) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a40)='TIPCv2\x00') ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000b40)="5e4b2e8aeb4cf92ddf9c1820450091a134d08b15923e993c87d0cb7d") sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r2, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x100000001, 0x2000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x68, &(0x7f0000000880)=[@in6={0xa, 0x4e20, 0x61, @dev={0xfe, 0x80, [], 0x11}, 0xfffffffffffffff7}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e20, 0x6, @mcast2, 0x200}, @in={0x2, 0x4e21, @rand_addr=0x2}]}, &(0x7f0000000900)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000940)={r4, 0x7fffffff, 0x9}, &(0x7f0000000980)=0x8) getsockopt$inet6_mreq(r3, 0x29, 0x0, &(0x7f0000000b80)={@ipv4={[], [], @remote}, 0x0}, &(0x7f0000000bc0)=0xffffffffffffff4b) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000840)={r5, 0x1, 0x6, @broadcast}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000001c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x578, 0x4e0, 0x420, 0x360, 0x0, 0x268, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, &(0x7f0000000140), {[{{@ip={@multicast2, @remote, 0xffffff00, 0xffffffff, 'bpq0\x00', 'teql0\x00', {}, {0xff}, 0x2, 0x2, 0x1}, 0x0, 0xe8, 0x148, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00'}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x3}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast, 0x2200, 0x9, [0x2, 0x18, 0x38, 0x1c, 0x3b, 0xd, 0x3a, 0x18, 0x20, 0x2, 0x9, 0x22, 0x1e, 0x20, 0x1d, 0x2], 0x0, 0x8, 0x9}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xffffffff, 'bond_slave_0\x00', 'hwsim0\x00', {0xff}, {}, 0x0, 0x3, 0x10}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00', 0x0, {0x3, 0x1f}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x800, 0x200, 0x877d, 0x100000000, 0x5, 0x8], 0x2, 0xffffffffffffff80}, {0x7f, [0x3, 0xffff, 0x7, 0x2, 0x6, 0x81], 0x100000001, 0x7c00000000000000}}}}, {{@uncond, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x8, 0x0, 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x2, @empty, 0x4e23}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xffffffff, 0xffffffff, 'bcsh0\x00', 'bcsf0\x00', {0xff}, {0xff}, 0x1, 0x3, 0x16}, 0x0, 0x98, 0xc0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0xffffffff, '\x00', 'erspan0\x00', {}, {}, 0x1d, 0x2, 0x4}, 0x0, 0x98, 0xc0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x5d8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000007c0)={r4, 0x3, 0xfffffffffffffbff, 0x2}, &(0x7f0000000800)=0x10) [ 1183.776356][T25536] __nla_validate_parse: 16 callbacks suppressed [ 1183.776448][T25536] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1183.809932][T25540] binder: BINDER_SET_CONTEXT_MGR already set 03:44:16 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000000000009effffff0000", 0x20) 03:44:16 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000004000"/32, 0x20) [ 1183.821953][T25540] binder: 25528:25540 ioctl 40046207 0 returned -16 [ 1183.842881][T25544] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:44:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x420000, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000240)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002280)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:44:16 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000c3ffffff0000", 0x20) 03:44:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x2ac, 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0}) [ 1183.934454][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1183.934476][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1183.940257][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1183.946044][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:44:16 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000114080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1184.145418][T25564] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1184.163441][T25565] binder: 25562:25565 unknown command 1986356271 [ 1184.172537][T25565] binder: 25562:25565 ioctl c0306201 200000c0 returned -22 [ 1184.174115][T25566] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:44:16 executing program 0: r0 = gettid() exit(0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x2000) recvfrom$rose(r1, &(0x7f0000000040)=""/102, 0x66, 0x2000, &(0x7f00000000c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x1, @bcast}, 0x1c) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:44:16 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000f0ffffff0000", 0x20) 03:44:16 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000655800"/32, 0x20) 03:44:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x80000, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000040)=[0xe51f, 0x5]) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe2(&(0x7f0000000080), 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xfffffe79, 0x0, &(0x7f00000001c0)=ANY=[], 0xc20c1f18d5f66f49, 0x0, 0x0}) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) prctl$PR_CAPBSET_DROP(0x18, 0x20) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:44:16 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000124080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x100000001, 0x4001) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000040)=0x2a8) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000100)={0x2, 0x9}, 0x2) 03:44:17 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000000000003", 0x20) [ 1184.752115][T25575] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1184.755772][T25585] binder: 25577:25585 unknown command 1074553606 [ 1184.785019][T25581] binder: BINDER_SET_CONTEXT_MGR already set 03:44:17 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000006000"/32, 0x20) [ 1184.799138][T25585] binder: 25577:25585 ioctl c0306201 200000c0 returned -22 [ 1184.804875][T25581] binder: 25578:25581 ioctl 40046207 0 returned -16 [ 1184.806987][T25587] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1184.815130][T25581] binder: 25578:25581 unknown command 0 [ 1184.834522][T25581] binder: 25578:25581 ioctl c0306201 20000240 returned -22 [ 1184.860286][T25581] binder: 25578:25581 unknown command 0 [ 1184.862874][T25585] binder: BINDER_SET_CONTEXT_MGR already set [ 1184.868146][T25581] binder: 25578:25581 ioctl c0306201 20000240 returned -22 [ 1184.878422][T25585] binder: 25577:25585 ioctl 40046207 0 returned -16 03:44:17 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000134080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1184.907521][T25589] binder: 25577:25589 unknown command 1074553606 03:44:17 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000ffffffffffff", 0x20) 03:44:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$FICLONE(r0, 0x40049409, r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:44:17 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000586500"/32, 0x20) [ 1184.932256][T25589] binder: 25577:25589 ioctl c0306201 200000c0 returned -22 [ 1184.999737][T25603] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1185.075203][T25611] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:44:17 executing program 0: r0 = gettid() exit(0x0) move_pages(r0, 0xfffffffffffffc61, 0x0, 0x0, 0x0, 0x2) 03:44:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r1 = socket(0x15, 0x5, 0x800) getsockopt$sock_int(r1, 0x1, 0x80000000003d, &(0x7f0000000100), &(0x7f0000000040)=0x4) r2 = dup3(r0, r0, 0x80000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000140)={{0x3ff, 0xffffffffffffffff}, 'port0\x00', 0x40, 0x810, 0x1f, 0x0, 0x6, 0x17, 0x8000, 0x0, 0x4, 0x9}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440aca17f4bcf59fb13fdc32c3ecece99812e5c3dd1"], 0x0, 0x0, 0x0}) 03:44:17 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000008100"/32, 0x20) 03:44:17 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000144080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:17 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500"/32, 0x20) 03:44:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x81}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000180)={r2, 0x0, 0x0, 0x80, 0xfbac, 0x2}, 0x14) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="bed23962122c254705630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000001c0)=0x7, 0x4) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000200)={r2, 0xffffffff, 0x2, [0x1f, 0x2f]}, &(0x7f0000000240)=0xc) [ 1185.594960][T25627] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1185.619104][T25629] binder: BINDER_SET_CONTEXT_MGR already set 03:44:17 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500"/32, 0x20) [ 1185.653856][T25634] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1185.657467][T25629] binder: 25623:25629 ioctl 40046207 0 returned -16 03:44:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x2, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000240)=""/68, 0x44}, {&(0x7f00000002c0)=""/148, 0x94}, {&(0x7f0000000380)=""/169, 0xa9}], 0x3, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x8, 0x4, 0x3, {0x2, @pix={0x3ff, 0x1000, 0x35303553, 0x7, 0x4, 0x7, 0x7, 0x8000000000000000, 0x1, 0x7, 0x0, 0x2}}}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdfdff98b4bc1a"], 0x0, 0x0, 0x0}) 03:44:17 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000000eed00"/32, 0x20) [ 1185.703637][T25637] binder: 25623:25637 unknown command 1647956670 [ 1185.727754][T25637] binder: 25623:25637 ioctl c0306201 20000080 returned -22 03:44:18 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000154080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1185.778382][T25629] binder: 25623:25629 unknown command 1074553630 [ 1185.813535][T25643] binder: 25642:25643 unknown command 448574616 03:44:18 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500"/32, 0x20) [ 1185.837032][T25629] binder: 25623:25629 ioctl c0306201 200000c0 returned -22 [ 1185.856972][T25643] binder: 25642:25643 ioctl c0306201 200000c0 returned -22 03:44:18 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500000000f000"/32, 0x20) [ 1185.874341][T25646] binder: BINDER_SET_CONTEXT_MGR already set [ 1185.914238][T25652] binder: 25642:25652 unknown command 448574616 [ 1185.921543][T25646] binder: 25623:25646 ioctl 40046207 0 returned -16 [ 1185.930843][T25637] binder: 25623:25637 unknown command 1074553630 [ 1185.946557][T25629] binder: 25623:25629 unknown command 1647956670 [ 1185.952830][T25652] binder: 25642:25652 ioctl c0306201 200000c0 returned -22 [ 1185.972801][T25637] binder: 25623:25637 ioctl c0306201 200000c0 returned -22 [ 1186.000805][T25629] binder: 25623:25629 ioctl c0306201 20000080 returned -22 03:44:18 executing program 0: r0 = gettid() exit(0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x2) 03:44:18 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000164080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:18 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500"/32, 0x20) 03:44:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x200000, 0x0) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x1, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xffffffffffffffeb, 0x0, &(0x7f0000000200)=ANY=[], 0xfffffffffffffd67, 0x0, 0x0}) 03:44:18 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000004003000000000000000000", 0x20) 03:44:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x4041, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x101}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={r2, 0x10001}, 0x8) 03:44:18 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000340000000000000000000", 0x20) [ 1186.586268][T25671] binder: 25668:25671 ioctl c0306201 200001c0 returned -14 03:44:18 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000174080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:18 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500"/32, 0x20) 03:44:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="059b0440"], 0x0, 0x0, 0x0}) r1 = accept(0xffffffffffffff9c, &(0x7f0000000000)=@sco, &(0x7f0000000140)=0x80) r2 = dup2(r1, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f0000000200)={0x1, 0x6, 0x800, 0x0, 'syz1\x00', 0x40}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x408c80, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r3, 0x770a, 0x0) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000100)=0x88) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f0000000180)={0x0, 0x1}) 03:44:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_cache\x00') ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000040)={0x5c9bf31b, 0xffffffff7fffffff, 0x4}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:44:19 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000fffff0000000000000000000", 0x20) [ 1186.841925][T25698] binder: 25697:25698 unknown command 1074043653 [ 1186.867903][T25698] binder: 25697:25698 ioctl c0306201 20000080 returned -22 [ 1186.884032][T25702] binder: BINDER_SET_CONTEXT_MGR already set [ 1186.895518][T25703] binder: 25697:25703 unknown command 1074043653 [ 1186.898672][T25702] binder: 25699:25702 ioctl 40046207 0 returned -16 [ 1186.909693][T25703] binder: 25697:25703 ioctl c0306201 20000080 returned -22 03:44:19 executing program 0: accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x1c, 0x80800) modify_ldt$write2(0x11, &(0x7f0000000000)={0x1f, 0x20000800, 0x2000, 0x9, 0x7, 0xa1e5, 0x3, 0xffffffff, 0x7, 0x80000000}, 0x10) r0 = gettid() modify_ldt$write2(0x11, &(0x7f00000000c0)={0x9, 0x20001000, 0x4000, 0x5, 0x1, 0x0, 0x6, 0x3, 0xfe9, 0x8000}, 0x10) exit(0x0) move_pages(r0, 0xffffffffffffff48, 0x0, 0x0, 0x0, 0x2) 03:44:19 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500"/32, 0x20) 03:44:19 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000184080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:19 executing program 2: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000000)=0x0) write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x2b, 0x37, 0x2, {0x0, 0x10000, 0x7f, r1, 0xd, '/dev/binder#\x00'}}, 0x2b) r2 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x2000000000000) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:44:19 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000010000000000000000", 0x20) 03:44:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe2(&(0x7f0000000580), 0x4000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) accept4$nfc_llcp(r1, &(0x7f0000000340), &(0x7f00000003c0)=0x60, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udplite6\x00') r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x82400, 0x0) seccomp(0x1, 0x4d4a5d60bd79e90f, &(0x7f0000000440)={0x4, &(0x7f0000000400)=[{0x7, 0xc99, 0x2, 0x9}, {0x8, 0xfb1, 0x2, 0x2}, {0x2, 0x100, 0x3, 0xffffffff00000000}, {0x3e1d61b0, 0x8001, 0x783, 0x1}]}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000180)={r2, 0x40, 0x8c, r3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="bad7142d255037c50f0db7cea2092f0ee7cf81cdc97b"], 0x0, 0x0, 0x0}) ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f00000001c0)={0x40000000, 0x100, "1ae5a6ab04f1277e8c64f2e93783ca81ac103421b6af4155f604dcbedf80234c", 0x80, 0x4, 0x8001, 0x80000000, 0xd2b3, 0x6, 0x80000000, 0x0, [0x2, 0x1, 0x40, 0x2]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000480)={0x0, 0x6}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000500)={r4, 0xf5c, 0x3, [0x5, 0x9, 0x2]}, &(0x7f0000000540)=0xe) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) write$FUSE_POLL(r1, &(0x7f00000002c0)={0x18, 0x0, 0x7, {0x4}}, 0x18) 03:44:19 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000194080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:19 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000000000000000ffff", 0x20) 03:44:19 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000020000000000000000", 0x20) [ 1187.495732][T25717] binder: 25714:25717 unknown command 756340666 [ 1187.527029][T25717] binder: 25714:25717 ioctl c0306201 20000080 returned -22 [ 1187.532954][T25718] binder: BINDER_SET_CONTEXT_MGR already set [ 1187.566798][T25718] binder: 25713:25718 ioctl 40046207 0 returned -16 [ 1187.586735][T25717] binder: 25714:25717 unknown command 756340666 [ 1187.593141][T25717] binder: 25714:25717 ioctl c0306201 20000080 returned -22 [ 1187.606889][T25718] binder: BINDER_SET_CONTEXT_MGR already set [ 1187.626675][T25718] binder: 25713:25718 ioctl 40046207 0 returned -16 03:44:19 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500"/32, 0x20) 03:44:19 executing program 2: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xc74e, 0x400001) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000040)) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000180)={r0, 0x0, 0x0, 0x8, 0x5}) r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="01000431"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:44:19 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendto$rose(r0, &(0x7f0000000140)="e6405880ab83e638ed6c382a2181fb9c28f83a7fc24b9a02bb33062d1bc7fb728d9e4fb87633fd1788545c71e8d595f755de0204d81cec7fe8e81dc8c38d800d259463d68c77afc4287b2f510fe1c6e3e577ed9b9b7e9e8952bd5f49bc1309366a5fb13d1fdfdcc6", 0x68, 0x4, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x1, @bcast}, 0x1c) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) fremovexattr(r1, &(0x7f0000000000)=@known='trusted.overlay.upper\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) [ 1187.694515][ C0] net_ratelimit: 14 callbacks suppressed [ 1187.694525][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1187.706145][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1187.850858][T25747] binder: 25744:25747 unknown command 822345729 [ 1187.871354][T25747] binder: 25744:25747 ioctl c0306201 20000080 returned -22 [ 1187.910982][T25752] binder: 25744:25752 unknown command 822345729 [ 1187.917979][T25752] binder: 25744:25752 ioctl c0306201 20000080 returned -22 [ 1188.094523][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1188.094529][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1188.094576][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1188.100358][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:44:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x1f) r1 = getuid() getgroups(0x6, &(0x7f00000003c0)=[0xee01, 0x0, 0x0, 0xffffffffffffffff, 0xee00, 0xee00]) fchown(r0, r1, r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0xfffe, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000300)) r4 = gettid() write$cgroup_subtree(r3, &(0x7f00000002c0)={[{0x2d, 'memory'}, {0x2f, 'memory'}, {0x0, 'memory'}, {0x2b, 'cpu'}, {0x2b, 'io'}]}, 0x21) exit(0x0) move_pages(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x8, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x2, r6, 0x3c, 0x0, @ib={0x1b, 0x70b6, 0x9, {"8a0463250b863420e47d83185e75495c"}, 0x6, 0x9, 0x7fffffff}}}, 0xa0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, &(0x7f0000000200)={'raw\x00', 0x4, [{}, {}, {}, {}]}, 0x68) open_by_handle_at(r3, &(0x7f0000000440)=ANY=[], 0x80) mkdirat(r5, &(0x7f0000000280)='./file0\x00', 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000400)) getsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000340), 0x10) kcmp(r4, r4, 0x7, r3, r5) 03:44:20 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000030000000000000000", 0x20) 03:44:20 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000001a4080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:20 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500"/32, 0x20) 03:44:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="0300001f"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:44:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:44:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x5, 0x100000000, 0x200, 0x1f, 0x1, 0x6, 0x9, 0x7, 0x5, 0x81, 0x2, 0x10000}) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x5, 0xff, 0x0, 0x2, 0x4, 0x62, 0x80, {0x0, @in={{0x2, 0x8000, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x7, 0x1, 0x80, 0x101, 0x100000000}}, &(0x7f0000000040)=0xb0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000200)={r2, 0x2}, 0x8) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:44:20 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000040000000000000000", 0x20) 03:44:20 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000001b4080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:20 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000000000000000ffff", 0x20) 03:44:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000080)={0x0, @aes256, 0x0, "8950c90e7dc736ba"}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x298, 0x0, 0x0}) [ 1188.664011][T25783] binder: 25781:25783 ioctl 5403 20000000 returned -22 03:44:20 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000060000000000000000", 0x20) [ 1188.742285][T25790] binder: 25781:25790 ioctl 5403 20000000 returned -22 [ 1188.790960][T25793] binder: 25789:25793 ioctl 800c6613 20000080 returned -22 [ 1188.807674][T25793] binder: 25789:25793 ioctl c0306201 20000000 returned -14 [ 1188.843285][T25793] binder: 25789:25793 ioctl 800c6613 20000080 returned -22 [ 1188.894473][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1188.900352][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1188.906277][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1188.912074][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:44:21 executing program 0: r0 = gettid() exit(0x0) r1 = dup(0xffffffffffffffff) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000400)={0x0, @dev, @initdev}, &(0x7f0000000440)=0xc) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000540)={&(0x7f00000002c0), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r2, 0x0, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x87}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x3b}, @FOU_ATTR_AF={0x8}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={[], [], @empty}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000001) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:44:21 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000001c4080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x1e, 0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES64=r0, @ANYRES32=r0], 0x0, 0x0, 0x0}) 03:44:21 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000000000000000ffff", 0x20) 03:44:21 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000000000000a0000000000000000", 0x20) 03:44:21 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x800, 0x80000) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x2710, 0x1, 0x2, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$VT_RELDISP(r1, 0x5605) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) [ 1189.407799][T25810] binder: 25805:25810 ioctl 4020ae46 20000040 returned -22 [ 1189.449211][T25810] binder: 25805:25810 ioctl 4020ae46 20000040 returned -22 [ 1189.459053][T25817] __nla_validate_parse: 14 callbacks suppressed [ 1189.459066][T25817] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1189.477731][T25818] binder: BINDER_SET_CONTEXT_MGR already set 03:44:21 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500"/32, 0x20) 03:44:21 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000000000000c0000000000000000", 0x20) [ 1189.499152][T25820] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1189.519073][T25818] binder: 25806:25818 ioctl 40046207 0 returned -16 03:44:21 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) delete_module(&(0x7f0000000000)='/dev/binder#\x00', 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:44:21 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000001d4080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1189.554302][T25818] binder: 25806:25818 unknown command 808482864 [ 1189.588852][T25818] binder: 25806:25818 ioctl c0306201 20000000 returned -22 03:44:21 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000000000000e0000000000000000", 0x20) 03:44:21 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000000000f0ffffffff", 0x20) [ 1189.743159][T25839] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1189.794739][T25845] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:44:22 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x8800) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0, 0x1, 0x3ff, 0x3}]}, 0x10) r1 = gettid() exit(0x0) move_pages(r1, 0x0, 0x0, 0x0, 0x0, 0xbffffffffffffffd) 03:44:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000e2fdffff06630440"], 0x0, 0x0, 0x0}) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='/dev/binder#\x00') 03:44:22 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0x0, 0x7fb) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x180, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e630c734f83a3d992400000000000020000fdfdffff066304402f357d1909a2560ba66bc5a58a2f42f73505ba98a8d8ec5f08f04bc7f96d5b0939038af50a334accbecc78de601c048203fec18eb31b87f307e8f90be1ac1ca07a42fa25ae92afefebaa35edad0df207f505c4f029e024086d0cb1f2ffb583e734a7e6c992e577a2d3097354d197c61ab5"], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x400, 0x1, &(0x7f0000000440)=[{0x0}], 0x0, 0x0) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000100)) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000040)) 03:44:22 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000000000000f0000000000000000", 0x20) 03:44:22 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000001e4080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:22 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000200000000", 0x20) [ 1190.382034][T25853] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:44:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000140)={'broute\x00'}, &(0x7f0000000040)=0x78) [ 1190.461780][T25866] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:44:22 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000100000000000000000", 0x20) 03:44:22 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000300000000", 0x20) 03:44:22 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000001f4080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x400, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) getsockopt$ax25_int(r1, 0x101, 0x9, &(0x7f0000000140), &(0x7f0000000180)=0x4) [ 1190.726096][T25882] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1190.747060][T25859] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 03:44:23 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000600000000", 0x20) [ 1190.772918][T25885] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1191.014670][T25867] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 03:44:23 executing program 0: msgget(0x1, 0x600) 03:44:23 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000000000003f0000000000000000", 0x20) 03:44:23 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000204080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000002640)={&(0x7f0000000180)={0xa, 0x4e23, 0x3, @local, 0x3}, 0x1c, &(0x7f0000002580)=[{&(0x7f00000001c0)="3aef635ab5a53c2f56695c53750a4147152345eaada64fb6b33eb9981ef88a98cb7921243acc8561766a4b2073dcbabcb6decd07a26594a4b2da48902d4f4993210303775e88660476a96fa1c9abe59ec6ad3635b8366a6a030d85ad50f83d06db4e2ebb6d0511ab1fffe62167a57306a265df767778f478675e86d5ffe19d37a7c94f5faf8f55a4a3aeb7c3ed0b1a119812e57c0c44d0526b20c4bae5041e98b49131e361402d5c204c16d6618f2a41ceea103f5df3d1c2c082804ace44d6277c95225ad6317adbbf4b48fc97af17d499162cf891c9648eb6e5cb4223e94eb209d57cc10dbc9bfe96d1bcd455439a532261ba38358aadf4a20d3752b6c70fdf9c6518c35e5000edc5a63b5f580e1ad22f3fe4d61fa42dd430c15ff689afe2b04c3e8722bd682713c3452486ea5bc0f30edbb600dc82ebdbc7e110ffa18368d9f0cd05104636a851537ea4776ec4aba3c110e4f1aac841d240cab58eceec4a204b5e66e352b853412a3f8557aede5302e13b125d393d12ae68d948dd69f435520ff6d9f536a3e1ce13c606aee71bc200a1e3c3fc195731164102f0ad3bf065a08a4eea3e2f3ea22259a8d2058fb623932f0717f69c8cb4a95c09c64f113d100f25a73990f95797e5ad92c62ee1d8d0d87b69b71360c25ef5946bb000b9375f54241ecd92c7df5c6865f1e2e743f3d95163df11288b94506f65a80bd0cf4502a39d7ed9361d5cafb0d66389bec9948790f8c0d1ea8cfcf06c59fae3019b658418a4ae02da8bc5442832fb3ccca594dd1d65ebafb0e9d09c83c9c13fd56855efbe26d13632f2c5aeb4c7e7e9892874523457e4f12f6df756005be044f3cda43ee693256a9a96e6f8973b9c1d2a980f34604491491489a16e077fe4d8a45038771e7b03604c29be9e8919b3fabcb924b0ec30dcfd7c5bca4793a85c5733fd30afe403a55a2184805ba7c0b0a4ba58218f2b4dc084a2749aa8a52fdf5522fecdbdffe25ec285fbad38d3a8422b2df58543b274051eb009eed0ff443467c6107e1078a1cac867a2b66602a44b2f9e0bd449f8660a9bdad69732c7892aacc8eb618c8de395c27368b8f170bc7b7f6c5ff987d18eadbd3629ee1e6f3356ad58029fbb04261b1ba81b07d8b0b7a1f67bb1b3391d2ed1a793a3f053fa0dfe3d60b5f347e6f3e2acbd6d85ce32558696941903a9121fe10a6cbd9fba50c2ff39a0513753ee9a70a8507f6de41ca7973f9d01e7776e2577fb893ec4ba28599a93a6da7bc0809ecbb3067cb1b5314ca36ac2ff102b85fa32033dcf159a666b2ab39b4022fea1ba36ed44b2031c9b124dd3c5f8a8d471f4e89604eac5529b71753f72a6a342da8ab3a4d65ac8dbd3e5b536030051cf9f3af4bcfbc20e5ca0acf01f95222bd752a84efa5453ebbde3c54ae24fe1d37fb15b64c6e1bed4cca80494f86b8e7074d3475048ca1879b98c705b2f3c7f0ff5bc94fb8b5f001c614d7a82cb91a96f08ad79c73db78dc1d4cc01fa858f31d278366ede2f7b6a79fc6c1c68a1b0b211075e3bfc636e73ff58b9ecf0e580548f45abc5040a3851bdf534db605665da1ca74691f81727c96c5090b34cbd0234d9c84baf6c5b354c70d93e168a98db0285001c1d2751874f82eced239666393bb798256b4d7c9dd718347ff38b79d318efce52563065f5037dca624d54b4db0f92565585ac655b3b0903787c5740a16a378e67965f832debe25d8d388f9fd882da03866bd3c82e78c9cf5bb8bd59863c78704ba29b41e6ba61977553a7add9b9d317072fa6cb561f9b7f66401c7ee08091b78256b5864b611a7c8c59a94e518c1d9cc294cbf3bd65c11ee96bc67d2e093c0ed81b5780870d38ef0a90a5b0c016ed217db2977847a65dc0190069c0950d414a1a013645d132d17ba1b84b07ad85fc096d69d7d73a05a6c7e2e399b9d1e2e11c2840887873f0432eb1af5accb65e61ed35f34f2e4016e8db83e760a4c0a2efdeee67ca14773c242191df0d054a8e3ca22eedc4baf577a27df9eb61f71c2c829e8b07180ae922a54b8906892093d6c202ee33609d2295bdcd8c6286f405136281f1c62efce5c82025ab0fbbf44289e2a5b4de92e9c1f1a60ab727cc357a53425ba2521fda44df2efb1cff237f599767fd6a7da6d910fb55c702a00742edfbb874d13e1dea7d593c3692b313e276885402ac6bedba7111b4b5ee02981cf5f5cef8267639a24e864095049fa2ca7e7fd9db49ccd753429569d89cfab03ad2eced3fcacbadeccb3363418563e3b8a2698cf3a67fc81804a6fe7a8036b1b6961ef9d051beb2a2f0b3bf32373d13d538e0d89eb123cbe7788f5291a9347bec7626660e66fd3107bc01eab4dd7e6defd6921b264ccc96467ff039913dfa81beb85b969ade2b50332ef4d05c6aead1e24bab722d639012505ca718d926ea5ceefaaf7e0894e64a88668ee54e81d9208929dfdbae305d21634955a25e3c35a897f6c889fec2db301a3844dd932e4d8e057032ec68c7efcebcb15d13adefa778f6984966ba549be39cdc8ec6b7155754e25280520efa7da37826875db4b3e9f4b54dae17bb990cee1aa5536f41ee7da2709ed0f85464f93e671a17569b4dc1f92906f6f0247ee40dbd0da42cdf2c43a88af4a503f56f7096030b66b3c981a2e2c33933200f4a5b06147a1e228bd32a840342b3bbbc641cb26f07b2d2a99efebb41df75eeb0b909a352f4b07f5c214fe43c026348e4c1fd7679ae19c203b5473e03fd17dd352783126778516cda4a89012f43b5650403b5028b39d4bcb23f03a3a2c52dc79a6eec0985419fd5ca8981b7134d5b9cb4fce3158b9e4e6a6935e27ee02b19bdc916fb72989f6e76343e4a3bf225326bb7eb87962592dbc2d77f9044ab32f3d0776fdffab8df57a99db379c70bcd5a4b54edb53805319a5b53199c4c59f5b50144d4287a884047ad08c36ede373e3053cc9a2cf5b00c4c5e2669bab21cc4e12b9ba683d482464813729a704152c06ef45aa225bd1eb9626c2e7f33869685ac1ad5338c5b145d479d457d9585594c8d36cd7b371677252ed4108d6b467af811ace1329ebf00f64747d64840c83ac1b851377c915ce6e75e891c57d28ab728f0a312b06eea41ad115a47679800e16c8a0a83b4f09c160e77cbed10fc40974d3d85b6c2b658f33ef806f4f053d9dc829dcb79be3ad4811594307ffe056d2d39b46903b22eebd18d880347e7a3d25472463f0a96ac42f189d800b42fc008f44ebbcd49e23cbac41a62382cc250739056a42134088230565ff731cf871068c1bb4b63df3b383d9f9417e8dd2c39257538d16432a2f68bc3dee3a6e93e6b05d5ffc72e16a7ca462ef5e9e08d74f8bf234eb049f28b753f85e05af6021a1367d99b272849f685c299ac7f1a8186d316d916d8ba1452d704819bbbfb512f724ad3076448cfd96a52bccb9570c28d2fdce54af16510db7005d9184ce395974169ce31b1ddcf1b8a4e6a8a143db560ff5c7e5d2be612834672f5a860dbdbea4a5b39158c9a54dfba04173530039e179500834b08f9ead375255fa510a2a5f2ac94b851704e8582618dc83295f152cee341709181982a0128a899eb4f8cb88f25a6cf6b507c678da814bb43f6b34b3d30ef4ca9b3bfd1ffe5c8f398d715773065f238bd1e3e8f20110772f635c1ba513e23b51d570060c351c3dcedfe801ebfaa19518ef69b7a2e148f2b325518e434795e2b086b7e1a9e3ef0d80ab7c15f1db9a3f1161e27b9d2852d1edc89f8a97be11f3534e77c16ff2f8bf43308d2331dd22d0b8f181d8f3ccc6045c848c4bfbf0da988035b30e2fbce1a5e0829bcd97d404ca0c6758c0c93aff34c212cbf7e06d9942a3d260c7ff5d9a807cdf643bce8e795e22b7700199ede5bcf3d46a659706fa4a7c64b59158cf6322a45094090095e0ff894f7ea2c8892761ca7ece7ebe6bae65670a2a8ca16de487526bbb14824589a696034944899eb6955ab4597f4518f06125a76d430572abf22320ee4c3477ec83d8a2e6a828757d806ec9fcb06cb094175d68997fdc9f4921d0626b4bfc0be6c5d69865ab28eaf225064f04567c191fe8c97ce00312670061904320947a53d6dace7d5b5615758030b3b42e483b0904af9963852303b03dc8c160d597fbae3a3da8198c7b74e3dce1f0b1ce5fe6d434766ddf34bbf85c8903e296e32022ac5e3a94f3172d8ad42fd1048e8b730d13d639a5010681782d335d3a7172fd9926db32f52666f0205b7735587e778c990fec0acbae68b53f1a25ff78a3997d5cbbb42ab0b0f1b327fdfb2fdbfb5cccec0e54359eafa08c69c8e6c8f688a827e2d508917084d72c4556449d3896470114880d7f7954646178f0be012b58721813eacc81b9ff4cbb4eb5c41f45236acfc584801144684193ef8adb77d178f45bdb25fc193e6240e1a5f57bdc4b2f87882a2012efdde02b15bda36490da0f1a9d58d676169dd14358eda3a2c490fb77d47789489175fa7a7b4471f4c9ce251ba14e9a3c90818d5c773414375d2c1d7c8aabede99c03281f88b081219bc1d8c3aa4a88794d65c786d79d315f4c2934153667c88f1eb14ce4c10169e1b07c80a48d4ea742f7ab978ca3b9daff2115d9fc1abbab1a3e717ce7c6f3290aca75d591b969bbd0a4fc5d876c82051e728404ef857e3754346073cf216019a3ebb277b8f4a0e0c860acf77069b768fda8ebb27098858c17ac73e14cd679dfe6c16cacc2159f8de62036f9660e4f5ebdb1e585be092f1e2548f67f80a57aa1d8687fe93c6b65a6840950c31b0a1d16ec95e6afe7a2b7899b632358eef24f8a7cce48064419cdb3d6b8f31724b4a46438cf45337e5fa64947abbe0b1448db9995d5e57f47bc5c540d21445ca2a2f0c1f26383cad58851e2b189f91afd29168d4617cf9769788682a3b03478c33873a2b637ead63f4fc36a7132ca45da994ead92ef9f59c88f8a4ea35d9c1c930a4681aaa5649ac8df865346ec5b20ba8063e7a3c081fb61e7b8e5e8c257fde85cbac00afb7c3435888d9e323e7431097fc91b08f10977251231cc61e937879149f59feab87a3deac608772a7d61b388f896fab6381a6ea019bf60bf1cc2dad17d21f1153f4fe4296b258b98b1deafae9518755e26557ef31ab4d348e609e822b8a375d1b453dcb61879c9ec12b9014f74c2f3dfd32e9ec7da77b01b1be80a8524489427a5549f175891db33501d6778ada562755417b74b824a72db019b0ab6630e9fa8eaf9504f0d30dc75518985e0922dcc39d3dc8816b0ae5e0befec4a0c931e82599137472f93a8a97271a05f8e80dbd8339036f563881639711f040daeb83cf16233eb072e4018d2d019480687e77c4b5b68ca804c1779b2f3c869a7a7fea49b44dfee0e760dd5a281ebea678698eddc6bdcc43fee8010f6dba805fb08a6a1186732252ead9cdac0eb23362c4892b3e74067391ebb396d4b6ec604fe5742c3861bdc0206795bc4d99f2089aa91d4962cbb8b14d19d8326f630850f560c309a26f7e22b44f471421907a959c90992d25751842c0cc16709422a891a297b06ddc0acbb85af275d569f5c8efd24d10ef43f65845226a4a6e687fb6a497375c80c53145ae9d5b07a907fcbc1712bb03104e6f828d435cba4b3b4e5c61494800da91a622083c42ace3a49b12f48cb4c4c2d9b40a1978b50fd577f627598d51432f5149788d3a55519c16de53f1a28567a41d2c757a322c37a9415f42475faa978b97eaeef33a008adfa2b3cfce356c0ce7bfab3146747770c907952b664adaffa4ba", 0x1000}, {&(0x7f00000011c0)="2f38fa1ea823995edd094575443f7f68bfdae37db8e1e773fd9268f245e8ca50201fe419cb427c9f6cf8ebb3a7756adc763fe3241ad9bf72e72074ca4a12837cf4a5a2b216934b4b618c5c55ba327f1595067363db3f24f20fb130f22cd0fcbc206d2c9de23bf9c3ca31", 0x6a}, {&(0x7f0000001240)="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", 0x1000}, {&(0x7f0000002240)="ea8c4e2fbc806a77425853ea3817fec75fd80d790b96637e8e134ddfef38f27e4c1a", 0x22}, {&(0x7f00000022c0)="a4859ad32d82d857ee14e387d6b6e821f28b8784ea526bb818e486f5e51fcd041c807f4ef251ca359a0cf622885bdf00463c8231cb55ea6789540711663d587a844ab2c06897dbadf801ce044b40837f28b7e13d963945d18a30b889b7dfd48704d2f97b5ae2aa04b6d17cdc932599d6a42b6b82d6c6e573a1f9e5", 0x7b}, {&(0x7f0000002340)="261cc8c4e9da930b997fbb447f920562e806b76f88b0dfecc41e07963dc49663ae94ac2e253f", 0x26}, {&(0x7f0000002380)}, {&(0x7f00000023c0)="be9c9c48bf835a83fe51378fdd184fc6d0a9bf4c5d57ef21e2aae83da455f9c9aa3ffc8f0cce1fdf169b463a48f457dc11e0b5dc263704cb8e9609384e7f490a5278020feb5fa780ca675fe3b4a903d3fe6b8d5981311fe71f918f88f9ed629ada248bcef3b277e1f466e101508e71498af6c154ff92fd382154b9a64ac78b30b3370eddc7e23b39c0e09538b3893562da3ea361435f67aa2d44aea9a9765617862ec88dcd54e3", 0xa7}, {&(0x7f0000002480)="38c8c24d1bf4e9093b15272e4a7fe654006608f319f0a5fb87161a063bd4b38ee3741ba31ebefbeadc56cb605d0e9d9322230a9a1562ea9b7117d5efb3baa8000fefa66a2ea4ee325e15f9d581791c5a3ff1c330d2aa1ba6a205c8d8ecab99c8947803caadb176241ad3985ae817d13c4ef5dc782795e2fa99a1f14e156ada4891a5bc7cd8cd8de48d77538c4765a9ba48444afe613fcad38710dc8163b086bf13e7f268dea8bb78dd0fd5af2724a9f8cccaea69025253c6e14f662c9e96a3c589c4d273f4cbacbc4f4f631c8cbf", 0xce}], 0x9}, 0x44000) 03:44:23 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000f00000000", 0x20) 03:44:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) [ 1191.365502][T25909] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:44:23 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000000000f000000000", 0x20) 03:44:23 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) name_to_handle_at(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x8}, 0x0, 0x1400) 03:44:23 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x40, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000001c0)=0x6, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) write$P9_RSTAT(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6d0000007d0200000066000300090000000103000000060000000000000000002800400000001f00000000000000000000000f002f6465762f646c6d5f706c6f636b000d002f6465762f62696e64657223000d002f6465762f62030000007223000a0070707031766d6e6574318085999d401c6d03d6d346f7e6721d65ba92bbf69f2c7f52b3943f"], 0x6d) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) [ 1191.428887][T25917] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:44:23 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000400000000000000000", 0x20) 03:44:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="04000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e630c40004b75de2f7fae5c47a4ea61eff3e8fdffff06630440"], 0x0, 0x0, 0x0}) 03:44:23 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000214080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:23 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000003000000", 0x20) 03:44:23 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000600000000000000000", 0x20) 03:44:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0xc001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000140)=@security={'security\x00', 0xe, 0x4, 0x360, 0x1d8, 0x0, 0x0, 0xd8, 0xd8, 0x2c8, 0x2c8, 0x2c8, 0x2c8, 0x2c8, 0x4, &(0x7f0000000040), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xb}, @dev={0xac, 0x14, 0x14, 0xd}, 0xffffff00, 0xffffff00, 'veth0_to_team\x00', 'ip_vti0\x00', {}, {0xff}, 0x2e, 0x3, 0x1c}, 0x0, 0x98, 0xd8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffff, 0x3136062d00, 0x1, 0x0, 0x3, 0x8001, 0x9, 0x3]}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={0x40, 'set\x00', 0x0, {{0x40, [0x1, 0x8, 0x7c, 0x800, 0x4, 0x1000000000000], 0x9, 0x34da3646}}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@uncond, 0x0, 0xc0, 0xf0, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00', 0x0, {0x0, 0x401}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x6, 0x6, 0x3}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:44:24 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000224080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1191.751714][T25940] binder: 25939:25940 unknown command 4 [ 1191.764612][T25940] binder: 25939:25940 ioctl c0306201 20000080 returned -22 [ 1191.791787][T25940] binder: 25939:25940 unknown command -35064849 [ 1191.840475][T25940] binder: 25939:25940 ioctl c0306201 200000c0 returned -22 03:44:24 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000058650000000000000000", 0x20) [ 1191.909051][T25953] binder: 25939:25953 unknown command 4 [ 1191.917236][T25954] binder: BINDER_SET_CONTEXT_MGR already set [ 1191.937205][T25953] binder: 25939:25953 ioctl c0306201 20000080 returned -22 [ 1191.941240][T25954] binder: 25947:25954 ioctl 40046207 0 returned -16 03:44:24 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000234080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:24 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000006000000", 0x20) [ 1191.967605][T25954] binder: BINDER_SET_CONTEXT_MGR already set [ 1191.974728][T25954] binder: 25947:25954 ioctl 40046207 0 returned -16 03:44:24 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 03:44:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e347f400000000000020000fdfd000006630440ed0971d97d195550111fb161fe7cc0bf23361abad203d1ae6c1e20d8a0e58a1a541b3787bb23a6e0ada9b6af15e18445bc57129ce03f69e90c8b93ee1c7351d8c9915a39657a1097eb9c9e6cfda93a73e195218c62b6b29384"], 0x0, 0x0, 0x0}) 03:44:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:44:24 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000810000000000000000", 0x20) 03:44:24 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000244080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:24 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000000000c00e000000", 0x20) [ 1192.273331][T25976] binder: 25972:25976 unknown command 1082078222 [ 1192.282582][T25977] binder: BINDER_SET_CONTEXT_MGR already set [ 1192.301775][T25976] binder: 25972:25976 ioctl c0306201 200000c0 returned -22 [ 1192.317130][T25977] binder: 25974:25977 ioctl 40046207 0 returned -16 03:44:24 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000254080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:24 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000ffffa8880000000000000000", 0x20) 03:44:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400800000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) [ 1192.353236][T25977] binder: 25974:25977 ioctl 40087602 20000000 returned -22 [ 1192.378808][T25985] binder: 25974:25985 ioctl 40087602 20000000 returned -22 03:44:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c408000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RSTATFS(r1, &(0x7f0000000140)={0x43, 0x9, 0x2, {0x6, 0x2, 0xffffffffffffffa2, 0xfb1, 0xcf, 0x62, 0x81, 0x9, 0x15c}}, 0x43) 03:44:24 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000000000000f000000", 0x20) 03:44:24 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000264080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:25 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = semget$private(0x0, 0x5, 0x0) semtimedop(r1, &(0x7f0000000140)=[{0x3, 0x7f}, {0x3, 0x80000}], 0x2, 0x0) setpriority(0x3, 0x0, 0x3ff) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) creat(0x0, 0x0) 03:44:25 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000ffffff9e0000000000000000", 0x20) 03:44:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x174, 0x15, 0xa04, 0x70bd2b, 0x25dfdbfc, {0x2}, [@generic="e33a2fd2fb13123fa6564e81418b032d1acb3d9f0ba84c5c1e83fba35af69f969ec4caea5d78ffb51f842d42021e1a99f42739d1261d4f719e42c8171adbfce729749e86684f0ccd4e8dc0e277c8ca8c7bfc7c43f9ee6f3f9f8153cee4fb56a19f91fbecf43d14bfb63353db27bd77f133aa518cd7f468e2375671479bb8df9337de188a5484e6891bbebcca25ee129283e1aa754b3cdfa61e75a06133b3d95938b7935507e44f9b0fe0", @generic="b6189c78dd3e0586bbeaa07ec8a15e740a67c7e39b7997156b601515074b23e8bccc0ecf7ee05ca71590f7ae7073baff545dfa95531caf8abea9404aff83192a557a693d36fcaf45a567000f91344952840ac9dfcf3786c15f2c5af87b470463c4d664230acf11cc95b4038dbbc029cad330c0aaf399ca83981f9fe866e9a45ea23be994ff0395bee589dc368335b40116050c02d3cff54a042c2520c666720fe7a6e7512bc6f24d4a9f73f9ed2363a7008c9c0070c8"]}, 0x174}, 0x1, 0x0, 0x0, 0x4000880}, 0x40) 03:44:25 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000274080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:44:25 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000000000c011000000", 0x20) [ 1193.054460][ C1] net_ratelimit: 16 callbacks suppressed [ 1193.054469][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1193.066037][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1193.071880][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1193.077726][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:44:25 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000284080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:25 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000040000000", 0x20) 03:44:25 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500000000000eed0000000000000000", 0x20) 03:44:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000180)={{0x28, 0x5, 0x3ff, 0x8, 0x1200, 0x6}, 0x80000001}) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000140)) 03:44:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630440"], 0x0, 0x0, 0x0}) 03:44:25 executing program 0: r0 = socket(0x2000000011, 0x3, 0x0) getsockname(r0, 0x0, 0xffffffffffffffff) setsockopt(r0, 0xf36c, 0x80000001, &(0x7f0000000040)="1af18d18b8d44c72fbc80e1e046e85a3d9f6c0b8", 0x14) r1 = dup2(r0, r0) socket(0x1f, 0x5, 0x9) socket(0x1, 0x3, 0x3) ioctl$KDENABIO(r1, 0x20004b3c) readv(r0, &(0x7f00000039c0)=[{&(0x7f0000001480)=""/147, 0x93}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/132, 0x84}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000003600)=""/65, 0x41}, {&(0x7f0000003680)=""/128, 0x80}, {&(0x7f0000003700)=""/231, 0xe7}], 0x7) pwritev(r0, &(0x7f0000001400)=[{0x0}], 0x1, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x20004b08, 0x0) 03:44:25 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000294080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:25 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000fffffff00000000000000000", 0x20) 03:44:25 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000ec0000000", 0x20) 03:44:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/104, 0x68}, {&(0x7f0000000140)=""/224, 0xe0}], 0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x4000, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000002c0)={0x1000}, 0x4) [ 1193.478285][T26058] binder: 26051:26058 unknown command 1074029326 [ 1193.497398][T26058] binder: 26051:26058 ioctl c0306201 200000c0 returned -22 03:44:25 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000000000000011c0000000", 0x20) 03:44:25 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000002a4080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:25 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500000088a8ffff0000000000000000", 0x20) 03:44:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000040)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="07630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:44:25 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000000000000000f0000000", 0x20) 03:44:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xf586, 0x800) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000040)={0x1, 0x0, 0x3, 0xe412572dbf6bc594, {0xffffffff, 0x6, 0x3, 0x8001}}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000240)=0x8, 0x4) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000200)={r2, 0x6}, 0xffffffffffffffc1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0xffffffffffffff90, 0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000140)="c23364f5f976f341e4eaacc0e2aebcce", 0x10) 03:44:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="ffffffff"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) [ 1193.934460][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1193.940338][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1193.966212][T26091] binder: BINDER_SET_CONTEXT_MGR already set [ 1193.972274][T26091] binder: 26087:26091 ioctl 40046207 0 returned -16 [ 1193.981024][T26094] binder: 26092:26094 unknown command -1 [ 1193.997742][T26094] binder: 26092:26094 ioctl c0306201 20000080 returned -22 [ 1194.032930][T26097] binder: 26092:26097 unknown command -1 [ 1194.043665][T26097] binder: 26092:26097 ioctl c0306201 20000080 returned -22 03:44:26 executing program 0: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x200000, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x0, 0x3, 0x4}}, 0x2e) 03:44:26 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500000000f0ffff0000000000000000", 0x20) 03:44:26 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000002b4080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:26 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000000000000000ff000000", 0x20) 03:44:26 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x190, 0x0, 0x0}) r1 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x8000, 0x2a2400) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000180)={0x4, &(0x7f0000000140)=[{0xfffffffffffffffb, 0x9}, {0x6, 0x10f7000000000}, {0x1ff, 0xaad2}, {0xffffffff, 0x2}]}) r2 = dup3(r0, r0, 0x7ffff) symlinkat(&(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000040)='./file0\x00') 03:44:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8480, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@delqdisc={0x34, 0x25, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, r2, {0x10, 0x10}, {0x0, 0x10}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x100000000}, @TCA_RATE={0x8, 0x5, {0x6, 0xfffffffffffffff8}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x90) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:44:26 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000040030000", 0x20) 03:44:26 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000009effffff0000000000000000", 0x20) 03:44:26 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000002c4080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1194.329926][T26109] binder: BINDER_SET_CONTEXT_MGR already set [ 1194.336119][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1194.336179][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1194.344486][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1194.349371][T26113] binder: 26104:26113 ioctl c0306201 200000c0 returned -14 [ 1194.353756][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1194.420612][T26113] binder: 26104:26113 ioctl c0306201 200000c0 returned -14 [ 1194.431501][T26109] binder: 26106:26109 ioctl 40046207 0 returned -16 03:44:26 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e6300"/20], 0x0, 0x0, 0x0}) 03:44:26 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000003400000", 0x20) 03:44:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet6(0xa, 0xe, 0xfffffffffffffffc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x30, &(0x7f0000000200)=[@in={0x2, 0x4e22, @rand_addr=0x1f}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}]}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000002c0)={r2, 0x10001}, &(0x7f0000000300)=0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffff9c, 0x0, 0x3, &(0x7f0000000140)='\'}\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)=r3, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xfffffffffffffdd6, 0x0, &(0x7f0000000040)=ANY=[@ANYPTR=&(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRES64=r0]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) [ 1194.500773][T26131] __nla_validate_parse: 22 callbacks suppressed [ 1194.500785][T26131] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1194.586227][T26137] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1194.638255][T26139] binder: 26135:26139 unknown command 25358 [ 1194.657199][T26139] binder: 26135:26139 ioctl c0306201 200000c0 returned -22 [ 1194.693835][T26143] binder: 26135:26143 unknown command 25358 [ 1194.704823][T26143] binder: 26135:26143 ioctl c0306201 200000c0 returned -22 03:44:27 executing program 0: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x200000, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x0, 0x3, 0x4}}, 0x2e) 03:44:27 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000f0ffffff0000000000000000", 0x20) 03:44:27 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000000000fffff00000", 0x20) 03:44:27 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000002d4080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:27 executing program 3: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x3}}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @connect}], 0xffffff76) 03:44:27 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x100) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) [ 1195.223785][T26156] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:44:27 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000000000100", 0x20) 03:44:27 executing program 3: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x3}}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @connect}], 0xffffff76) [ 1195.285870][T26166] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:44:27 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040)=0x2, 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x42000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xf0, r2, 0x729, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x7f}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x79}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x76}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x2}}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2b}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xc}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x44) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000140)={0x1, 0x6, 0x1, {0x77359400}, 0x40, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440e9448143da7c56fd56b75eb5d8da55b3b75472e1b592686d8c9d2557c34b5932a1d0f37ad4adaac481a878b3839b41230936bdf3ebc6dd60618663e3ec21b856526740be24c27205"], 0x0, 0x0, 0x0}) 03:44:27 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000002e4080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:27 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000000003400000000000", 0x20) 03:44:27 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000000000200", 0x20) [ 1195.501611][T26180] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1195.561538][T26185] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:44:28 executing program 0: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x200000, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x0, 0x3, 0x4}}, 0x2e) 03:44:28 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x200a00, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000040)=""/1) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x123, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fcbf9ea3fdafc11f58034c12", @ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRES64=r1, @ANYRES16=r1], @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYPTR64, @ANYPTR64], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="bbb69b15290a697dcd9291173b6b99cb2e834263ba30dee7bc5ec38b32e6074c00dee0a6829beff0729a9a906b57dfb8b3a8419663b61f79a80972e2ea84d3b1d1da55548fa0ad49b5203b54ff1a86f5b9dc600eba2215e64fa11c8bfba93283510f89b74140080e2d59dd5cf8c98b905aa348e2bf2181d6cbacba3bddfc884efa60df9a5ec2cc9ae82c65a624b8d2c3509c4598a36b6815", @ANYRES32=r0, @ANYRES16=r1, @ANYRES16=r0, @ANYRESHEX], @ANYRES16=r0, @ANYRES16=r1, @ANYBLOB="c8baa5aee0af57771d40b8bec568fdae6f08e092ecde954f18e5de4e2428b3145783aae4ec75b91fba2d5fddb2d05ac7a6bd7f549c175dc35b74777e53627973b7e502a45db63d1325aaec33c1d291d56cad65c26d27a148e00a3a9788a9a2f2748f01efe7cade54f575035c23ef1d95c300877da2e3fa68edf7c0ec3636c91410c6ba0d3c07252f9e523864aed930b62cbb49822a3b12c70e9a59da4b4f6bf6cda2758f4f702033c06868e09f415a57541d1b0ccfc01a8ff650003bd94a773ef5cbcc20462eff7e2f7c9be345dc60d729f3299dbbaae8f01c90c933e64742e969ad381f7764ae59c32e2a63999c7619f6fbfe0dbc6b5840384d7f"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)) 03:44:28 executing program 3: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x3}}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @connect}], 0xffffff76) 03:44:28 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000002f4080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000fffffffffffff00000000000", 0x20) 03:44:28 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000000000300", 0x20) [ 1196.148673][T26199] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1196.170150][T26204] binder: 26200:26204 unknown command -1549877252 03:44:28 executing program 3: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x3}}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @connect}], 0xffffff76) 03:44:28 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000000000600", 0x20) [ 1196.202924][T26207] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1196.220989][T26204] binder: 26200:26204 ioctl c0306201 20000080 returned -22 03:44:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000000000000100000000", 0x20) 03:44:28 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000304080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1196.264283][T26212] binder: 26200:26212 unknown command -1549877252 [ 1196.300482][T26212] binder: 26200:26212 ioctl c0306201 20000080 returned -22 03:44:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000140)=0x0) r3 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x0, 0x2) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f00000001c0)={r3, r0, 0xffffffff}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = getpgid(0xffffffffffffffff) prlimit64(r4, 0xf, 0x0, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400663044000"/20], 0x0, 0x0, 0x0}) [ 1196.380147][T26224] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:44:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000000000000200000000", 0x20) [ 1196.449790][T26232] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1196.558224][T26235] binder: 26234:26235 unknown command 0 [ 1196.607346][T26235] binder: 26234:26235 ioctl c0306201 200000c0 returned -22 03:44:29 executing program 0: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x200000, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x0, 0x3, 0x4}}, 0x2e) 03:44:29 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000000000f00", 0x20) 03:44:29 executing program 3: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @connect}], 0xffffff76) 03:44:29 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000314080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:29 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000000000000300000000", 0x20) 03:44:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000001200)='/dev/snd/pcmC#D#p\x00', 0x1000, 0x200000) sendto(r1, &(0x7f0000001240)="9bf884a16e8ca9491663b35bd206159ce5b821983df84ee5692d85e9adc248b1595379d727b11d14f30b0d74cb34f6b2a649cce53eee04c4388dc93b29211fbd62e9ded07493f5d3e6d3a53187913c639e4a23552b53017ecebb90277226a6fb8ef170473f2641488dab911aa7edaa48e87561705e75d2ab2443", 0x7a, 0x4008000, &(0x7f00000012c0)=@ipx={0x4, 0x5, 0x1, "bec721293ae9", 0x22f4}, 0x80) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000140)=""/4096) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f00000011c0)=0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) syz_open_dev$amidi(&(0x7f0000001180)='/dev/amidi#\x00', 0x2, 0x4c0000) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000001140)) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8, 0x4000) 03:44:29 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000000000000400000000", 0x20) 03:44:29 executing program 3: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @connect}], 0xffffff76) 03:44:29 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000324080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:29 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000000000004000", 0x20) 03:44:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = accept4$packet(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000040)=0x14, 0x80800) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000140)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:44:29 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000000000000600000000", 0x20) 03:44:29 executing program 0: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x200000, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 03:44:29 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000334080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:29 executing program 3: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @connect}], 0xffffff76) 03:44:29 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000000000ffffff9e00", 0x20) 03:44:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x2bf, 0x0, &(0x7f0000001800)=ANY=[@ANYRES16=r0, @ANYBLOB="a377d01d988aa6869eeaa884ccc4131ca2ddf775c6711f640420750b112e505d0de13945d46ee1f45fd79d63b3cf9ff017259f06609d22e4e4129fbda9fb9eca4cc4c3cd20505bdaa34554cbae40eda71e5236a62ff5f2db64b09e2893a8cbd60c5368f257bbe5e89295bb5a3bac4027174db7b74f65dd423bb278f4ebb72dfcd3f8a926756d3a17c81e05bcd21a938b3f9f5d1e642f936de74713302a96c8d8eea9dccc7972855149dca66866c2169e4fe39311db321860532708c15ab6fe5ed8b7ebd22a3bfd39dfd9c0e5bf3b4a9bbaf473e3145f", @ANYPTR=&(0x7f0000001740)=ANY=[@ANYBLOB="5f9edf381748e869adfd9e5379f0303a164a63bdbf26ec07d0c49483eb1ae7a34bd28561dd3bab52879fdb86b4ec4cc80f1b33bfa9f6f5d721855b2acfe0b258657d07fc5d154f6344be7398990d49b8d7b8da0d29fe2dbeb2d077332903f3c406bf3314d3e0ee5183580afa3fdba775bb1c4a6ce29f80c51358c3407359bf", @ANYPTR=&(0x7f00000016c0)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0, @ANYRES64=r0, @ANYRESOCT=r0, @ANYRES32=r0, @ANYRES32=0x0, @ANYRESDEC=r0], @ANYRES16=r0, @ANYRES16=r0], @ANYRES16=r0, @ANYRESDEC=r0, @ANYPTR64, @ANYRES32=r0, @ANYRES64=r0, @ANYRES16=r0, @ANYRES64=r0], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$vsock_dgram(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) 03:44:29 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000000000000a00000000", 0x20) [ 1197.690803][T26295] binder: 26287:26295 unknown command 2007171075 03:44:29 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000000000000000000ec000", 0x20) 03:44:30 executing program 3: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x3}}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @connect}], 0xffffff76) 03:44:30 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000344080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:30 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000000000000c00000000", 0x20) [ 1197.742257][T26295] binder: 26287:26295 ioctl c0306201 20000080 returned -22 [ 1197.774226][T26302] binder: 26287:26302 unknown command 2007171075 03:44:30 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000000000000011c000", 0x20) [ 1197.887911][T26302] binder: 26287:26302 ioctl c0306201 20000080 returned -22 03:44:30 executing program 3: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x3}}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @connect}], 0xffffff76) [ 1198.094484][ C0] net_ratelimit: 14 callbacks suppressed [ 1198.094493][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1198.106047][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:44:30 executing program 0: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x200000, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 03:44:30 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000354080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x1, 0x7, 0xf6fe, 0x6, 0x2, 0x12b, 0x3f0000000000000, 0x6382, 0x1f, 0x9, 0x3f, 0x3, 0x2}, {0x2, 0x7, 0x1, 0x5, 0x80000000, 0x2, 0x7ff, 0x7f, 0x1, 0x8000, 0x0, 0x4, 0x8001}, {0x7ff, 0x81, 0x2, 0x0, 0x2c6ae9d4, 0x8, 0x10001, 0x3, 0xec7, 0xffffffffffffff80, 0x3, 0x7ff, 0x10000}], 0xa83}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0e630c7d5e47651e172f719f4ca3b2e9f5b0c5407a00001000fdffd97f630440"], 0x0, 0x0, 0x0}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x800, 0x0) 03:44:30 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000000000000e00000000", 0x20) 03:44:30 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000000000ffffffc300", 0x20) 03:44:30 executing program 3: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x3}}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @connect}], 0xffffff76) [ 1198.299858][T26338] binder: 26331:26338 ioctl 8048ae66 20000000 returned -22 03:44:30 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000000000000f00000000", 0x20) 03:44:30 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000364080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:30 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000000000fffffff000", 0x20) [ 1198.378557][T26338] binder: 26331:26338 unknown command 2097963790 03:44:30 executing program 3: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x3}}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @connect}], 0xffffff76) [ 1198.425790][T26338] binder: 26331:26338 ioctl c0306201 200000c0 returned -22 [ 1198.494506][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1198.494543][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1198.500327][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1198.514293][T26345] binder: 26331:26345 ioctl 8048ae66 20000000 returned -22 [ 1198.535173][T26338] binder: 26331:26338 unknown command 2097963790 03:44:30 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000000000001000000000", 0x20) 03:44:30 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000374080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1198.557040][T26338] binder: 26331:26338 ioctl c0306201 200000c0 returned -22 03:44:31 executing program 0: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x200000, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 03:44:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:44:31 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000000000000000ff00", 0x20) 03:44:31 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000000000003f00000000", 0x20) 03:44:31 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000384080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:31 executing program 3: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x3}}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @connect}], 0xffffff76) 03:44:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200040, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000140)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x6, @remote}, 0x40, {0x2, 0x4e24, @local}, 'hsr0\x00'}) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ppoll(&(0x7f00000000c0)=[{r2, 0xa00004}, {r3}], 0x2, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:44:31 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f40700000000250000000000000000000000f0ffff00", 0x20) [ 1199.294475][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1199.300322][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1199.306248][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1199.312049][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:44:31 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000000000004000000000", 0x20) 03:44:31 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000394080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:31 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000000000006000000000", 0x20) 03:44:31 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000003a4080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1199.627575][T26410] __nla_validate_parse: 18 callbacks suppressed [ 1199.627612][T26410] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1199.664061][T26411] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:44:32 executing program 0: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x200000, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 03:44:32 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000000025000000000000000000009effffff00", 0x20) 03:44:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x400000, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000040), 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:44:32 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000000000586500000000", 0x20) 03:44:32 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000003b4080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:32 executing program 3: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x3}}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @connect}], 0xffffff76) [ 1200.170263][T26419] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1200.180462][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:44:32 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000003c4080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 1200.232954][T26428] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:44:32 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000000000000008100000000", 0x20) 03:44:32 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000000000c3ffffff00", 0x20) 03:44:32 executing program 2: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2, 0x0) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f00000001c0)=0x7ff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {r1, 0xfff}}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) [ 1200.403473][T26437] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:44:32 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500000000000000ffffa88800000000", 0x20) [ 1200.461693][T26443] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:44:32 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000000000f0ffffff00", 0x20) 03:44:33 executing program 0: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x200000, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 03:44:33 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000003d4080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:33 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x84000) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0x6) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c400000000000020000fdfdffff06630440"], 0x0, 0x0, 0x0}) 03:44:33 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500000000000000ffffff9e00000000", 0x20) 03:44:33 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500"/32, 0x20) 03:44:33 executing program 3: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x3}}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @connect}], 0xffffff76) [ 1201.100839][T26463] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:44:33 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f40700000000250000000000000000000eed00000000", 0x20) 03:44:33 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x8000000003a) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="b10b93", 0x3}], 0x1}, 0x8000) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d09a", 0x2}], 0x1}, 0x0) 03:44:33 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500000000000000000000ffffffffff", 0x20) [ 1201.157714][T26471] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:44:33 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500000000000000fffffff000000000", 0x20) 03:44:33 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000003e4080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:33 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500"/32, 0x20) [ 1201.476872][T26488] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1201.514057][T26491] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:44:34 executing program 0: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x200000, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 03:44:34 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, &(0x7f0000000280)=""/135, 0x74f) syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) openat$dir(0xffffffffffffff9c, &(0x7f0000002900)='./bus\x00', 0x0, 0x0) 03:44:34 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500000000000000ffffffff00000000", 0x20) 03:44:34 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500"/32, 0x20) 03:44:34 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c000000003f4080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:34 executing program 3: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x3}}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @connect}], 0xffffff76) 03:44:34 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500"/32, 0x20) 03:44:34 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xf7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) 03:44:34 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000404080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:34 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f407000000002500000000f0ffffffffffff00000000", 0x20) 03:44:34 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500"/32, 0x20) 03:44:34 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000414080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:35 executing program 0: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x200000, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 03:44:35 executing program 2: r0 = inotify_init1(0x0) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/11, 0xffffff5d) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KDGKBENT(r0, 0x4b46, 0x0) 03:44:35 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000200"/32, 0x20) 03:44:35 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500"/32, 0x20) 03:44:35 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000424080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:35 executing program 3: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x3}}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @connect}], 0xffffff76) 03:44:35 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000434080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:35 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000300"/32, 0x20) 03:44:35 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f407000000002500"/32, 0x20) 03:44:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup/\x00\x00z0\x00\x906\xa3\x95A\x1c\xf5\xee\x8aj\xdf\n\xcb\xf0\xce\xd9,Fj\xbd\xad\x89!\xf9\x00\x9f\x80\xd5\x01)c)\xaa\xba\x92\xe1\xd6\xa6\x0fTA\x16jwl\x1a\x92%\x00\x1dY\xed\x87b_\xc4\x97r\xf68u\xf4~g\x1b\xf3g\x0eI7F\xce\x93\xef\xe1\x91\x81\xe3\xc7*\xdb\x84\x82$\xaa\x8f\xd6 \x98\x81\f\xf4R\x99\xb2\x87#E\xcc\x00\x00\x00\x00s\xed\xff\xc7\xed>Zy\x92\t\xcd\xc8\fN4\x1fn\x99\xd3P!\xb2gR\xdb\xd1\x95`\xadf\xdb($B\x95\xd1\xef\x15\x9ek\b\xc7\x17u<\xcb\xec\xde\x92 \xf1\x01X!y\x8e\f\x1eo\x84o\x12\x1b\x17\xb3\xd7%Mw\xb9[\v\x19B\n\x04\x00\x00\x00n\x86tt\xeb\xb7\xf9r\x82\x16\xac\x12\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\xf5\xf7CT|\xcf\x88\x9c\xe7\xa7\xad\x13Y\xc7\xe7\xc8\xed\xae\xea\x1b\xb4P\x98q\xcc\xeb\xbdw\x9c\xac\xfe`\xe8\xfa\xf6\xdcm\xe5\xc4\xcc\xfa6\xc5\x91\xee\xeaT\x8b\xb8&\x88\xc9w\xab\x9a\xb6\xf3b\x8e\xc4$\x98\x06\xa5\xbb\xa8u\x96\xea@\x83\xc0\xa7\xe2J\x86\xa5\x1a\xcb\xa8\x0e=d\x9d\x10iWO&+Ivu\x8a\xff\xe7s\xf5 \xd7\x0e\x1b\xd0\x13\xa1m\xf8\xf7|\xc7\xd7\xa7\xb3CGI\x00\x1e\xf9>\xecR}\xf8\x82\xdbg\x97\x98\xf7\xe2l\x1d\xc7\xa0uv\xc8\x9c\xd5\x90\x01\xe3-\xfdn\xe8\xcd\xbc\v\xd2\xfd\xf2aj\x9dS\x1e\xc21\tz;\x82_3\x1e\v\x04_\xdf\xa3Y\xbe\xb6\x8d\t\xa5\xe7\x1c~\v\xbe\x80\xd6\x1f/h.\x8d\xd2\x17^\x00\x00\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000040)=""/91, 0x5b}], 0x1, 0x0) 03:44:35 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21531d200050603402c00000000444080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 03:44:35 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f3414f9f4070000000025000000000400"/32, 0x20) [ 1203.236766][T26575] ================================================================== [ 1203.245396][T26575] BUG: KASAN: null-ptr-deref in css_task_iter_advance+0x240/0x540 [ 1203.253212][T26575] Read of size 4 at addr 0000000000000004 by task syz-executor.2/26575 [ 1203.261443][T26575] [ 1203.263779][T26575] CPU: 1 PID: 26575 Comm: syz-executor.2 Not tainted 5.2.0-rc3-next-20190607 #11 [ 1203.272881][T26575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1203.282936][T26575] Call Trace: [ 1203.286231][T26575] dump_stack+0x172/0x1f0 [ 1203.290575][T26575] ? css_task_iter_advance+0x240/0x540 [ 1203.296034][T26575] ? css_task_iter_advance+0x240/0x540 [ 1203.301495][T26575] __kasan_report.cold+0x5/0x36 [ 1203.306357][T26575] ? css_task_iter_advance+0x240/0x540 [ 1203.311821][T26575] kasan_report+0x12/0x20 [ 1203.316151][T26575] check_memory_region+0x123/0x190 [ 1203.321262][T26575] kasan_check_read+0x11/0x20 [ 1203.325948][T26575] css_task_iter_advance+0x240/0x540 [ 1203.331240][T26575] css_task_iter_start+0x18b/0x230 [ 1203.336367][T26575] __cgroup_procs_start.isra.0+0x32f/0x400 [ 1203.342203][T26575] cgroup_procs_start+0x1e7/0x260 [ 1203.347231][T26575] cgroup_seqfile_start+0xa4/0xd0 [ 1203.352250][T26575] ? cgroup_file_release+0xb0/0xb0 [ 1203.357384][T26575] kernfs_seq_start+0xdc/0x190 [ 1203.362150][T26575] ? kvmalloc_node+0x70/0x100 [ 1203.366834][T26575] seq_read+0x2a7/0x1110 [ 1203.371093][T26575] kernfs_fop_read+0xed/0x560 [ 1203.375770][T26575] ? rw_verify_area+0x126/0x360 [ 1203.380710][T26575] do_iter_read+0x4a4/0x660 [ 1203.385216][T26575] ? dup_iter+0x260/0x260 [ 1203.389554][T26575] vfs_readv+0xf0/0x160 [ 1203.393715][T26575] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 1203.399784][T26575] ? kasan_check_read+0x11/0x20 [ 1203.404656][T26575] ? ksys_dup3+0x3e0/0x3e0 [ 1203.409078][T26575] ? kasan_check_read+0x11/0x20 [ 1203.413941][T26575] ? _copy_to_user+0x118/0x160 [ 1203.418715][T26575] ? __fget_light+0x1a9/0x230 [ 1203.423417][T26575] do_preadv+0x1c4/0x280 [ 1203.427661][T26575] ? do_readv+0x330/0x330 [ 1203.431994][T26575] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1203.437451][T26575] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1203.442913][T26575] ? do_syscall_64+0x26/0x680 [ 1203.447593][T26575] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1203.453655][T26575] ? do_syscall_64+0x26/0x680 [ 1203.458340][T26575] __x64_sys_preadv+0x9a/0xf0 [ 1203.463015][T26575] do_syscall_64+0xfd/0x680 [ 1203.467523][T26575] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1203.473413][T26575] RIP: 0033:0x459279 [ 1203.477309][T26575] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1203.496919][T26575] RSP: 002b:00007f4ee9fa8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1203.505336][T26575] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000459279 [ 1203.513827][T26575] RDX: 0000000000000001 RSI: 0000000020000180 RDI: 0000000000000005 [ 1203.521793][T26575] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1203.529762][T26575] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4ee9fa96d4 [ 1203.537730][T26575] R13: 00000000004c6376 R14: 00000000004dae78 R15: 00000000ffffffff [ 1203.545713][T26575] ================================================================== [ 1203.553766][T26575] Disabling lock debugging due to kernel taint [ 1203.559911][T26575] Kernel panic - not syncing: panic_on_warn set ... [ 1203.566493][T26575] CPU: 1 PID: 26575 Comm: syz-executor.2 Tainted: G B 5.2.0-rc3-next-20190607 #11 [ 1203.576973][T26575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1203.587018][T26575] Call Trace: [ 1203.590313][T26575] dump_stack+0x172/0x1f0 [ 1203.594642][T26575] panic+0x2cb/0x744 [ 1203.598532][T26575] ? __warn_printk+0xf3/0xf3 [ 1203.603120][T26575] ? css_task_iter_advance+0x240/0x540 [ 1203.608576][T26575] ? trace_hardirqs_off+0x62/0x220 [ 1203.613682][T26575] ? trace_hardirqs_off+0x59/0x220 [ 1203.618790][T26575] ? css_task_iter_advance+0x240/0x540 [ 1203.624244][T26575] end_report+0x47/0x4f [ 1203.628391][T26575] ? css_task_iter_advance+0x240/0x540 [ 1203.633849][T26575] __kasan_report.cold+0xe/0x36 [ 1203.638697][T26575] ? css_task_iter_advance+0x240/0x540 [ 1203.644154][T26575] kasan_report+0x12/0x20 [ 1203.648482][T26575] check_memory_region+0x123/0x190 [ 1203.653589][T26575] kasan_check_read+0x11/0x20 [ 1203.658261][T26575] css_task_iter_advance+0x240/0x540 [ 1203.663544][T26575] css_task_iter_start+0x18b/0x230 [ 1203.668659][T26575] __cgroup_procs_start.isra.0+0x32f/0x400 [ 1203.674467][T26575] cgroup_procs_start+0x1e7/0x260 [ 1203.679487][T26575] cgroup_seqfile_start+0xa4/0xd0 [ 1203.684501][T26575] ? cgroup_file_release+0xb0/0xb0 [ 1203.689615][T26575] kernfs_seq_start+0xdc/0x190 [ 1203.694379][T26575] ? kvmalloc_node+0x70/0x100 [ 1203.699058][T26575] seq_read+0x2a7/0x1110 [ 1203.703308][T26575] kernfs_fop_read+0xed/0x560 [ 1203.707980][T26575] ? rw_verify_area+0x126/0x360 [ 1203.712829][T26575] do_iter_read+0x4a4/0x660 [ 1203.717329][T26575] ? dup_iter+0x260/0x260 [ 1203.721658][T26575] vfs_readv+0xf0/0x160 [ 1203.725815][T26575] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 1203.731902][T26575] ? kasan_check_read+0x11/0x20 [ 1203.739997][T26575] ? ksys_dup3+0x3e0/0x3e0 [ 1203.745833][T26575] ? kasan_check_read+0x11/0x20 [ 1203.750968][T26575] ? _copy_to_user+0x118/0x160 [ 1203.755879][T26575] ? __fget_light+0x1a9/0x230 [ 1203.760581][T26575] do_preadv+0x1c4/0x280 [ 1203.764935][T26575] ? do_readv+0x330/0x330 [ 1203.769292][T26575] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1203.774857][T26575] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1203.780685][T26575] ? do_syscall_64+0x26/0x680 [ 1203.786929][T26575] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1203.793016][T26575] ? do_syscall_64+0x26/0x680 [ 1203.797707][T26575] __x64_sys_preadv+0x9a/0xf0 [ 1203.802413][T26575] do_syscall_64+0xfd/0x680 [ 1203.806956][T26575] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1203.812858][T26575] RIP: 0033:0x459279 [ 1203.816758][T26575] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1203.836462][T26575] RSP: 002b:00007f4ee9fa8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1203.844889][T26575] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000459279 [ 1203.852904][T26575] RDX: 0000000000000001 RSI: 0000000020000180 RDI: 0000000000000005 [ 1203.860896][T26575] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1203.868901][T26575] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4ee9fa96d4 [ 1203.876909][T26575] R13: 00000000004c6376 R14: 00000000004dae78 R15: 00000000ffffffff [ 1205.012552][T26575] Shutting down cpus with NMI [ 1205.018283][T26575] Kernel Offset: disabled [ 1205.022614][T26575] Rebooting in 86400 seconds..